last executing test programs: 10m42.196596806s ago: executing program 32 (id=545): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000001, 0x0, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}}], 0x1, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m38.805410033s ago: executing program 33 (id=561): socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 10m28.089619262s ago: executing program 34 (id=606): socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 10m6.581899533s ago: executing program 4 (id=681): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x34, 0x0, 0xfd, 0x5ae9}]}, 0x10) 10m6.491551358s ago: executing program 4 (id=682): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r1, 0x10, 0x2, 0x7fff) 10m5.873946451s ago: executing program 4 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{0x0}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 10m4.549175372s ago: executing program 4 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x5c}}, 0x0) 10m4.481979964s ago: executing program 35 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x5c}}, 0x0) 8m56.410991209s ago: executing program 7 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x6, 0x7, 0x6, 0x6, 0x5daa, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m55.295672595s ago: executing program 7 (id=892): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r5, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xd6}, @ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040001}, 0x400c5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r11 = socket$xdp(0x2c, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r14, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x8b0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x884, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x401, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x0, 0x610, 0x2, 0xb, 0xfb, 0x4, 0x4a29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x81, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x20008, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x590a, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x6, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xffffff7c, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000801, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000200)=0x8080, 0x4) 8m52.15285607s ago: executing program 7 (id=902): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 8m51.570440128s ago: executing program 7 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 8m51.470627294s ago: executing program 7 (id=906): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc0000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m51.429855511s ago: executing program 7 (id=907): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x42800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) process_vm_readv(0x0, &(0x7f00000000c0), 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 8m36.105126289s ago: executing program 36 (id=907): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x42800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) process_vm_readv(0x0, &(0x7f00000000c0), 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 6m23.095862687s ago: executing program 6 (id=1517): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) fchown(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000010) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x8002, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000140)={0x1, 0x2, 0x3}) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000600)={0x4, 0x100009, 0x40000}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x5, 0xa33, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0x1, 0x0, 0x80}}) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 6m22.161467023s ago: executing program 6 (id=1522): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000002000000", 0x18) 6m22.030666635s ago: executing program 6 (id=1524): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xa6, 0x2, 0x9, 0x7, 0x2}, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0xd88}], 0x1, 0x7fff, 0x0) 6m21.530778259s ago: executing program 6 (id=1525): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000240)="f291e941b067a689338fa564f7ec", 0xe}, {&(0x7f0000000280)="973ea9b057d32fcdcaea5a89b98af2f729dac7cb8c2ff17b9b7de1a90e4021fb698f42741dce673bf9a0470358c5d59bdc1c9976ede7a98462d43b5bf3bfb798b06a7e0b8035b0baa85040a3c5342d", 0x4f}, {0x0}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000840)="d0224c1b3190471cb6232da682773830df0397d3fe974850f631635d9bae85a4d670bcbc44f85ba6ff20faebf14a16535eda94ae53f5e72490078aa6620b75612c03ff13e8898317b3531b3333f013fabd2e8d06894e164a7a4e22cebffee35fb7bde885f16efad10164a4933f53684019134318af34", 0x76}, {&(0x7f00000008c0)="ad006ec2f55c8cbd9ab5e9b8644e5fa2df48dcb6ce583c5ba6ae386786c2b84c168c8ecfb9880c679a9bf4c3637cfb722d941519655013f68dc5500039fe55b94cb839edb2d3db8ea4ff80042bf56f0bb10b19b5b811e21e22514dc36b948d6df1abca60ba2499f107f4bc68a55e0357c992a4eef4e75703", 0x78}, {0x0}], 0x8, &(0x7f0000000b40), 0x0, 0xc041}, 0x2000c895) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000001040)=""/4078, &(0x7f0000001000)=0xfee) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f00000000c0)=0x7ea, 0x4) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdc, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff11", @ANYBLOB], 0x28, 0x7ffffff7}}], 0x1, 0x4040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, 0x0, 0x4004000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x5bd7, 0x2}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r6, 0x2) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x4008000, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r10, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m20.694466688s ago: executing program 6 (id=1531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r1 = socket(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0xc804, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1ff) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, 'cpuacct.usage_all\x00'}, {0x20, 'cpuacct.usage_all\x00'}], 0xa, "e8ffd78e300400001d0000000066afdf007359168421"}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101800) read(r6, &(0x7f0000000200)=""/95, 0x5f) 6m19.455378305s ago: executing program 6 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050926bd7000fcdbdf25030000000c0001800600010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x3, 0x39a, &(0x7f00000002c0)="$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") mkdir(&(0x7f00000001c0)='./file0\x00', 0x1b0) r2 = io_uring_setup(0x62d, &(0x7f00000001c0)={0x0, 0xddae, 0x8, 0x3, 0x372}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000000000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4010, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r7, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) close_range(r2, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x40, 0x43) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) acct(&(0x7f0000000140)='./file0\x00') 6m19.454703515s ago: executing program 37 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050926bd7000fcdbdf25030000000c0001800600010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") mkdir(&(0x7f00000001c0)='./file0\x00', 0x1b0) r2 = io_uring_setup(0x62d, &(0x7f00000001c0)={0x0, 0xddae, 0x8, 0x3, 0x372}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000000000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4010, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r7, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) close_range(r2, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x40, 0x43) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) acct(&(0x7f0000000140)='./file0\x00') 3m0.168106296s ago: executing program 8 (id=2718): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000100100000e000000180000000003"], 0x28}, 0xfc40) 3m0.149792449s ago: executing program 8 (id=2719): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000280), 0x1, 0x3) 3m0.129877843s ago: executing program 8 (id=2720): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000600)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0xd034, 0x5, 0x4, 0xd}, 0x10) 3m0.107837766s ago: executing program 8 (id=2722): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x28000, 0x0) 3m0.071857592s ago: executing program 8 (id=2724): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x32, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) r8 = socket(0xa, 0x3, 0x87) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0xfffffffa}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) 2m59.870444046s ago: executing program 8 (id=2728): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000ac0)=@generic={0x1, 0xfffffffffffffffa, 0x8}) 2m59.864307457s ago: executing program 38 (id=2728): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000ac0)=@generic={0x1, 0xfffffffffffffffa, 0x8}) 2m8.810746691s ago: executing program 0 (id=4041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1840000001000000000400000edcb35f360bdf32", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4d}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0xfe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}}, 0x20}, 0x1, 0x0, 0x0, 0x4040005}, 0x80c0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 2m8.734496794s ago: executing program 0 (id=4042): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r3, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) 2m7.812170628s ago: executing program 0 (id=4067): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xc8, 0x40000) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, 0x0) 2m7.730519891s ago: executing program 0 (id=4069): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 2m7.699683596s ago: executing program 0 (id=4071): ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x3, 0x3, "e51e65", 0xe8, 0xe5}) 2m7.314069251s ago: executing program 0 (id=4077): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122b00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a392f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 2m7.149638718s ago: executing program 39 (id=4077): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 5.482282383s ago: executing program 9 (id=5896): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 5.481788723s ago: executing program 9 (id=5897): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf250400000008000800ac1414aa08000200030000000800"], 0x34}, 0x1, 0x0, 0x0, 0x2400cc04}, 0x0) 5.446585069s ago: executing program 9 (id=5899): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 5.336897027s ago: executing program 9 (id=5901): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x28000, 0x0) 5.299290993s ago: executing program 9 (id=5903): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000140001847d96c0e1e18dc40f01ea7a8a919adabd93"], 0x4c}, 0x1, 0x0, 0x0, 0x400888d}, 0x8000) 5.183479743s ago: executing program 5 (id=5906): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x62, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60120008000000fffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 5.158665437s ago: executing program 5 (id=5909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno', @ANYRESDEC=r3]) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802001003000000100000000000bc00009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x25, 0x2, @void}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 5.066584772s ago: executing program 9 (id=5912): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.066394593s ago: executing program 40 (id=5912): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.293729972s ago: executing program 5 (id=5921): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.24349667s ago: executing program 5 (id=5922): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000001000000000000010"], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.012106769s ago: executing program 5 (id=5924): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 3.745821894s ago: executing program 3 (id=5930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno', @ANYRESDEC=r3]) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802001003000000100000000000bc00009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x25, 0x2, @void}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 3.077142605s ago: executing program 5 (id=5933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x42800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) process_vm_readv(r2, &(0x7f00000000c0), 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 2.898867495s ago: executing program 4 (id=5913): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f00000000c0)}, 0x20) connect$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.856385992s ago: executing program 3 (id=5934): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e21, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@broadcast, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x76, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd25, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) 2.381479652s ago: executing program 1 (id=5936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x400) 2.311554993s ago: executing program 1 (id=5938): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x4, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="bcd494ba", 0x0, 0x9, 0x0, 0x2, 0x0}) 2.241059495s ago: executing program 1 (id=5939): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000100000000007d1402971d3047000000f2145765b234316757d5e667f27ed4e343c533964e6746859fde814c20c9f312661950ce14ddc0b203bf1050dcb2b7b3a6eab1e61b6fa53eff3726eef8fc496e23db17a0352878b349f1e434ac0001000000000000c7960f0e15dea2de48a553e6c8fa82d206958c06889cfbba3aeccbc338e0dd5855b244d2a219a089699d99cf212237d7b20c3960a44b40f6e163ae97d59a1c3fb9be79593e9b59ecc4811cdcc05c2dd8b2e57824368c1ddea35378eb7d76001c731c87d7f111bd336cdbbcf839a2eacc7ece26cc3bf62358432853593fceb66b847d4631c3bce0df61c0d7ce98418f0e", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4080d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xf9, 0x4}, 0x4, 0x8, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 1.947134034s ago: executing program 3 (id=5940): r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x21, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0x1, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x401, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000000000000400000f7400044d97934e4a17c0d547d6d4511a81000", @ANYRES8=r0, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) unshare(0x20000400) io_uring_setup(0x76fd, &(0x7f0000000680)={0x0, 0x644a, 0x2, 0x40001, 0xd4}) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r8 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) geteuid() sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d79"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) 1.345193825s ago: executing program 1 (id=5944): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009400)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005900)}, 0xffff}], 0x2, 0x12112, 0x0) 1.266909568s ago: executing program 2 (id=5946): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) 1.265628309s ago: executing program 4 (id=5947): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="183400000300000000000000000000008520070002000000"], &(0x7f0000000280)='GPL\x00', 0x10001, 0xd3, &(0x7f0000000500)=""/211, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xe, 0x9, 0x10000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000006c0)=[{0x0, 0x1, 0xc, 0x9}, {0x1, 0x3, 0x0, 0x1}, {0x5, 0x2, 0x2, 0x1}, {0x4, 0x2, 0x5, 0x3}, {0x2, 0x5, 0x5, 0x1}, {0x0, 0x5, 0xc, 0x9}, {0x5, 0x4, 0xe, 0xa}, {0x2, 0x5, 0x2, 0x1}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0xdb, 0xf4, &(0x7f0000000800)="4507d667f6abea7c6b6090f00732332477529c13045c2df5462f0bed11e16a4a451b92be58cfea7b36ce44a078287c23270d8ea0e36847aef297a3c9a1ae83891fd2473baf52936c4adb232d9f42f226de60507acf716bd0c74e2ef130f61de4f3444c49286b6b5745dc905571241b4e623655b72255ec2dfafc07dba0fad526bf480fae305ebbc15c5a2b4e9a868440d22fd5a648a0b06411919bfcfe8bafdfb26744f1e36e9752d922360250542db7ab17b488a68aa31109c8355ff2f5bc391986fda653f5ca6dc7560ff27acd1b592b66d2751a918a96e7ef36", &(0x7f0000000900)=""/244, 0x7, 0x0, 0xb1, 0xe7, &(0x7f0000000a00)="3a3e16daa51eabdd46b0b8d967a18b63e6e7826a13de9e7a6bc3142789aebc4946c72b546bfec09bbe2faba5cff135974bfc04d2f24b0f36c0f19ec15b7ed83992ba7660b888d00b03dbfa862007d6a2f9d8c2b6509bc5e8c0eadd6a8644cb6ec8b6eb00052c18c154ea541b6780eabaef32df6ecf063a244981d6cebc726305f16b06f1eeceb6741a0f218962577736de238775f0bfce6095df6b31e53384df86f5bc5a994512b3767e91cc9aa56ab670", &(0x7f0000000ac0)="e11dd2adbd103450ecca001cc8d2fdccaa93e8900636f7d702bb2fc6256d4d682c9a094f4a3501efcbcdfa1b58d06135d1b5ce014f44ccead1561dced7618059b1842cf8e3fd47b17e79caaf1ed8af05efadc51d01d21b10778cc00112048a8262e535438c58756a21633954cc3aa458dad386efa0f882eb8c15811fdd6fb7ef632b7292541024f00c971c2f1e791c9f62135e6887ceef9ebc3493dd40ad86fdc36665a5867997cca4c69e8e755713eb2901289c94b756326444ca551dbc63dd8898c5f4065bc1bc11136a66254fc3d07502395f9b9b1de9d3199f584c2177f303cf3801b935a1", 0x0, 0x0, 0x79}, 0x50) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=0xc3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000060000/0x2000)=nil, 0x2000, 0x1, 0x80050, r1, 0x4733000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000000c0)) 1.150910898s ago: executing program 2 (id=5948): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000200)=0x182c, 0x4) bind$inet6(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x409, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_pidfd_open(r1, 0x0) r5 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) r6 = eventfd(0x3) close_range(r5, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000e0601030000000000000000020000030900020073797a31000000000900020073797a320000000009000200fc287a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000003080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3810746, &(0x7f00000012c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dioread_nolock}, {@noquota}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") preadv2(r4, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000240)=""/214, 0xd6}], 0x3, 0x6, 0x6, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$packet(0x11, 0x3, 0x300) symlink(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') 1.107983995s ago: executing program 2 (id=5949): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r1 = syz_open_procfs(0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000040}, 0x24004004) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x20000090) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.074020571s ago: executing program 3 (id=5950): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e21, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@broadcast, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x76, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd25, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) 1.038987066s ago: executing program 2 (id=5951): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0xa1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0xfffffe01, 0x3}, &(0x7f00000000c0)=0x10) 942.525273ms ago: executing program 2 (id=5952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) 797.412287ms ago: executing program 1 (id=5953): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0) 744.068646ms ago: executing program 1 (id=5954): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000002, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x6f, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x7, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x6, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x2, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x0, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x3, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0xfffffe00, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x2003, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x3, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x40000009, 0x68, 0x7, 0x1ff, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x9, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0xe, 0x981, 0x80000000, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x40, 0x0, 0x1, 0x8002, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x390, 0x1, 0xa, 0x3, 0x4, 0x9, 0x9, 0x37c, 0xd, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x6, 0xd, 0x34ea, 0xfffc, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x4, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x7c, 0x9, 0x40000000, 0x4, 0x10000004, 0x0, 0xd, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x7, 0x100, 0x44, 0x59b, 0x7, 0x2c95, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x400006, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x81, 0x0, 0xae, 0x8, 0x1, 0xfffffeff, 0x6, 0x5, 0x7fff, 0x103, 0x7, 0x8000006, 0x709, 0x2, 0x49, 0x10, 0x7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x4, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0xc, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x2, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0x1c, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x8000004, 0x6, 0x20080000, 0x9, 0x8001, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x101, 0xffef, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0x4000d, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x3, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x8, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x4, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x3, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x0, 0xf, 0x3, 0xe, 0x8, 0x7, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x7, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x1, 0x6, 0xb, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x28f, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x1, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x0, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0xffffffff, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0xfffffff7, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x1, 0x0, 0x6, 0x7, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x6, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x42, 0x3, 0x4, 0x5, 0x5, 0x675, 0x5, 0x8, 0x5, 0x3, 0x8, 0x0, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x5, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0x7, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x4, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x5, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0xf, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0xf, 0x5, 0x7, 0xde, 0x6, 0x89, 0xfffffffd, 0x100, 0x1, 0x9, 0x6, 0x3fe, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x1, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd7}, 0x10311, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 739.103807ms ago: executing program 2 (id=5955): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000100000000007d1402971d3047000000f2145765b234316757d5e667f27ed4e343c533964e6746859fde814c20c9f312661950ce14ddc0b203bf1050dcb2b7b3a6eab1e61b6fa53eff3726eef8fc496e23db17a0352878b349f1e434ac0001000000000000c7960f0e15dea2de48a553e6c8fa82d206958c06889cfbba3aeccbc338e0dd5855b244d2a219a089699d99cf212237d7b20c3960a44b40f6e163ae97d59a1c3fb9be79593e9b59ecc4811cdcc05c2dd8b2e57824368c1ddea35378eb7d76001c731c87d7f111bd336cdbbcf839a2eacc7ece26cc3bf62358432853593fceb66b847d4631c3bce0df61c0d7ce98418f0e", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4080d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xf9, 0x4}, 0x4, 0x8, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 199.645167ms ago: executing program 3 (id=5956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r9, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}}, 0x18) r11 = socket$inet6(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000371f68000000ffffffff00000000", @ANYRES32=r12, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r12, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r11, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @broadcast}}}], 0x20}}], 0x400000000000020, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000000980)={0x7c0, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xccb}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$([]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf57}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff01}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56c1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "ca539f5a28ff0b8008a0d25130645ee9669ec1fb0e5f1511fdbbae6e306bc087464793e201d2f68a6bb44b068d77f8abf8c6cafa5b88c7628f10cdd02cd2f567bbf277436c046b1b8572968c83ec48e8c9360b1f36cfde41a05d66c1df751716da3177ecd14a1691c657c41b8fab9676bdb378915ad42bcac576d0b8d087666ed94313e32950c4cc596474d2758fd7905f5cae517b5bdfa23e70551eb66e659df97510ffb2620a82abbc4fed6bae54cc91e211d56d17bfe0acaced86067bcb2f5a6a7c76901af63df9b5c94a3edf204eced7ea7c"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "e0b0d4d86703a8491401578d11fbb76c8aff192940adb56e50f5bfcedef35683a9e0052dd7a1d02548a9e5d7f6941262d676d8ae3a72a969"}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x204, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "d815fda204f0f926048cdf8426866ef5fef3d1531fc0c30edb685cd301b561d6f7fc716854b3fd2b38b40c5c4d5dd999b14b96f126e2a46a79c907217e9c04b6d74512b808f40ad1ab637f364a948c73667a10ff4262d6cbbba3f0233b0547f16cb8846537538c04feaac9da2f5cd24e75f2abd9a6cafad708bc9f76abdc04e83decdf2e4452ab1b7c313d4fee2085b2177f4c6469ac9356a4bd08259452c5cbcb9afb8fa3e0fe3e"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "61b4c77afa945858b61ea313b9a7987b8a216a119f4af9446e1c1049de2fd5937745cd516eaab4c34c"}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "e06abfe82fb5d85b1e964f808a9e5428fb67a7e8e390a6cb6abb35a578ca217bcb3361ea0b63a243207a58947487ae764ac179e99314a580dacb8f6859143f6378abf6dca200974f7e306c05ad97ac77bd3343ebfa4bfdcac5f699f4d8e19943f97a8ab25b02afa4d0e0ab3e54b8cf3153f5b7880713944dcf2506c3884e3e645b8488877d58c8a591667ab2653ea4fe071e4a61d480fbf5fdbb74d9b289cb9bf39285b38d7c158682f44c752aa49e2a50838243398a68c2d559cda24e74709d8be82a07fc00ea3bad95217327db498a652382a6d1b5611e23f43322220b7380eeee6ae79abedbd34f123ae5e657d2"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "1302e7048057e331365fb515af6e61a190420ad03fd701f97ecf6abc9cb82f10807cee8110f0682d5afdf9f006d0edb7ecaf81ccbea7538f7c0fa6fd7cf6be10da3dad4aa036fe13ad"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x308, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "0430415f16c54edf05bdaf56f0629c5f65213d44b3cec47493fbcecd86a9188546f62993a20c74c4d250827b58d1778868a042e30e39405960dd1646d23dd5aff328f428e50ed729748d43d0497ea3f82aed6e157d4b233b2f065bc855f2925dcca705312185bf0529ff4fa418fb424c127951c4634b174fd156903a2a36ecb4ab27f2ddebfd3ad0523c635d927464a5ce261af6845d02ae83198bdedb21cf3662ccc6453f36f2a1dc9649b6ab197e5b01b7454e4b3064929cccc519cbfa5f7cb76d02d93c900539521df5d4f88e485f860b5aff6829643a3275f98eaef0f6c165db20231cdd20"}, @ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "af5840423e0904c9a33915dfcd35a4a881d417acf01c955b13034fc15fd110a5570169a339d5ba2938401a1266a8bab993a5bcd9beb5b1cc61440f360ce561e12b2af250d65e82a7e170ed70c82d247cf020f6b9d4a5ef7abbb0fe8da3c91191d0079ba68c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x198, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.--$@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@-$![,/$&\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ':/+&:{***\xbe#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-}!%\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x03\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#^\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x20000800}, 0x8890) 0s ago: executing program 3 (id=5957): setuid(0xee00) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _adv: batadv0: Interface activated: batadv_slave_1 [ 595.258464][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.284974][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.306866][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.336381][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.363588][ T28] audit: type=1400 audit(1775958585.297:3600): avc: denied { append } for pid=17810 comm="syz.2.3190" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 595.556729][T17836] syzkaller0: entered promiscuous mode [ 595.570808][T17836] syzkaller0: entered allmulticast mode [ 595.641297][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3205'. [ 595.930423][T17872] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 595.944998][T17872] bond2: entered promiscuous mode [ 595.950224][T17872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.967621][T17872] bond2: (slave bridge3): making interface the new active one [ 595.975222][T17872] bridge3: entered promiscuous mode [ 596.031993][T17876] random: crng reseeded on system resumption [ 596.183089][ T28] audit: type=1326 audit(1775958586.117:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.448506][ T28] audit: type=1326 audit(1775958586.147:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.485099][T17872] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 596.496219][ T28] audit: type=1326 audit(1775958586.157:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.529936][ T28] audit: type=1326 audit(1775958586.157:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.607235][ T28] audit: type=1326 audit(1775958586.157:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.635845][ T28] audit: type=1326 audit(1775958586.157:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.665794][ T28] audit: type=1326 audit(1775958586.157:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.717308][ T28] audit: type=1326 audit(1775958586.157:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.742089][ T28] audit: type=1326 audit(1775958586.167:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17877 comm="syz.9.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 596.870182][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.880703][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.033117][T17937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.043164][T17937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.480924][T17978] loop3: detected capacity change from 0 to 256 [ 597.497723][T17978] FAT-fs (loop3): codepage cp936 not found [ 597.658387][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 597.681954][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 597.695518][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 597.759093][T18001] loop0: detected capacity change from 0 to 256 [ 597.858161][T18001] FAT-fs (loop0): codepage cp936 not found [ 597.921704][T18018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.931933][T18018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.188454][T18046] netlink: 'syz.3.3300': attribute type 21 has an invalid length. [ 598.200873][T18046] netlink: 'syz.3.3300': attribute type 1 has an invalid length. [ 598.290221][T18062] netlink: 'syz.2.3306': attribute type 39 has an invalid length. [ 598.350450][T18072] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3310'. [ 598.369040][T18072] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3310'. [ 598.445497][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 598.564864][T18103] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 598.581887][T18103] bond3: entered promiscuous mode [ 598.587414][T18103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.607125][T18103] bond3: (slave bridge4): making interface the new active one [ 598.614904][T18103] bridge4: entered promiscuous mode [ 598.622584][T18103] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 598.678744][T18115] netlink: 'syz.9.3327': attribute type 39 has an invalid length. [ 598.747634][T18125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3332'. [ 598.763793][T18127] batadv_slave_0: entered promiscuous mode [ 598.770020][T18127] batadv_slave_1: entered promiscuous mode [ 598.776294][T18126] batadv_slave_1: left promiscuous mode [ 598.782140][T18126] batadv_slave_0: left promiscuous mode [ 598.873542][T18141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 598.915526][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 599.330355][T18201] netlink: 'syz.1.3358': attribute type 39 has an invalid length. [ 599.842557][T18228] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3370'. [ 599.919419][T18231] 9p: Bad value for 'rfdno' [ 600.470567][T18255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.479830][T18255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.594360][T18263] netlink: 'syz.9.3385': attribute type 39 has an invalid length. [ 600.674584][T18277] netlink: 'syz.1.3392': attribute type 1 has an invalid length. [ 600.691529][T18277] bond4: entered promiscuous mode [ 600.697028][T18277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 600.718719][T18277] bond4: (slave bridge6): making interface the new active one [ 600.726501][T18277] bridge6: entered promiscuous mode [ 600.734191][T18277] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 600.798719][T18292] tipc: Enabled bearer , priority 0 [ 600.808964][T18291] tipc: Disabling bearer [ 600.928825][T18308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.938234][T18308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.994205][T18316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.005152][T18316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.035528][T18320] __nla_validate_parse: 2 callbacks suppressed [ 601.035540][T18320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3412'. [ 601.073139][T18322] tipc: Started in network mode [ 601.078084][T18322] tipc: Node identity da0d0a9372ec, cluster identity 4711 [ 601.085367][T18322] tipc: Enabled bearer , priority 0 [ 601.096534][T18321] tipc: Disabling bearer [ 601.752418][T18353] tipc: Started in network mode [ 601.771047][T18353] tipc: Node identity a2b5fb95abcc, cluster identity 4711 [ 601.779830][T18353] tipc: Enabled bearer , priority 0 [ 601.805573][T18352] tipc: Disabling bearer [ 601.950692][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.961133][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.032762][T18379] netlink: 'syz.9.3438': attribute type 1 has an invalid length. [ 602.055547][T18379] bond0: entered promiscuous mode [ 602.062555][T18379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.086953][T18379] bond0: (slave bridge3): making interface the new active one [ 602.109973][T18379] bridge3: entered promiscuous mode [ 602.116763][T18379] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 602.163146][T18384] tipc: Started in network mode [ 602.168248][T18384] tipc: Node identity 7e70bf017269, cluster identity 4711 [ 602.180299][T18384] tipc: Enabled bearer , priority 0 [ 602.210935][T18383] tipc: Disabling bearer [ 602.411986][ T3419] kernel read not supported for file /vcs (pid: 3419 comm: kworker/1:4) [ 602.802524][T18441] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 602.861074][T18449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3469'. [ 603.285082][T18468] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3474'. [ 603.490047][T18475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.540284][T18475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.574197][T18481] loop0: detected capacity change from 0 to 256 [ 603.595615][T18481] FAT-fs (loop0): codepage cp936 not found [ 604.110065][T18497] netlink: 'syz.9.3487': attribute type 1 has an invalid length. [ 604.127022][T18497] bond1: entered promiscuous mode [ 604.132448][T18497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.149969][T18497] bond1: (slave bridge4): making interface the new active one [ 604.164073][T18497] bridge4: entered promiscuous mode [ 604.181269][T18497] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 604.668083][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 604.668099][ T28] audit: type=1400 audit(1775958594.597:3622): avc: denied { accept } for pid=18524 comm="syz.1.3497" lport=57128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 605.325792][T18582] tipc: Enabled bearer , priority 0 [ 605.396614][T18582] syzkaller0: entered promiscuous mode [ 605.402402][T18582] syzkaller0: entered allmulticast mode [ 605.409034][T18582] tipc: Resetting bearer [ 605.424286][T18580] tipc: Resetting bearer [ 605.438823][T18580] tipc: Disabling bearer [ 605.749661][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'. [ 605.831253][T18637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.841475][T18637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.408248][T18682] tmpfs: Unknown parameter 'usrquota' [ 606.811783][ T28] audit: type=1400 audit(1775958596.737:3623): avc: denied { write } for pid=18727 comm="syz.3.3573" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 606.875334][ T28] audit: type=1400 audit(1775958596.817:3624): avc: denied { read append } for pid=18738 comm="syz.1.3576" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 606.919002][T18742] tipc: Started in network mode [ 606.926276][T18742] tipc: Node identity 9a59b95d57b1, cluster identity 4711 [ 606.933858][T18742] tipc: Enabled bearer , priority 0 [ 606.941033][T18742] syzkaller0: entered promiscuous mode [ 606.947185][T18742] syzkaller0: entered allmulticast mode [ 606.965900][T18742] tipc: Resetting bearer [ 606.980784][T18741] tipc: Resetting bearer [ 606.993165][T18741] tipc: Disabling bearer [ 607.494369][T18784] tipc: Enabling of bearer rejected, failed to enable media [ 607.649412][ T28] audit: type=1400 audit(1775958597.587:3625): avc: denied { mount } for pid=18791 comm="syz.1.3598" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 607.696725][T18795] bridge0: port 1(vlan2) entered blocking state [ 607.703442][T18795] bridge0: port 1(vlan2) entered disabled state [ 607.709988][T18795] vlan2: entered allmulticast mode [ 607.715661][T18795] geneve0: entered allmulticast mode [ 607.721769][T18795] vlan2: entered promiscuous mode [ 607.738661][T18795] geneve0: entered promiscuous mode [ 607.813693][T18807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.840181][T18807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.986132][T18819] tipc: Enabling of bearer rejected, failed to enable media [ 608.217943][T18832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.270624][T18832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.776423][T18873] tipc: Enabling of bearer rejected, failed to enable media [ 608.803121][T18877] netlink: 'syz.2.3634': attribute type 1 has an invalid length. [ 608.933141][ T28] audit: type=1400 audit(1775958598.857:3626): avc: denied { watch_reads } for pid=18883 comm="syz.0.3637" path="/80" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 609.338778][ T28] audit: type=1400 audit(1775958599.277:3627): avc: denied { setopt } for pid=18890 comm="syz.0.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 609.478847][T18912] netlink: 492 bytes leftover after parsing attributes in process `syz.3.3649'. [ 609.555796][T18920] tipc: Enabling of bearer rejected, failed to enable media [ 609.776961][T18949] netlink: 492 bytes leftover after parsing attributes in process `syz.0.3664'. [ 610.052103][T18982] syzkaller1: entered promiscuous mode [ 610.058036][T18982] syzkaller1: entered allmulticast mode [ 610.090916][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3675'. [ 610.110417][T18984] ip6gre1: entered promiscuous mode [ 610.116750][T18984] ip6gre1: entered allmulticast mode [ 610.593173][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.602143][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.040303][T19050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.059139][T19050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.088502][T19058] ieee802154 phy0 wpan0: encryption failed: -22 [ 611.118522][ T28] audit: type=1400 audit(1775958601.057:3628): avc: denied { ioctl } for pid=19061 comm="syz.0.3704" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 611.158772][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 611.169004][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 611.179129][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3706'. [ 611.362275][ T28] audit: type=1400 audit(1775958601.297:3629): avc: denied { bind } for pid=19089 comm="syz.1.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 611.454716][ T28] audit: type=1400 audit(1775958601.397:3630): avc: denied { mount } for pid=19102 comm="syz.3.3720" name="/" dev="ramfs" ino=49666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 611.558748][T19117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.567352][T19117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.170637][T19170] tipc: Enabled bearer , priority 0 [ 613.223198][T19170] syzkaller0: entered promiscuous mode [ 613.229115][T19170] syzkaller0: entered allmulticast mode [ 613.235754][T19170] tipc: Resetting bearer [ 613.248706][T19169] tipc: Resetting bearer [ 613.262331][T19169] tipc: Disabling bearer [ 613.987315][T19231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3773'. [ 614.301221][T19238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.320851][T19238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.875223][T19250] netlink: 480 bytes leftover after parsing attributes in process `syz.1.3780'. [ 615.610321][T19275] bridge1: entered promiscuous mode [ 615.615706][T19275] bridge1: entered allmulticast mode [ 615.662332][ T28] audit: type=1400 audit(1775958605.567:3631): avc: denied { connect } for pid=19264 comm="syz.3.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 616.042557][T19282] netlink: 480 bytes leftover after parsing attributes in process `syz.0.3792'. [ 616.648595][T19314] netlink: 480 bytes leftover after parsing attributes in process `syz.9.3804'. [ 616.893422][T19323] netlink: 'syz.1.3807': attribute type 1 has an invalid length. [ 618.123817][T19349] netlink: 'syz.3.3818': attribute type 17 has an invalid length. [ 618.422592][T19372] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.449840][T19373] syzkaller0: entered promiscuous mode [ 618.461572][T19373] syzkaller0: entered allmulticast mode [ 618.783934][ T28] audit: type=1400 audit(1775958608.727:3632): avc: denied { unmount } for pid=17350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 619.035698][T19402] syzkaller0: entered promiscuous mode [ 619.057735][T19402] syzkaller0: entered allmulticast mode [ 619.231326][T19421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.245623][T19421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.257190][T19421] 9p: Bad value for 'rfdno' [ 619.369879][T19431] netlink: 'syz.2.3853': attribute type 39 has an invalid length. [ 619.896337][T19438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.930861][T19438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.184580][ T28] audit: type=1400 audit(1775958610.127:3633): avc: denied { write } for pid=19439 comm="syz.0.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 620.613524][T19462] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3867'. [ 620.654788][T19462] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3867'. [ 620.854254][ T28] audit: type=1400 audit(1775958610.797:3634): avc: denied { listen } for pid=19488 comm="syz.2.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 620.917298][ T28] audit: type=1400 audit(1775958610.817:3635): avc: denied { accept } for pid=19488 comm="syz.2.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 620.985649][ T28] audit: type=1400 audit(1775958610.817:3636): avc: denied { write } for pid=19488 comm="syz.2.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 621.137788][T19508] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.049088][T19550] netlink: 'syz.0.3899': attribute type 1 has an invalid length. [ 622.099528][T19550] bond1: entered promiscuous mode [ 622.105238][T19550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.200201][ T28] audit: type=1400 audit(1775958612.137:3637): avc: denied { read open } for pid=19575 comm="syz.3.3910" path="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 622.347775][T19594] team0: Device ipvlan2 failed to register rx_handler [ 622.378159][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.389255][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.512727][T19613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.522178][T19613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.959044][T19648] syzkaller0: entered promiscuous mode [ 622.964760][T19648] syzkaller0: entered allmulticast mode [ 623.035238][T19659] netlink: 'syz.0.3948': attribute type 1 has an invalid length. [ 623.070852][T19659] bond2: entered promiscuous mode [ 623.083434][T19659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.105475][ T5079] kernel read not supported for file /678/net/snmp (pid: 5079 comm: kworker/1:12) [ 624.373221][T19721] netlink: 'syz.3.3973': attribute type 39 has an invalid length. [ 624.420099][T19719] syzkaller0: entered promiscuous mode [ 624.426009][T19719] syzkaller0: entered allmulticast mode [ 624.513931][T19728] tmpfs: Bad value for 'mpol' [ 624.549439][T19730] netlink: 'syz.3.3978': attribute type 8 has an invalid length. [ 624.587546][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 624.615266][T19730] bond0: entered promiscuous mode [ 624.627931][T19730] bond_slave_0: entered promiscuous mode [ 624.635232][T19730] bond_slave_1: entered promiscuous mode [ 624.655592][T19730] gretap0: entered promiscuous mode [ 624.661617][T19730] gretap0: left promiscuous mode [ 624.667289][T19730] bond0: left promiscuous mode [ 624.672981][T19730] bond_slave_0: left promiscuous mode [ 624.686453][T19730] bond_slave_1: left promiscuous mode [ 625.183505][T19768] syzkaller0: entered promiscuous mode [ 625.191582][T19768] syzkaller0: entered allmulticast mode [ 625.461883][T19777] team0: Device ipvlan3 failed to register rx_handler [ 625.798287][T19812] team0: Device ipvlan2 is VLAN challenged and team device has VLAN set up [ 626.238634][T19843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.247402][T19843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.264392][ T28] audit: type=1400 audit(1775958616.177:3638): avc: denied { bind } for pid=19837 comm="syz.2.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 626.478282][ T28] audit: type=1400 audit(1775958616.177:3639): avc: denied { setopt } for pid=19837 comm="syz.2.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 626.788260][ T28] audit: type=1400 audit(1775958616.727:3640): avc: denied { ioctl } for pid=19858 comm="syz.3.4031" path="socket:[52572]" dev="sockfs" ino=52572 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 626.924772][ T28] audit: type=1400 audit(1775958616.867:3641): avc: denied { getopt } for pid=19875 comm="syz.3.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.168177][T19895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.189828][T19895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.206477][T19900] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.298866][T19907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4053'. [ 627.727905][T19914] 9p: Bad value for 'rfdno' [ 627.814238][T19928] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4063'. [ 627.824021][T19928] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4063'. [ 627.893482][T19932] syzkaller0: entered promiscuous mode [ 627.899122][T19932] syzkaller0: entered allmulticast mode [ 628.010370][ T28] audit: type=1400 audit(1775958617.947:3642): avc: denied { write } for pid=19938 comm="syz.1.4068" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 628.118439][ T28] audit: type=1326 audit(1775958618.047:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19933 comm="syz.9.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 628.180224][ T28] audit: type=1326 audit(1775958618.047:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19933 comm="syz.9.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 628.228912][ T28] audit: type=1326 audit(1775958618.047:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19933 comm="syz.9.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 628.290044][ T28] audit: type=1326 audit(1775958618.047:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19933 comm="syz.9.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 628.317792][ T28] audit: type=1326 audit(1775958618.047:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19933 comm="syz.9.4066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 628.322249][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4074'. [ 628.425937][T19953] syzkaller0: entered promiscuous mode [ 628.431695][T19953] syzkaller0: entered allmulticast mode [ 628.487990][ T5814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.576859][ T5814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.669132][ T5814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.680122][T19958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.704156][T19958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.835646][ T5814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.987816][T19960] xfrm0 speed is unknown, defaulting to 1000 [ 629.107685][ T5814] bridge_slave_1: left allmulticast mode [ 629.143771][ T5814] bridge_slave_1: left promiscuous mode [ 629.203310][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.266821][ T5814] bridge_slave_0: left allmulticast mode [ 629.311197][ T5814] bridge_slave_0: left promiscuous mode [ 629.375887][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.645517][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.662947][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.673331][ T5814] bond0 (unregistering): Released all slaves [ 629.681507][ T5814] bond1 (unregistering): Released all slaves [ 629.690612][ T5814] bond2 (unregistering): Released all slaves [ 629.698773][T19960] lo speed is unknown, defaulting to 1000 [ 629.782125][T19960] chnl_net:caif_netlink_parms(): no params data found [ 629.870940][T19960] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.892074][T19960] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.902657][T19960] bridge_slave_0: entered allmulticast mode [ 629.909808][T19960] bridge_slave_0: entered promiscuous mode [ 629.928375][T19960] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.946620][T19960] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.954158][T19960] bridge_slave_1: entered allmulticast mode [ 629.961876][T19960] bridge_slave_1: entered promiscuous mode [ 630.018021][T19960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.054003][T19960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.080947][T19960] team0: Port device team_slave_0 added [ 630.109508][T20058] netlink: 184 bytes leftover after parsing attributes in process `syz.9.4107'. [ 630.125859][T19960] team0: Port device team_slave_1 added [ 630.152503][T20058] ip_vti0: entered allmulticast mode [ 630.182302][T19960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.199815][T19960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.230542][T19960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.244653][T19960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.251757][T19960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.280263][T19960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.304356][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c6d3c00: rx timeout, send abort [ 630.312918][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c6d3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 630.361136][ T5814] tipc: Left network mode [ 630.408124][T19960] hsr_slave_0: entered promiscuous mode [ 630.449196][T19960] hsr_slave_1: entered promiscuous mode [ 630.464743][T19960] debugfs: 'hsr0' already exists in 'hsr' [ 630.470580][T19960] Cannot create hsr debugfs directory [ 630.477492][T20091] dummy0: entered promiscuous mode [ 630.486384][ T5814] hsr_slave_0: left promiscuous mode [ 630.492296][ T5814] hsr_slave_1: left promiscuous mode [ 630.498491][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.506325][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.523532][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.535654][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.553795][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 630.567104][ T5814] veth1_macvtap: left promiscuous mode [ 630.572871][ T5814] veth0_macvtap: left promiscuous mode [ 630.578631][ T5814] veth1_vlan: left promiscuous mode [ 630.584027][ T5814] veth0_vlan: left promiscuous mode [ 630.668899][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 630.680053][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 630.726711][T20095] team0: Device ipvlan3 failed to register rx_handler [ 631.628803][T19960] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 631.674938][T19960] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.753772][T19960] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.825202][T19960] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 632.318439][T20177] netlink: 'syz.1.4139': attribute type 17 has an invalid length. [ 633.108881][T19960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.182372][T19960] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.206329][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.213482][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.373461][T19960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 633.383950][T19960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.407236][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.414396][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.571831][T19960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.793913][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 633.793972][ T28] audit: type=1326 audit(1775958623.737:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 633.907681][ T28] audit: type=1326 audit(1775958623.767:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.000611][T19960] veth0_vlan: entered promiscuous mode [ 634.006498][ T28] audit: type=1326 audit(1775958623.777:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.038432][T19960] veth1_vlan: entered promiscuous mode [ 634.071267][T19960] veth0_macvtap: entered promiscuous mode [ 634.082020][ T28] audit: type=1326 audit(1775958623.777:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.117326][T19960] veth1_macvtap: entered promiscuous mode [ 634.136864][T19960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.147426][ T28] audit: type=1326 audit(1775958623.777:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.179761][T19960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.209985][ T28] audit: type=1326 audit(1775958623.777:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.262404][ T28] audit: type=1326 audit(1775958623.777:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.316640][ T5818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.337625][ T5818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.361633][ T28] audit: type=1326 audit(1775958623.777:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.451385][ T28] audit: type=1326 audit(1775958623.777:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20256 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f39a457c819 code=0x7ffc0000 [ 634.629351][T20283] syzkaller0: entered promiscuous mode [ 634.635098][T20283] syzkaller0: entered allmulticast mode [ 634.641128][ T5818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.689430][ T5818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.074002][T20319] syzkaller0: entered promiscuous mode [ 635.130656][T20317] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.144685][T20319] syzkaller0: entered allmulticast mode [ 635.189616][T20324] 9p: Bad value for 'rfdno' [ 635.770551][T20351] syzkaller0: entered promiscuous mode [ 635.783831][T20351] syzkaller0: entered allmulticast mode [ 635.874487][T20368] netlink: 'syz.1.4180': attribute type 1 has an invalid length. [ 635.887137][T20370] netlink: 'syz.5.4179': attribute type 17 has an invalid length. [ 636.732712][T20430] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4197'. [ 636.747773][T20435] syzkaller0: entered promiscuous mode [ 636.761963][T20435] syzkaller0: entered allmulticast mode [ 637.041733][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4208'. [ 637.079322][T20475] tmpfs: Bad value for 'mpol' [ 637.284214][T20486] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4213'. [ 637.441631][T20520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.001058][T20520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.114039][T20657] tmpfs: Bad value for 'mpol' [ 639.300845][ T28] audit: type=1400 audit(1775958629.237:3681): avc: denied { unmount } for pid=15899 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 639.622075][T20700] tmpfs: Bad value for 'mpol' [ 640.605093][T18171] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.673727][ T28] audit: type=1400 audit(1775958630.607:3682): avc: denied { bind } for pid=20760 comm="syz.3.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 640.702954][T20762] netlink: 'syz.3.4273': attribute type 10 has an invalid length. [ 640.720128][T20762] team0: Port device netdevsim1 added [ 640.867059][T20761] xfrm0 speed is unknown, defaulting to 1000 [ 640.940999][T20761] lo speed is unknown, defaulting to 1000 [ 641.078617][T20799] 9p: Bad value for 'wfdno' [ 641.222762][T20761] chnl_net:caif_netlink_parms(): no params data found [ 641.438071][T20826] tmpfs: Bad value for 'mpol' [ 641.496596][T20830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.506021][T20830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.561530][T20761] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.587235][T20761] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.609502][T20761] bridge_slave_0: entered allmulticast mode [ 641.733770][T20761] bridge_slave_0: entered promiscuous mode [ 641.756134][T20761] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.768762][T20761] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.093776][T20761] bridge_slave_1: entered allmulticast mode [ 642.106721][T20761] bridge_slave_1: entered promiscuous mode [ 642.317005][T20761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.334051][T20761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.367488][T20761] team0: Port device team_slave_0 added [ 642.376132][T20761] team0: Port device team_slave_1 added [ 642.405615][T20761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.413646][T20761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.442361][T20852] tmpfs: Bad value for 'mpol' [ 642.473115][T20761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.505789][T20761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.527836][T20761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.556239][T20761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.688521][T20761] hsr_slave_0: entered promiscuous mode [ 642.707653][T20878] 9p: Bad value for 'rfdno' [ 642.708910][T20761] hsr_slave_1: entered promiscuous mode [ 642.723321][T20761] debugfs: 'hsr0' already exists in 'hsr' [ 642.729497][T20761] Cannot create hsr debugfs directory [ 643.118292][T20924] Process accounting resumed [ 643.292830][T20761] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 643.301631][T20761] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 643.311434][T20761] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 643.321089][T20761] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 643.374224][T20761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.388736][T20761] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.399637][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.406773][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.431638][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.438762][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.525596][T20761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.670626][T20761] veth0_vlan: entered promiscuous mode [ 643.679687][T20761] veth1_vlan: entered promiscuous mode [ 643.701660][T20761] veth0_macvtap: entered promiscuous mode [ 643.710462][T20761] veth1_macvtap: entered promiscuous mode [ 643.810675][T20761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.826295][T20761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.847009][ T5814] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.871417][ T5814] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.888335][ T5814] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.922410][ T5814] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.105938][T15458] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.441331][T20987] xfrm0 speed is unknown, defaulting to 1000 [ 644.502580][T20987] lo speed is unknown, defaulting to 1000 [ 644.524874][T21005] bridge2: entered promiscuous mode [ 644.530320][T21005] bridge2: entered allmulticast mode [ 644.670711][T20987] chnl_net:caif_netlink_parms(): no params data found [ 644.755171][T20987] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.762608][T20987] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.770500][T20987] bridge_slave_0: entered allmulticast mode [ 644.778084][T20987] bridge_slave_0: entered promiscuous mode [ 644.791496][T20987] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.799157][T20987] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.806623][T20987] bridge_slave_1: entered allmulticast mode [ 644.814368][T20987] bridge_slave_1: entered promiscuous mode [ 644.855476][T20987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.869749][T20987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.903682][T20987] team0: Port device team_slave_0 added [ 644.912612][T20987] team0: Port device team_slave_1 added [ 645.071972][T20987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.079417][T20987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.184859][T20987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.196488][T20987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.203492][T20987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.230894][T20987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.549217][T20987] hsr_slave_0: entered promiscuous mode [ 645.565902][T20987] hsr_slave_1: entered promiscuous mode [ 645.572538][T20987] debugfs: 'hsr0' already exists in 'hsr' [ 645.578446][T20987] Cannot create hsr debugfs directory [ 645.902893][T21025] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4355'. [ 646.467062][T21048] netlink: 'syz.9.4367': attribute type 39 has an invalid length. [ 646.723311][ T3370] SELinux: failure in sel_netif_sid_slow(), invalid network interface (101) [ 646.742291][ T3370] SELinux: failure in sel_netif_sid_slow(), invalid network interface (98) [ 646.758008][ T3370] SELinux: failure in sel_netif_sid_slow(), invalid network interface (95) [ 646.823213][ T5818] team0: Port device bridge1 removed [ 646.964150][ T5818] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 646.972283][ T5818] bridge4 (unregistering): left promiscuous mode [ 646.981082][ T5818] bridge4 (unregistering): left allmulticast mode [ 647.045078][ T5818] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 647.053365][ T5818] bridge5 (unregistering): left promiscuous mode [ 647.067738][T21064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4371'. [ 647.104527][ T5818] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 647.112876][ T5818] bridge6 (unregistering): left promiscuous mode [ 647.154775][ T5818] bond0 (unregistering): Released all slaves [ 647.162512][ T5818] bond1 (unregistering): Released all slaves [ 647.172827][ T5818] bond2 (unregistering): Released all slaves [ 647.181895][ T5818] bond3 (unregistering): Released all slaves [ 647.190477][ T5818] bond4 (unregistering): Released all slaves [ 647.765828][ T5818] tipc: Left network mode [ 647.805653][T21104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4378'. [ 647.972784][ T5818] hsr_slave_0: left promiscuous mode [ 648.009798][ T5818] hsr_slave_1: left promiscuous mode [ 648.022895][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4381'. [ 648.042413][T21112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4381'. [ 648.550116][T20987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 648.559507][T20987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 648.578966][T20987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 648.591965][T20987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 648.635067][T20987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.646959][T20987] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.666960][T20987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 648.677797][T20987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.736201][T20987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.810806][T20987] veth0_vlan: entered promiscuous mode [ 648.818948][T20987] veth1_vlan: entered promiscuous mode [ 648.836898][T20987] veth0_macvtap: entered promiscuous mode [ 648.844918][T20987] veth1_macvtap: entered promiscuous mode [ 648.856203][T20987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.865320][T20987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.095964][ T3370] lo speed is unknown, defaulting to 1000 [ 649.101752][ T3370] infiniband syz0: ib_query_port failed (-19) [ 649.124105][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.131245][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.214630][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.221771][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.331544][ T4563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.372262][ T4563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.423560][ T4563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.464004][ T4563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.551959][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 649.616511][T21187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4397'. [ 649.680789][T21189] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 649.716702][T21191] syzkaller0: entered promiscuous mode [ 649.749681][T21191] syzkaller0: entered allmulticast mode [ 649.943933][T21213] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4409'. [ 650.113237][T21218] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 650.283249][T21230] syzkaller0: entered promiscuous mode [ 650.288773][T21230] syzkaller0: entered allmulticast mode [ 650.309797][T21232] 9pnet_fd: Insufficient options for proto=fd [ 650.400101][T21240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4422'. [ 650.408648][T21234] syzkaller0: entered promiscuous mode [ 650.416675][T21234] syzkaller0: entered allmulticast mode [ 650.420279][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 650.542402][T21253] netlink: 'syz.9.4427': attribute type 39 has an invalid length. [ 650.651781][T21263] syzkaller0: entered promiscuous mode [ 650.664817][T21263] syzkaller0: entered allmulticast mode [ 650.942501][T21274] syzkaller0: entered promiscuous mode [ 650.957906][T21274] syzkaller0: entered allmulticast mode [ 651.090018][T21278] __nla_validate_parse: 1 callbacks suppressed [ 651.090035][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4435'. [ 651.317908][T21302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.335991][T21302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.594190][T21325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.608205][T21325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.661340][T21334] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4450'. [ 651.721688][T21337] syzkaller0: entered promiscuous mode [ 651.727405][T21337] syzkaller0: entered allmulticast mode [ 652.381181][T21371] ipvlan2: entered allmulticast mode [ 652.428289][T21371] veth0_virt_wifi: entered allmulticast mode [ 652.478183][T21378] netlink: 'syz.5.4462': attribute type 39 has an invalid length. [ 653.490360][T21422] syzkaller0: entered promiscuous mode [ 653.496005][T21422] syzkaller0: entered allmulticast mode [ 654.032969][ T28] audit: type=1400 audit(1775958643.967:3683): avc: denied { map } for pid=21439 comm="syz.5.4489" path="socket:[58495]" dev="sockfs" ino=58495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 654.069691][T21442] tmpfs: Unknown parameter 'usrquota' [ 654.370648][T21474] bond1: entered promiscuous mode [ 654.381377][T21474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.425512][T21474] ipvlan4: entered allmulticast mode [ 654.431084][T21474] bond1: entered allmulticast mode [ 654.452233][T21474] bridge3: entered promiscuous mode [ 654.457978][T21474] bridge3: entered allmulticast mode [ 654.464521][T21474] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 654.588229][T21483] syzkaller0: entered promiscuous mode [ 654.613246][T21483] syzkaller0: entered allmulticast mode [ 655.176817][T21506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.185885][T21506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.199392][T21506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.208769][T21506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.383429][T21513] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4514'. [ 655.615103][T21539] 9p: Could not find request transport: fd0x0000000000000004 [ 656.389255][T21572] netlink: 'syz.2.4540': attribute type 1 has an invalid length. [ 656.412004][T21572] bond4: entered promiscuous mode [ 656.431430][T21572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.472331][T21576] ipvlan2: entered allmulticast mode [ 656.494691][T21576] bond4: entered allmulticast mode [ 656.609241][T21572] bridge5: entered promiscuous mode [ 656.620409][T21572] bridge5: entered allmulticast mode [ 656.635459][T21572] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 656.883981][ T28] audit: type=1400 audit(1775958646.817:3684): avc: denied { create } for pid=21601 comm="syz.2.4553" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 656.923423][ T28] audit: type=1400 audit(1775958646.847:3685): avc: denied { rename } for pid=21601 comm="syz.2.4553" name="file0" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 656.952931][T21607] 9pnet_fd: Insufficient options for proto=fd [ 656.990765][T21611] netlink: 'syz.9.4557': attribute type 1 has an invalid length. [ 657.024987][T21611] bond1: entered promiscuous mode [ 657.040554][T21611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 657.059412][T21615] ipvlan3: entered allmulticast mode [ 657.073475][T21615] bond1: entered allmulticast mode [ 657.098124][T21611] bridge1: entered promiscuous mode [ 657.109098][T21611] bridge1: entered allmulticast mode [ 657.122829][T21611] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 657.271791][T21623] syzkaller0: entered promiscuous mode [ 657.277613][T21623] syzkaller0: entered allmulticast mode [ 657.457167][T21630] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4563'. [ 657.656661][T21653] 9pnet_fd: Insufficient options for proto=fd [ 657.773952][T21663] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4579'. [ 658.407751][T21689] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4591'. [ 658.441752][T21693] syzkaller0: entered promiscuous mode [ 658.447555][T21693] syzkaller0: entered allmulticast mode [ 658.467222][T21695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.477605][T21695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.631722][T21704] vlan0: entered promiscuous mode [ 659.255248][T21717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.264601][T21717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.356342][T21727] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 659.641690][T21751] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 659.685357][T21743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.694766][T21743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.852869][T21763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.866337][T21763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.695721][T21785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.720462][T21785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.820519][ T28] audit: type=1400 audit(1775958650.757:3686): avc: denied { listen } for pid=21792 comm="syz.2.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 660.977903][T21785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.993367][T21785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.024703][T21785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.034448][T21785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.183527][T21807] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 661.344302][T21785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.402125][T21785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.917882][T21825] blktrace: Concurrent blktraces are not allowed on loop2 [ 662.717071][T21839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4650'. [ 662.769765][T21839] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4650'. [ 662.790517][T21841] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 662.804044][T21839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4650'. [ 663.378504][T21867] 9pnet_fd: Insufficient options for proto=fd [ 664.442615][ T28] audit: type=1400 audit(1775958654.377:3687): avc: denied { getopt } for pid=21897 comm="syz.5.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 665.993101][ T28] audit: type=1400 audit(1775958655.917:3688): avc: denied { write } for pid=21964 comm="syz.3.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 666.023443][ T28] audit: type=1400 audit(1775958655.917:3689): avc: denied { ioctl } for pid=21964 comm="syz.3.4705" path="socket:[60534]" dev="sockfs" ino=60534 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 666.076376][T21966] tipc: Started in network mode [ 666.094050][T21966] tipc: Node identity 9ab3e7ccfca3, cluster identity 4711 [ 666.152465][T21966] tipc: Enabled bearer , priority 0 [ 666.199730][T21969] syzkaller0: entered promiscuous mode [ 666.206791][T21969] syzkaller0: entered allmulticast mode [ 666.214167][T21969] tipc: Resetting bearer [ 666.228959][ T5803] tipc: Resetting bearer [ 666.255808][T21958] tipc: Resetting bearer [ 666.297425][T21958] tipc: Disabling bearer [ 667.394089][T22030] syzkaller0: entered promiscuous mode [ 667.418155][T22030] syzkaller0: entered allmulticast mode [ 667.794242][T22056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4739'. [ 667.803545][T22056] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4739'. [ 667.812620][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4739'. [ 668.528060][T22092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.537026][T22092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.937793][T22108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4762'. [ 669.948969][ T5803] bridge_slave_1: left allmulticast mode [ 669.985746][ T5803] bridge_slave_1: left promiscuous mode [ 669.991586][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.067250][ T5803] bridge_slave_0: left allmulticast mode [ 670.079326][ T5803] bridge_slave_0: left promiscuous mode [ 670.093281][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.352485][ T5803] bond1 (unregistering): (slave bond0): Releasing backup interface [ 670.380668][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.411283][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.442291][ T5803] bond0 (unregistering): Released all slaves [ 670.489923][ T5803] bond1 (unregistering): Released all slaves [ 670.525245][ T5803] bond2 (unregistering): Released all slaves [ 670.615576][ T5803] tipc: Left network mode [ 670.637950][T22161] tipc: Enabled bearer , priority 0 [ 670.697209][T22165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4781'. [ 670.736352][T22165] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4781'. [ 670.742980][T22169] syzkaller0: entered promiscuous mode [ 670.758428][T22169] syzkaller0: entered allmulticast mode [ 670.788097][T22169] tipc: Resetting bearer [ 670.816848][T22172] syzkaller0: entered promiscuous mode [ 670.822377][T22172] syzkaller0: entered allmulticast mode [ 670.986050][ T5803] hsr_slave_0: left promiscuous mode [ 671.003308][ T5803] hsr_slave_1: left promiscuous mode [ 671.012199][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.028281][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.066870][ T5803] team0 (unregistering): Port device macvlan1 removed [ 671.136154][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 671.182831][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 671.299904][T22160] tipc: Resetting bearer [ 671.339219][T22160] tipc: Disabling bearer [ 671.562743][T22226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4796'. [ 671.588593][T22226] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4796'. [ 671.717239][T22244] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4802'. [ 671.981032][T22259] syzkaller0: entered promiscuous mode [ 672.010543][T22259] syzkaller0: entered allmulticast mode [ 672.069734][T22271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4810'. [ 672.829750][T22329] syzkaller0: entered promiscuous mode [ 672.853835][T22329] syzkaller0: entered allmulticast mode [ 673.939957][T22361] __nla_validate_parse: 6 callbacks suppressed [ 673.939978][T22361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4836'. [ 673.993219][T22361] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4836'. [ 674.057554][T22361] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4836'. [ 674.384308][T22389] syzkaller0: entered promiscuous mode [ 674.409761][T22389] syzkaller0: entered allmulticast mode [ 675.332541][T22421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4856'. [ 675.399620][T22423] syzkaller0: entered promiscuous mode [ 675.405208][T22423] syzkaller0: entered allmulticast mode [ 675.613689][T22431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.623228][T22431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.846177][T22431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.889130][T22431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.042596][ T28] audit: type=1400 audit(1775958665.977:3690): avc: denied { view } for pid=22447 comm="syz.5.4868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 676.486946][T22472] usb usb7: usbfs: process 22472 (syz.2.4878) did not claim interface 0 before use [ 676.510183][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4879'. [ 676.858275][T22512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.867853][T22512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.901034][T22543] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4910'. [ 677.910263][T22543] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4910'. [ 678.005840][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4917'. [ 678.050395][T22566] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4920'. [ 678.063313][T22566] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 678.114641][T22570] netlink: 'syz.9.4922': attribute type 1 has an invalid length. [ 678.145092][T22570] bond2: entered promiscuous mode [ 678.152865][T22570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.179050][T22570] bond2: (slave bridge2): making interface the new active one [ 678.186696][T22570] bridge2: entered promiscuous mode [ 678.193581][T22570] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 678.354400][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4930'. [ 678.714642][T22602] netlink: 'syz.9.4935': attribute type 1 has an invalid length. [ 678.729324][T22602] bond3: entered promiscuous mode [ 678.744388][T22602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 678.781374][T22602] bond3: (slave bridge3): making interface the new active one [ 678.795317][T22602] bridge3: entered promiscuous mode [ 678.808581][T22602] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 679.078733][T22616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.109395][T22616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.457538][T22639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4951'. [ 679.763759][T22653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.772428][T22653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.129327][T22662] tipc: Started in network mode [ 680.134371][T22662] tipc: Node identity 06d7c7af4ec8, cluster identity 4711 [ 680.141765][T22662] tipc: Enabled bearer , priority 0 [ 680.174527][T22662] syzkaller0: entered promiscuous mode [ 680.180324][T22662] syzkaller0: entered allmulticast mode [ 680.188366][T22662] tipc: Resetting bearer [ 680.217714][T22661] tipc: Resetting bearer [ 680.285765][T22661] tipc: Disabling bearer [ 680.364435][ T28] audit: type=1326 audit(1775958670.307:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.519884][ T28] audit: type=1326 audit(1775958670.327:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.545653][ T28] audit: type=1326 audit(1775958670.347:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.583932][T22672] netlink: 'syz.5.4965': attribute type 1 has an invalid length. [ 680.591919][ T28] audit: type=1326 audit(1775958670.347:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.623615][ T28] audit: type=1326 audit(1775958670.347:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.647795][ T28] audit: type=1326 audit(1775958670.347:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.671736][ T28] audit: type=1326 audit(1775958670.347:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.679628][T22672] bond1: entered promiscuous mode [ 680.696609][ T28] audit: type=1326 audit(1775958670.347:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.772549][T22672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.780028][ T28] audit: type=1326 audit(1775958670.347:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22665 comm="syz.2.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f726d94c819 code=0x7ffc0000 [ 680.828313][T22677] bond1: (slave bridge1): making interface the new active one [ 680.836135][T22677] bridge1: entered promiscuous mode [ 680.842875][T22677] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 681.593088][T22703] ieee802154 phy0 wpan0: encryption failed: -22 [ 681.863884][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'. [ 682.114165][T22724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.126208][T22724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.170550][T22726] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 682.851027][T22758] netlink: 'syz.3.4998': attribute type 4 has an invalid length. [ 682.898991][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4999'. [ 683.150141][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5011'. [ 683.175812][T22789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.184648][T22789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.881447][T22819] blktrace: Concurrent blktraces are not allowed on loop2 [ 684.359364][T22817] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.701013][T22838] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 684.813139][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 684.813159][ T28] audit: type=1400 audit(1775958674.737:3705): avc: denied { lock } for pid=22852 comm="syz.1.5035" path="socket:[63295]" dev="sockfs" ino=63295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 685.147669][T22874] 9pnet_fd: Insufficient options for proto=fd [ 685.378457][T22886] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5047'. [ 685.391654][T22886] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5047'. [ 685.745723][T22897] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5052'. [ 686.100052][T22950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5069'. [ 686.118214][T22950] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.125649][T22950] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.694564][T22976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.705288][T22976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.899054][T22989] netlink: 'syz.9.5079': attribute type 1 has an invalid length. [ 686.945749][T22989] bond4: entered promiscuous mode [ 686.974767][T22989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.158192][T22989] bond4: (slave bridge4): making interface the new active one [ 687.168008][T22989] bridge4: entered promiscuous mode [ 687.196682][T22989] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 687.872020][ T28] audit: type=1400 audit(1775958677.807:3706): avc: denied { write } for pid=23030 comm="syz.2.5087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 688.278940][T23056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.305425][T23056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.342850][T23062] netlink: 'syz.2.5102': attribute type 4 has an invalid length. [ 688.565608][T23072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.593520][T23072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.710801][T23081] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5110'. [ 689.763291][ T5834] batadv1: left allmulticast mode [ 689.776074][ T5834] batadv1: left promiscuous mode [ 689.789885][ T5834] bridge0: port 3(batadv1) entered disabled state [ 689.815198][T23110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.833624][ T5834] bridge_slave_1: left allmulticast mode [ 689.851204][ T5834] bridge_slave_1: left promiscuous mode [ 689.860760][T23110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.879303][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.902315][T23121] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5127'. [ 689.911967][ T5834] bridge_slave_0: left allmulticast mode [ 689.920430][ T5834] bridge_slave_0: left promiscuous mode [ 689.926497][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.995264][ T4582] smc: removing ib device syz1 [ 690.013614][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (116) [ 690.062813][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (116) [ 690.086078][ T5834] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 690.094333][ T5834] bridge1 (unregistering): left promiscuous mode [ 690.129875][ T5834] bond3 (unregistering): (slave bridge2): Releasing active interface [ 690.225725][ T5834] bond0 (unregistering): left promiscuous mode [ 690.231958][ T5834] bond_slave_0: left promiscuous mode [ 690.237492][ T5834] bond_slave_1: left promiscuous mode [ 690.243830][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.252548][ T5834] bond_slave_0: left allmulticast mode [ 690.258727][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.267758][ T5834] bond_slave_1: left allmulticast mode [ 690.273456][ T5834] bond0 (unregistering): Released all slaves [ 690.282959][ T5834] bond1 (unregistering): Released all slaves [ 690.292175][ T5834] bond2 (unregistering): Released all slaves [ 690.300884][ T5834] bond3 (unregistering): Released all slaves [ 690.338033][ T5834] tipc: Left network mode [ 690.344221][ T5834] batadv0: left promiscuous mode [ 690.356920][ T5834] hsr_slave_0: left promiscuous mode [ 690.362679][ T5834] hsr_slave_1: left promiscuous mode [ 690.368678][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.376301][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.431767][ T5834] team0 (unregistering): Port device team_slave_1 removed [ 690.449219][ T5834] team0 (unregistering): Port device team_slave_0 removed [ 690.465202][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5135'. [ 690.511846][ T28] audit: type=1400 audit(1775958680.447:3707): avc: denied { setopt } for pid=23145 comm="syz.2.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 690.810358][T23162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.845202][T23162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.021251][ T5834] IPVS: stop unused estimator thread 0... [ 692.487836][T23200] sd 0:0:1:0: device reset [ 693.190095][T23246] sctp: [Deprecated]: syz.3.5179 (pid 23246) Use of int in max_burst socket option. [ 693.190095][T23246] Use struct sctp_assoc_value instead [ 693.327868][T23254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.337877][T23254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.452189][T23256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.461612][T23256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.516793][T23258] syzkaller0: entered promiscuous mode [ 693.522328][T23258] syzkaller0: entered allmulticast mode [ 693.612108][T23264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.621688][T23264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.059827][T23288] syzkaller0: entered promiscuous mode [ 694.066289][T23288] syzkaller0: entered allmulticast mode [ 694.678908][ T28] audit: type=1400 audit(1775958684.617:3708): avc: denied { connect } for pid=23307 comm="syz.2.5206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 695.140305][T23326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5213'. [ 696.264185][T23340] netlink: 'syz.2.5217': attribute type 4 has an invalid length. [ 696.317808][T23350] syzkaller0: entered promiscuous mode [ 696.334961][T23350] syzkaller0: entered allmulticast mode [ 696.375284][T23354] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 697.714743][T23390] usb usb7: usbfs: process 23390 (syz.2.5240) did not claim interface 0 before use [ 697.774552][T23395] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 697.813689][T23396] syzkaller0: entered promiscuous mode [ 697.853212][T23396] syzkaller0: entered allmulticast mode [ 698.202669][T23433] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 698.856011][T23461] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5268'. [ 699.326295][T23474] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 699.369076][T23481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5278'. [ 699.560583][T23510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.589775][T23510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.619529][T23512] 9pnet_fd: Insufficient options for proto=fd [ 699.660187][T23516] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 699.681641][T23517] netlink: 'syz.5.5292': attribute type 1 has an invalid length. [ 699.696754][T23517] bond2: entered promiscuous mode [ 699.702426][T23517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.722152][T23517] bond2: (slave bridge2): making interface the new active one [ 699.730009][T23517] bridge2: entered promiscuous mode [ 699.736894][T23517] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 700.075586][T23531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5301'. [ 700.301768][T23538] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5306'. [ 700.358473][T23545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.369118][T23545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.441604][T23551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.450252][T23551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.478097][T23557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5313'. [ 700.671241][T23565] 9p: Bad value for 'wfdno' [ 700.925955][T23569] 9pnet_fd: Insufficient options for proto=fd [ 701.059110][T23571] netlink: 'syz.3.5318': attribute type 4 has an invalid length. [ 701.099198][T23578] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5321'. [ 701.263806][T23591] 9p: Bad value for 'wfdno' [ 701.663705][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5331'. [ 701.685070][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5331'. [ 701.755208][ T4578] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.792642][ T4578] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.858449][ T4578] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.875006][T23607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5334'. [ 701.886616][ T4578] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.976895][ T28] audit: type=1400 audit(1775958691.907:3709): avc: denied { read } for pid=23604 comm="syz.2.5333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 702.175053][T23621] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 702.273903][T23627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.274451][T23628] netlink: 'syz.5.5342': attribute type 6 has an invalid length. [ 702.311256][T23627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.346084][T23633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'. [ 702.418144][T23636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.449824][T23636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.581495][T23627] IPv6: Can't replace route, no match found [ 702.600899][T23627] syzkaller0: entered promiscuous mode [ 702.615451][T23627] syzkaller0: entered allmulticast mode [ 702.627796][T23627] tipc: Started in network mode [ 702.641822][T23627] tipc: Node identity 9e10c4c49024, cluster identity 4711 [ 702.659904][T23627] tipc: Enabled bearer , priority 0 [ 702.680502][T23627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.714226][T23627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.727104][T23626] tipc: Resetting bearer [ 702.735740][T23626] tipc: Disabling bearer [ 703.072727][ T5803] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.081610][ T5803] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.094928][ T5803] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.103812][ T5803] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.404004][T23656] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 703.942991][T23665] netlink: 'syz.3.5359': attribute type 4 has an invalid length. [ 704.145128][T23678] __nla_validate_parse: 2 callbacks suppressed [ 704.145151][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5365'. [ 704.201248][T23684] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 704.285418][T23689] netlink: 'syz.2.5370': attribute type 2 has an invalid length. [ 704.293313][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5370'. [ 704.311188][T23692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.330997][T23692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.352581][T23694] netlink: 'syz.2.5372': attribute type 4 has an invalid length. [ 705.051177][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5378'. [ 705.214127][T23716] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 705.324879][T23723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.423667][T23723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.777596][T23733] 9pnet_fd: Insufficient options for proto=fd [ 705.920689][T23741] usb usb7: usbfs: process 23741 (syz.1.5392) did not claim interface 0 before use [ 705.991119][T23755] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5397'. [ 707.105706][T23781] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 707.746736][T23819] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 707.862116][T23823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.883197][T23823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.199500][T23856] netlink: 'syz.5.5441': attribute type 1 has an invalid length. [ 708.227672][T23856] bond3: entered promiscuous mode [ 708.233275][T23856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.362815][T23856] bond3: (slave bridge3): making interface the new active one [ 708.370934][T23856] bridge3: entered promiscuous mode [ 708.382008][T23856] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 708.927989][T23887] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 708.934251][T23887] syzkaller1: owner set to 804 [ 708.972591][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5455'. [ 709.024502][T23895] netlink: 'syz.5.5457': attribute type 1 has an invalid length. [ 709.039939][T23895] bond4: entered promiscuous mode [ 709.045823][T23895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 709.063948][T23895] bond4: (slave bridge4): making interface the new active one [ 709.071619][T23895] bridge4: entered promiscuous mode [ 709.078896][T23895] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 709.371778][T23914] 9p: Bad value for 'wfdno' [ 709.878934][ T28] audit: type=1326 audit(1775958699.707:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.042595][ T28] audit: type=1326 audit(1775958699.707:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.388364][ T28] audit: type=1326 audit(1775958699.707:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.416878][ T28] audit: type=1326 audit(1775958699.707:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.441294][ T28] audit: type=1326 audit(1775958699.707:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.465451][ T28] audit: type=1326 audit(1775958699.707:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.489886][ T28] audit: type=1326 audit(1775958699.887:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.515373][ T28] audit: type=1326 audit(1775958699.887:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.5468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0af6c819 code=0x7ffc0000 [ 710.544657][ T28] audit: type=1400 audit(1775958699.927:3718): avc: denied { setattr } for pid=23927 comm="syz.5.5469" name="" dev="pipefs" ino=52787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 710.912703][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5480'. [ 711.095853][ T5803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.284113][ T5803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.301418][T23957] chnl_net:caif_netlink_parms(): no params data found [ 711.339881][ T5803] team0: Port device netdevsim1 removed [ 711.354575][ T5803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.399534][T23957] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.407036][T23957] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.415202][T23957] bridge_slave_0: entered allmulticast mode [ 711.422036][T23957] bridge_slave_0: entered promiscuous mode [ 711.438402][ T5803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.681208][T23957] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.707635][T23957] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.715017][T23957] bridge_slave_1: entered allmulticast mode [ 711.722034][T23957] bridge_slave_1: entered promiscuous mode [ 711.741238][T23957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.752645][T23957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.776378][T23957] team0: Port device team_slave_0 added [ 711.783291][T23957] team0: Port device team_slave_1 added [ 711.800459][T23957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.807651][T23957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.833804][T23957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.845481][T23957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.852556][T23957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.881138][T23957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.913305][T23957] hsr_slave_0: entered promiscuous mode [ 711.919496][T23957] hsr_slave_1: entered promiscuous mode [ 711.925557][T23957] debugfs: 'hsr0' already exists in 'hsr' [ 711.931383][T23957] Cannot create hsr debugfs directory [ 712.507209][T24053] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.514527][T24053] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.606569][T24055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.654722][T24055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.786285][T24053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.799635][T24053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.968592][T24054] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 712.968672][T24038] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.968711][T24038] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.968896][T24038] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.968947][T24038] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.969976][T24038] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.970042][T24038] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.970172][T24038] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.970302][T24038] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.079267][ T5803] bridge_slave_1: left allmulticast mode [ 713.079339][ T5803] bridge_slave_1: left promiscuous mode [ 713.079601][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.080353][ T5803] bridge_slave_0: left allmulticast mode [ 713.080370][ T5803] bridge_slave_0: left promiscuous mode [ 713.080484][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.470917][ T5803] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 713.471921][ T5803] bridge3 (unregistering): left promiscuous mode [ 713.471938][ T5803] bridge3 (unregistering): left allmulticast mode [ 713.542304][ T5803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.552163][ T5803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.554922][ T5803] bond0 (unregistering): Released all slaves [ 713.563288][ T5803] bond1 (unregistering): Released all slaves [ 713.631000][ T5803] tipc: Left network mode [ 713.637553][ T5803] hsr_slave_0: left promiscuous mode [ 713.638170][ T5803] hsr_slave_1: left promiscuous mode [ 713.638712][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.638728][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.642762][ T5803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.642900][ T5803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.666798][ T5803] veth1_macvtap: left promiscuous mode [ 713.666920][ T5803] veth0_macvtap: left promiscuous mode [ 713.666965][ T5803] veth1_vlan: left promiscuous mode [ 713.667029][ T5803] veth0_vlan: left promiscuous mode [ 714.005214][ T5803] team0 (unregistering): Port device team_slave_1 removed [ 714.016005][ T5803] team0 (unregistering): Port device team_slave_0 removed [ 714.490983][T23957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 714.556552][T23957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 714.590710][T23957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 714.760031][T23957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 714.853619][T24124] 9pnet_fd: Insufficient options for proto=fd [ 714.975636][T24130] loop9: detected capacity change from 0 to 512 [ 714.986999][T24130] EXT4-fs: Ignoring removed bh option [ 714.992578][T24130] EXT4-fs: Ignoring removed mblk_io_submit option [ 715.006934][T24130] EXT4-fs error (device loop9): ext4_iget_extra_inode:5040: inode #15: comm syz.9.5512: corrupted in-inode xattr: e_value size too large [ 715.043133][T24130] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 715.043447][T24130] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5512: couldn't read orphan inode 15 (err -117) [ 715.064532][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 715.064558][ C1] EXT4-fs (loop9): initial error at time 1775958704: ext4_iget_extra_inode:5040: inode 15 [ 715.064596][ C1] EXT4-fs (loop9): last error at time 1775958704: ext4_iget_extra_inode:5040: inode 15 [ 715.095355][T23957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.140740][T24130] loop9: lost filesystem error report for type 5 error -117 [ 715.149080][T24130] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.179294][T23957] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.200164][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.207360][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.247915][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.255273][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.733953][T24140] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 715.844492][T24142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.879266][T24140] bond1 (unregistering): Released all slaves [ 715.887416][T24142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.052235][T23957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.343539][T24161] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.350744][T24161] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.583392][T24161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.631192][T24161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.830716][ T5834] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.898430][ T5834] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.962004][ T5834] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.013166][ T5834] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.054736][ T5834] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.083523][ T5834] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.095370][ T5834] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.105123][ T5834] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.105509][T20761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.140462][T23957] veth0_vlan: entered promiscuous mode [ 717.157829][T23957] veth1_vlan: entered promiscuous mode [ 717.206413][T23957] veth0_macvtap: entered promiscuous mode [ 717.220453][T24170] netlink: 'syz.2.5521': attribute type 6 has an invalid length. [ 717.243983][T23957] veth1_macvtap: entered promiscuous mode [ 717.275634][T23957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.294797][T23957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.468526][ T3443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.477553][ T3443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.505414][ T3443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.567137][T24177] 9pnet_fd: Insufficient options for proto=fd [ 717.623181][ T3443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.939352][ T28] audit: type=1326 audit(1775958707.877:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.002799][ T28] audit: type=1326 audit(1775958707.877:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.053054][ T28] audit: type=1326 audit(1775958707.877:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.102356][ T28] audit: type=1326 audit(1775958707.877:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.171908][ T28] audit: type=1326 audit(1775958707.877:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.223368][ T28] audit: type=1326 audit(1775958707.877:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.247192][ T28] audit: type=1326 audit(1775958707.877:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.281316][ T28] audit: type=1326 audit(1775958707.877:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.307292][ T28] audit: type=1326 audit(1775958707.877:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.332423][ T28] audit: type=1326 audit(1775958707.877:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24191 comm="syz.3.5528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59f8c819 code=0x7ffc0000 [ 718.657181][T24227] netlink: 'syz.1.5542': attribute type 1 has an invalid length. [ 718.671513][T24227] bond1: entered promiscuous mode [ 718.677109][T24227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 718.694201][T24227] bond1: (slave bridge1): making interface the new active one [ 718.701919][T24227] bridge1: entered promiscuous mode [ 718.709051][T24227] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 718.883306][T24239] blktrace: Concurrent blktraces are not allowed on loop4 [ 719.507187][T24250] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 719.544675][T24250] bond1 (unregistering): Released all slaves [ 719.752305][T24257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.791950][T24265] netlink: 'syz.9.5555': attribute type 1 has an invalid length. [ 719.836695][T24257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.893722][T24265] bond5: entered promiscuous mode [ 720.047374][T24265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.085525][T24269] bond5: (slave bridge5): making interface the new active one [ 720.085562][T24269] bridge5: entered promiscuous mode [ 720.087034][T24269] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 720.178008][T24279] loop9: detected capacity change from 0 to 512 [ 720.179506][T24279] EXT4-fs: Ignoring removed bh option [ 720.179568][T24279] EXT4-fs: Ignoring removed mblk_io_submit option [ 720.195285][T24279] EXT4-fs error (device loop9): ext4_iget_extra_inode:5040: inode #15: comm syz.9.5560: corrupted in-inode xattr: e_value size too large [ 720.195374][T24279] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 720.195726][T24279] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5560: couldn't read orphan inode 15 (err -117) [ 720.195760][T24279] loop9: lost filesystem error report for type 5 error -117 [ 720.196789][T24279] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.133176][T24300] loop2: detected capacity change from 0 to 512 [ 721.150639][T24300] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.186321][T24300] EXT4-fs error (device loop2): __ext4_iget:5393: inode #11: block 1: comm syz.2.5567: invalid block [ 721.211834][T24300] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 721.211945][T24300] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5567: couldn't read orphan inode 11 (err -117) [ 721.221221][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 721.221237][ C1] EXT4-fs (loop2): initial error at time 1775958711: __ext4_iget:5393: inode 11: block 1 [ 721.221281][ C1] EXT4-fs (loop2): last error at time 1775958711: __ext4_iget:5393: inode 11: block 1 [ 721.313433][T24300] loop2: lost filesystem error report for type 5 error -117 [ 721.314768][T24300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.781053][T24307] netlink: 'syz.5.5570': attribute type 1 has an invalid length. [ 721.823141][T24307] bond5: entered promiscuous mode [ 721.838272][T24307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.875124][T24309] bond5: (slave bridge5): making interface the new active one [ 721.899282][T24309] bridge5: entered promiscuous mode [ 721.925390][T24309] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 722.353780][T20761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.534979][T24329] 9p: Bad value for 'rfdno' [ 722.589048][T24337] loop1: detected capacity change from 0 to 512 [ 722.600246][T24337] EXT4-fs: Ignoring removed mblk_io_submit option [ 722.620624][T24337] EXT4-fs error (device loop1): __ext4_iget:5393: inode #11: block 1: comm syz.1.5582: invalid block [ 722.631680][T24337] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 722.631827][T24337] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5582: couldn't read orphan inode 11 (err -117) [ 722.640999][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 722.641024][ C0] EXT4-fs (loop1): initial error at time 1775958712: __ext4_iget:5393: inode 11: block 1 [ 722.641071][ C0] EXT4-fs (loop1): last error at time 1775958712: __ext4_iget:5393: inode 11: block 1 [ 722.700010][T24337] loop1: lost filesystem error report for type 5 error -117 [ 722.700764][T24337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.381971][T24370] loop5: detected capacity change from 0 to 512 [ 723.413829][T24370] EXT4-fs: Ignoring removed mblk_io_submit option [ 723.576728][T24376] netlink: 'syz.3.5598': attribute type 29 has an invalid length. [ 723.585232][T24376] netlink: 'syz.3.5598': attribute type 29 has an invalid length. [ 723.823115][T24370] EXT4-fs error (device loop5): __ext4_iget:5393: inode #11: block 1: comm syz.5.5595: invalid block [ 723.973097][T24370] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 723.973251][T24370] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5595: couldn't read orphan inode 11 (err -117) [ 723.994314][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 723.994338][ C1] EXT4-fs (loop5): initial error at time 1775958713: __ext4_iget:5393: inode 11: block 1 [ 723.994379][ C1] EXT4-fs (loop5): last error at time 1775958713: __ext4_iget:5393: inode 11: block 1 [ 724.113576][T24370] loop5: lost filesystem error report for type 5 error -117 [ 724.114145][T24370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.282692][T24400] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 724.343719][T24400] bond6 (unregistering): Released all slaves [ 724.400730][T24402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.450834][T24402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.991834][T24455] syzkaller0: entered promiscuous mode [ 726.008738][T24455] syzkaller0: entered allmulticast mode [ 726.793564][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5636'. [ 726.955559][T24471] loop3: detected capacity change from 0 to 512 [ 727.047844][T24471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.192089][T24486] syzkaller0: entered promiscuous mode [ 727.197827][T24486] syzkaller0: entered allmulticast mode [ 727.395275][T23957] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.234727][T24516] 9p: Bad value for 'rfdno' [ 728.350984][T24524] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 728.362720][T24524] bond1 (unregistering): Released all slaves [ 728.378883][T24523] syzkaller0: entered promiscuous mode [ 728.384433][T24523] syzkaller0: entered allmulticast mode [ 728.417826][T24528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.432775][T24528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.389577][T24554] loop3: detected capacity change from 0 to 512 [ 729.402812][T24554] EXT4-fs: Ignoring removed bh option [ 729.415773][T24554] EXT4-fs: Ignoring removed mblk_io_submit option [ 729.425590][T24554] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.5666: corrupted in-inode xattr: e_value size too large [ 729.439712][T24554] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 729.439883][T24554] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5666: couldn't read orphan inode 15 (err -117) [ 729.449075][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 729.449101][ C0] EXT4-fs (loop3): initial error at time 1775958719: ext4_iget_extra_inode:5040: inode 15 [ 729.449135][ C0] EXT4-fs (loop3): last error at time 1775958719: ext4_iget_extra_inode:5040: inode 15 [ 729.465797][T24560] netlink: 'syz.1.5667': attribute type 1 has an invalid length. [ 729.512439][T24554] loop3: lost filesystem error report for type 5 error -117 [ 729.527141][T24554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.554984][T24560] bond2: entered promiscuous mode [ 729.560432][T24560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.933124][T24586] 9p: Bad value for 'rfdno' [ 731.574915][T23957] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.985870][T24621] loop3: detected capacity change from 0 to 512 [ 733.091765][T24621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.118070][T23957] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.257730][T24642] 9p: Bad value for 'rfdno' [ 733.431346][T24648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5694'. [ 733.506482][T24651] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 733.535275][T24651] bond1 (unregistering): Released all slaves [ 733.599686][T24651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.608416][T24651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.950599][T24682] loop9: detected capacity change from 0 to 512 [ 734.982354][T24682] EXT4-fs: Ignoring removed bh option [ 735.022364][T24682] EXT4-fs: Ignoring removed mblk_io_submit option [ 735.066682][T24682] EXT4-fs error (device loop9): ext4_iget_extra_inode:5040: inode #15: comm syz.9.5706: corrupted in-inode xattr: e_value size too large [ 735.117183][T24682] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 735.117976][T24682] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5706: couldn't read orphan inode 15 (err -117) [ 735.127182][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 735.127208][ C0] EXT4-fs (loop9): initial error at time 1775958725: ext4_iget_extra_inode:5040: inode 15 [ 735.127255][ C0] EXT4-fs (loop9): last error at time 1775958725: ext4_iget_extra_inode:5040: inode 15 [ 735.210919][T24682] loop9: lost filesystem error report for type 5 error -117 [ 735.222807][T24682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.630796][T24714] loop3: detected capacity change from 0 to 1024 [ 736.697194][T24714] raw_sendmsg: syz.3.5718 forgot to set AF_INET. Fix it! [ 737.347889][T20761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.391494][T24731] netlink: 'syz.9.5724': attribute type 5 has an invalid length. [ 737.488673][T24743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.497692][T24743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.909452][T24765] netlink: 'syz.2.5736': attribute type 5 has an invalid length. [ 738.141237][T24792] netlink: 'syz.1.5749': attribute type 5 has an invalid length. [ 738.202934][T24806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.216148][T24806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.377211][T24821] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 738.435172][T24821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.447133][T24821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.866718][T24832] netlink: 'syz.5.5767': attribute type 5 has an invalid length. [ 739.457204][T24854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.469826][T24854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.205715][T24868] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 740.217217][T24868] bond6 (unregistering): Released all slaves [ 740.535242][T24867] netlink: 'syz.3.5780': attribute type 5 has an invalid length. [ 741.540826][T24868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.551101][T24868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.521247][T24943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5787'. [ 742.547728][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5787'. [ 742.603244][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5787'. [ 742.697232][T24939] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5785'. [ 743.907576][T24993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5803'. [ 744.453718][T25050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.502720][T25050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.596206][T25059] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5802'. [ 744.647277][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5815'. [ 744.952739][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 744.952757][ T28] audit: type=1326 audit(1775958734.887:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 744.982478][ T28] audit: type=1326 audit(1775958734.887:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.006249][ T28] audit: type=1326 audit(1775958734.897:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.030209][ T28] audit: type=1326 audit(1775958734.897:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.055070][ T28] audit: type=1326 audit(1775958734.897:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.087025][ T28] audit: type=1326 audit(1775958734.897:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.110774][ T28] audit: type=1326 audit(1775958734.897:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.134704][ T28] audit: type=1326 audit(1775958734.897:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.159254][ T28] audit: type=1326 audit(1775958734.897:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.183004][ T28] audit: type=1326 audit(1775958734.897:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.5.5817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82636ac819 code=0x7ffc0000 [ 745.207892][T25080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5821'. [ 745.274506][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5824'. [ 745.471357][T25099] syzkaller0: entered promiscuous mode [ 745.477107][T25099] syzkaller0: entered allmulticast mode [ 745.484803][T25094] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5827'. [ 746.011782][T25129] netlink: 'syz.5.5840': attribute type 39 has an invalid length. [ 746.328199][T25141] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 746.378227][T25141] bond6 (unregistering): Released all slaves [ 746.438142][T25146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.479778][T25146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.581433][T25219] loop3: detected capacity change from 0 to 512 [ 747.606569][T25219] EXT4-fs: Ignoring removed mblk_io_submit option [ 747.643946][T25219] EXT4-fs error (device loop3): __ext4_iget:5393: inode #11: block 1: comm syz.3.5851: invalid block [ 747.689800][T25219] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 747.690105][T25219] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5851: couldn't read orphan inode 11 (err -117) [ 747.699343][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 747.699359][ C0] EXT4-fs (loop3): initial error at time 1775958737: __ext4_iget:5393: inode 11: block 1 [ 747.699388][ C0] EXT4-fs (loop3): last error at time 1775958737: __ext4_iget:5393: inode 11: block 1 [ 747.742170][T25225] syzkaller0: entered promiscuous mode [ 747.748112][T25225] syzkaller0: entered allmulticast mode [ 747.759447][T25219] loop3: lost filesystem error report for type 5 error -117 [ 747.765644][T25219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.839168][T25229] __nla_validate_parse: 2 callbacks suppressed [ 747.839185][T25229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5855'. [ 748.430516][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5862'. [ 748.477816][T25252] 9pnet_fd: Insufficient options for proto=fd [ 748.728330][T25257] loop9: detected capacity change from 0 to 512 [ 748.784297][T25257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.901224][T20761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.127973][T25276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5873'. [ 749.175447][T25278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5874'. [ 749.291114][T25281] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 749.307630][T25267] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5868'. [ 749.311940][T25289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.330443][T25281] bond6 (unregistering): Released all slaves [ 749.333120][T25289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.627549][T25303] 9pnet_fd: Insufficient options for proto=fd [ 749.869845][T25305] netlink: 'syz.3.5882': attribute type 39 has an invalid length. [ 750.024882][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5885'. [ 750.108948][T25323] netlink: 'syz.9.5889': attribute type 1 has an invalid length. [ 750.150950][T25323] bond6: entered promiscuous mode [ 750.163726][T25323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 750.181169][T25330] bond6: (slave bridge6): making interface the new active one [ 750.189088][T25330] bridge6: entered promiscuous mode [ 750.195464][T25330] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 750.224329][T25333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5893'. [ 750.249592][T25331] syzkaller0: entered promiscuous mode [ 750.255567][T25331] syzkaller0: entered allmulticast mode [ 750.297026][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5897'. [ 750.334108][T25346] netlink: 'syz.9.5899': attribute type 1 has an invalid length. [ 750.359587][T25346] bond7: entered promiscuous mode [ 750.372107][T25346] 8021q: adding VLAN 0 to HW filter on device bond7 [ 750.388655][T25346] ipvlan4: entered allmulticast mode [ 750.394621][T25346] bond7: entered allmulticast mode [ 750.400692][T25346] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5899'. [ 750.614368][T25371] netlink: 'syz.3.5908': attribute type 39 has an invalid length. [ 750.637352][T25375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5910'. [ 750.847688][T25390] 9pnet_fd: Insufficient options for proto=fd [ 750.951569][T25379] chnl_net:caif_netlink_parms(): no params data found [ 750.996468][T25379] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.003682][T25379] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.010978][T25379] bridge_slave_0: entered allmulticast mode [ 751.018189][T25379] bridge_slave_0: entered promiscuous mode [ 751.025516][T25379] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.032634][T25379] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.040042][T25379] bridge_slave_1: entered allmulticast mode [ 751.046736][T25379] bridge_slave_1: entered promiscuous mode [ 751.064988][T25379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.075791][T25379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.097157][T25379] team0: Port device team_slave_0 added [ 751.104422][T25379] team0: Port device team_slave_1 added [ 751.121747][T25379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.128889][T25379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.154972][T25379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.158419][T25403] netlink: 'syz.1.5916': attribute type 39 has an invalid length. [ 751.173472][T25379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.173488][T25379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.206540][T25379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.236463][T25379] hsr_slave_0: entered promiscuous mode [ 751.242682][T25379] hsr_slave_1: entered promiscuous mode [ 751.248713][T25379] debugfs: 'hsr0' already exists in 'hsr' [ 751.254532][T25379] Cannot create hsr debugfs directory [ 751.524782][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 751.524799][ T28] audit: type=1326 audit(1775958741.457:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.571147][ T28] audit: type=1326 audit(1775958741.467:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.597786][T25379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 751.607377][T25379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 751.617015][T25379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 751.627772][T25379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 751.646450][ T28] audit: type=1326 audit(1775958741.497:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.671615][ T28] audit: type=1326 audit(1775958741.497:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.695422][ T28] audit: type=1326 audit(1775958741.497:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.719316][ T28] audit: type=1326 audit(1775958741.497:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.743185][ T28] audit: type=1326 audit(1775958741.497:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.767312][ T28] audit: type=1326 audit(1775958741.497:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.794279][ T28] audit: type=1326 audit(1775958741.497:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.822417][ T28] audit: type=1326 audit(1775958741.497:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.1.5920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f3c9c819 code=0x7ffc0000 [ 751.885741][T25379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.012121][T25379] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.025996][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.033135][ T4584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.044690][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.051859][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.191252][T25379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.279662][T25497] 9pnet_fd: Insufficient options for proto=fd [ 752.567857][T25379] veth0_vlan: entered promiscuous mode [ 752.589970][T25379] veth1_vlan: entered promiscuous mode [ 752.637783][T25379] veth0_macvtap: entered promiscuous mode [ 752.655485][T25379] veth1_macvtap: entered promiscuous mode [ 752.681897][T25379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.727319][T25379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.772461][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.795973][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.819449][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.844963][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.891824][T25541] netlink: 'syz.4.5913': attribute type 39 has an invalid length. [ 755.123355][T25784] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 755.185852][T25784] bond3 (unregistering): Released all slaves [ 755.602282][T25800] __nla_validate_parse: 2 callbacks suppressed [ 755.602304][T25800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5956'. [ 755.660161][T25800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5956'. [ 755.712832][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5956'. [ 755.853232][T25781] ================================================================== [ 755.861369][T25781] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 755.868788][T25781] [ 755.871229][T25781] read to 0xffff888125a88f78 of 4 bytes by task 25788 on cpu 0: [ 755.878987][T25781] atime_needs_update+0x25f/0x3e0 [ 755.884064][T25781] touch_atime+0x4a/0x330 [ 755.888601][T25781] shmem_file_read_iter+0x477/0x540 [ 755.894125][T25781] copy_splice_read+0x471/0x6c0 [ 755.899013][T25781] splice_direct_to_actor+0x28f/0x670 [ 755.904423][T25781] do_splice_direct+0x119/0x1a0 [ 755.909349][T25781] do_sendfile+0x382/0x650 [ 755.913821][T25781] __x64_sys_sendfile64+0x105/0x150 [ 755.919161][T25781] x64_sys_call+0x2dc4/0x3020 [ 755.923980][T25781] do_syscall_64+0x12c/0x370 [ 755.928655][T25781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.935027][T25781] [ 755.937471][T25781] write to 0xffff888125a88f78 of 4 bytes by task 25781 on cpu 1: [ 755.945232][T25781] touch_atime+0x1d7/0x330 [ 755.950224][T25781] shmem_file_read_iter+0x477/0x540 [ 755.955826][T25781] copy_splice_read+0x471/0x6c0 [ 755.961248][T25781] splice_direct_to_actor+0x28f/0x670 [ 755.966668][T25781] do_splice_direct+0x119/0x1a0 [ 755.971559][T25781] do_sendfile+0x382/0x650 [ 755.976588][T25781] __x64_sys_sendfile64+0x105/0x150 [ 755.981992][T25781] x64_sys_call+0x2dc4/0x3020 [ 755.986991][T25781] do_syscall_64+0x12c/0x370 [ 755.991982][T25781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.998002][T25781] [ 756.000431][T25781] value changed: 0x2ef4e7ee -> 0x2f8d7e6e [ 756.006541][T25781] [ 756.008891][T25781] Reported by Kernel Concurrency Sanitizer on: [ 756.015081][T25781] CPU: 1 UID: 0 PID: 25781 Comm: syz.2.5955 Tainted: G W syzkaller #0 PREEMPT(full) [ 756.026329][T25781] Tainted: [W]=WARN [ 756.030211][T25781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 756.040481][T25781] ==================================================================