last executing test programs: 26m3.802241816s ago: executing program 32 (id=54): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2fa0e81ceb39c15dc4dade38ff8c84acefa41ae00f26db2357602ee69ca59662a7ca071443645c1dc73113beeb9b5a73cd0415b0b37839aa6c681110d00fae5cf2c3a6a3bb8fce0c32740df61cef926d51a7eff7b9b3f3163", 0x59}], 0x1) 26m2.803104806s ago: executing program 33 (id=78): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 25m8.58469306s ago: executing program 34 (id=1442): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d", 0x50}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}, {&(0x7f0000000300)="0109da00", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 25m7.415189488s ago: executing program 35 (id=1486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fee33c4ae20000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 25m4.022271935s ago: executing program 36 (id=1540): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, 0x0, 0x24004810) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x3, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 25m3.027145015s ago: executing program 37 (id=1559): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000008c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c35063780", 0x45}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 25m1.615119295s ago: executing program 38 (id=1579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060086ddffff971b028054021780"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 25m0.915230399s ago: executing program 39 (id=1586): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m0.463197331s ago: executing program 40 (id=1593): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 17m56.894810861s ago: executing program 41 (id=5130): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r8 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) sendmsg$rds(r0, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f00000190c0)=""/160, 0xa0}, {&(0x7f0000019180)=""/46, 0x2e}, {&(0x7f00000191c0)=""/19, 0x13}, {&(0x7f0000019300)=""/182, 0xb6}, {&(0x7f00000193c0)=""/103, 0x67}, {&(0x7f0000019440)}, {&(0x7f0000019480)=""/252, 0xfc}, {0x0}, {&(0x7f0000019640)=""/90, 0x5a}], 0x9, &(0x7f000001bbc0), 0x0, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f0000019080)) 17m6.179338376s ago: executing program 42 (id=5304): socket(0xa, 0x3, 0x87) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) socket(0x400000000010, 0x3, 0x0) 16m32.310058122s ago: executing program 43 (id=5410): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d020000000c00000000010000000000000000"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r2, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') unshare(0x40600) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r10, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000012c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r10, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000001, 0x40}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x81) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 16m28.442119398s ago: executing program 44 (id=5421): socket(0xa, 0x3, 0x87) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) socket(0x400000000010, 0x3, 0x0) 15m39.425873137s ago: executing program 45 (id=5496): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d020000000c00000000010000000000000000000902"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r2, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') unshare(0x40600) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000012c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r10, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000001, 0x40}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x81) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 13m43.945038986s ago: executing program 46 (id=5776): r0 = syz_open_dev$hidraw(0x0, 0x1, 0x803) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) setrlimit(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 13m41.299033469s ago: executing program 47 (id=5780): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, 0x0) writev(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 11m27.085239712s ago: executing program 48 (id=7699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}}, 0x0) 11m20.684696344s ago: executing program 49 (id=7774): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m7.892174856s ago: executing program 50 (id=12440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000001) r1 = dup(r0) sendto$inet(r1, &(0x7f0000000080)='M', 0x1, 0x4801, 0x0, 0x0) 2m4.660512406s ago: executing program 51 (id=12495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2m3.811139809s ago: executing program 52 (id=12504): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x40484c1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m2.603023428s ago: executing program 53 (id=12512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x1000, 0x1}, 0x50) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 2m1.337470931s ago: executing program 54 (id=12528): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x80000002}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x103600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 2m0.96005195s ago: executing program 55 (id=12531): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0x1, &(0x7f0000000680)="5ad0b9abb22e0b6fd5110c81a06cc47930de812841a5052d58988f2934a32bd1f40c24eb0d2f037dc172d121c287ae0af8a33085ebea7f11ecde4177c7e1a1e241f48b27a14d320a27316d2fcf7d3b5cc206f4c16e38230d846ebb7f9b4733ad852646ba15ed95acb94c3b455a186f3c61538216e29fa514588e6b8af67ce837ea922e186f4510f7de07816376debfc2a75a67d95706635fbe169f1d3631629f6021cf57fa23417ef6808f305b68665112bd1dc7f073e68c9dbfc8b4dd1b1c7beaf68dfcac9a97c2716bfbe8aeb642fde592596b038e9ec55e4af4dd09f4342a9e0a99016605f0a44e432b05a2d5270cc4db28bf7ce1b27199bdb53bfc4132bf17593b14c6c8bb802abfb355cd51cd12c3370975373d7f49181ba409c7d32467bdea2a61ccd8fb8bf90880cc98e3e5ae82", 0x0}, 0x20) socket$inet(0x2, 0x803, 0x53792800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000ed0000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x5c5a0000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m50.049639142s ago: executing program 56 (id=12583): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, 0x0, &(0x7f0000000100), 0x1004800, &(0x7f0000000580)={[{@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, r1}}, {@gid}, {@mode={'mode', 0x3d, 0xfffffffffffffffc}}, {@gid={'gid', 0x3d, r2}}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x230, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xfb) 1m49.618893644s ago: executing program 57 (id=12599): r0 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c"], 0xffdd) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1m49.548187377s ago: executing program 58 (id=12602): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 1m43.003072272s ago: executing program 59 (id=12718): r0 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, 0x0, 0xc9) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x101c6) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r1, &(0x7f0000000780)='syz1\x00', 0x1ff) 1m37.899020546s ago: executing program 60 (id=12853): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000008c0)={0xc0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r4, 0x407, 0x100004) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(0xffffffffffffffff, &(0x7f00000000c0)=""/154, 0x9a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000480), &(0x7f0000000700)=0x8) close(0xffffffffffffffff) 1m35.970884942s ago: executing program 61 (id=12904): r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 1m35.441500378s ago: executing program 62 (id=12917): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000000101044f0000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000324000e800c0002800500010021000000050001"], 0x88}}, 0x0) 1m34.643134608s ago: executing program 63 (id=12923): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) 1m19.30168616s ago: executing program 64 (id=13189): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000014c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000a80)="2705020059021400e300002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596", 0x82}], 0x1}, 0x9cdc2384056b48b8) 1m13.504412028s ago: executing program 0 (id=13348): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0xc, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x2}, {0x20}, {0x2, 0x0, 0xe}, {}, {0x5, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x3, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000"], 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffdc7, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ae4e0493855aa4ec86ee446cbe4b108991234db0e4fd5080e8045047bdcfa71f2fd5ca08aa9159033525ad544e6f6e17e431a112cfdb86709d8d48e978feead29d38648b589e4ac3ecbc1b96643215a9852279fe1752b4595a793584041728a24b78821cd639ba74b09555dd0e7d37485bef70f2e26704c4c9262a059a5fdf08b25e92139f5b4c56f61e7019eeb7a8c196f27414cb90c582da2f3c0c783abaf8dcbc8475aa8d608ad19941eb656f272fc1a92490ff5a64bfa84a25a8ed3f801abb4c19972777f54cb412b98ea987902d89871dc95e874fc417bd87592556e52766d2a4388f0f"}]}, 0x10040005) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1m13.434116661s ago: executing program 0 (id=13350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d61746368000000200002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 1m13.399319633s ago: executing program 0 (id=13353): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f7274000000000c00078008000840"], 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240965200000000000000000000000000bb060004400e1f00000500070088000000060005404e220000df864207c0599f13dc7876fff3b84ae280466a69abcc5a8dc15a8799a88864bbe6bdaeedb1"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m13.028345711s ago: executing program 0 (id=13367): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TUPLE_MASTER={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m12.963946405s ago: executing program 0 (id=13369): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m12.86364372s ago: executing program 0 (id=13373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x200000d0) 1m11.198391662s ago: executing program 8 (id=13414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x41e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = eventfd2(0xfb, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300)=r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1m11.112307737s ago: executing program 4 (id=13417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000001740)=""/72, 0x48}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2000, 0x0) 1m10.215575291s ago: executing program 4 (id=13436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x8c}}, 0x0) 1m10.137858685s ago: executing program 4 (id=13438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x66e}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 1m10.03982938s ago: executing program 4 (id=13440): sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c8c4}, 0x48c0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x2, {0x1, [{0x0, 0x48}]}}, 0x6) 1m9.939669065s ago: executing program 4 (id=13442): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m9.900870607s ago: executing program 4 (id=13444): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c", 0x55}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 1m9.771249483s ago: executing program 8 (id=13447): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 1m9.752546904s ago: executing program 8 (id=13449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 1m9.690844537s ago: executing program 8 (id=13451): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)={0x14, 0x25, 0x109, 0x70bd22, 0xfffffffc, {0x5c}}, 0x14}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 1m9.621779961s ago: executing program 8 (id=13454): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m9.477410618s ago: executing program 8 (id=13456): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0xffffffde}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbdf2738d603b80ee388400000800ef00090000000800ef000800000008"], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e001073"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), 0x0}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 1m5.510875785s ago: executing program 65 (id=13494): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r0, 0x0) 57.302906043s ago: executing program 66 (id=13373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x200000d0) 54.848545645s ago: executing program 67 (id=13444): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c", 0x55}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 54.300925102s ago: executing program 68 (id=13456): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0xffffffde}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbdf2738d603b80ee388400000800ef00090000000800ef000800000008"], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e001073"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), 0x0}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 30.154587962s ago: executing program 6 (id=13711): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x5d, 0x20000000, 0x1}) io_uring_enter(r2, 0x47b7, 0x0, 0x0, 0x0, 0x0) 29.775630391s ago: executing program 6 (id=13713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.754892371s ago: executing program 6 (id=13718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @empty, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @loopback, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="8b4bd1f7a805", 0x6}], 0x1}}], 0x1, 0x4001015) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 28.147998501s ago: executing program 1 (id=13724): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x19040) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f", 0x16}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xfff1}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4008010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000000000000000050000040900010073797a310000000008000540000000020900020073797a300000000008000a40fffffffc08000840000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x20}) socket$inet6(0xa, 0x5, 0x2) 27.829486247s ago: executing program 6 (id=13727): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 27.799843709s ago: executing program 6 (id=13728): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf25090000000500070003000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 27.683260865s ago: executing program 1 (id=13729): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) fcntl$setstatus(r0, 0x4, 0x800) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) 27.648881126s ago: executing program 1 (id=13730): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x2c020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r5, 0x0, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3}, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000019080)=@file={0x1, './file0\x00'}, 0x6e) setresgid(0xee00, 0x0, 0x0) setresgid(0x0, 0x0, 0xee01) listen(r6, 0x2) 27.479486964s ago: executing program 6 (id=13731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 27.426284697s ago: executing program 69 (id=13731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 26.581435099s ago: executing program 1 (id=13738): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 26.480623984s ago: executing program 1 (id=13739): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@file={0x1, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000003c0)="ca1a4d3e986cf3640f7cb16915038391ab85b30144bc7cbb990efe0b9e0a3f6e63c32784ac151cd52b3c832573ba2b533f55bf3803c15c1531610df40ea5d3f2c0782b7371884f48aa2335439ffc496825acbc6457b1fec8d6ce3e6eac21191f348a0a2cfe2210d254a06c48f2afbc01437fc8ebe9", 0x75}, {&(0x7f0000000440)="204247fab6fd3359cacf7d0c5e6da220cecde126f70e9e85ece52770f7b8df2114e4badc06ded83111fe5de5ec4870f45f4c4fa8af9c7261a2deb4b3eab204c3a55f6d2ffcf460cdd1aa36a6678a2930b994305ffcd827a95aac38aaffb40d21", 0x60}, {&(0x7f0000000180)="46054f58c3d44e8f99f6d50bd3682d5f1f86500e61fc7b", 0x17}], 0x3, &(0x7f0000000580), 0x0, 0x20048000}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)}, {&(0x7f0000000640)}, {&(0x7f0000000680)="962b0dc01815abed38d6b18e5ac7afb798ab523c7f54510e2cedcfa4235d706abfdf47e8bb85e6a3801fb4d4a4d79189ac054ffefc82a28ff6397d87241d8c36585827b822d0fef29cdb3f83140c737bd471144f9a0284c37631ade203", 0x5d}, {0x0}, {&(0x7f00000007c0)}, {0x0}], 0x6, 0x0, 0x0, 0x2000c000}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a40)}, {&(0x7f0000001b40)="82493f3cae64a9e8b289f62f41e0", 0xe}], 0x2, &(0x7f0000001d80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58, 0x4004900}}], 0x3, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 25.683128984s ago: executing program 1 (id=13754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 25.666270185s ago: executing program 70 (id=13754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.975010343s ago: executing program 7 (id=13941): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$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") r0 = fsopen(0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x1000, 0x1, 0x37a, 0x0, r4}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0x2d0, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000240)=0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1962, 0x80, 0x3d98, 0xf7b6, 0x8}, 0x14) r8 = socket(0x1e, 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.584918822s ago: executing program 3 (id=13961): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r1, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x80000001) 3.566380763s ago: executing program 3 (id=13962): syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) 3.529152644s ago: executing program 3 (id=13963): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_timeval(r3, 0x1, 0xa, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.748882633s ago: executing program 7 (id=13970): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 1.619603609s ago: executing program 2 (id=13975): openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.551259602s ago: executing program 7 (id=13977): socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.550880472s ago: executing program 2 (id=13978): r0 = socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 1.500959155s ago: executing program 2 (id=13981): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$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") fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x1000, 0x1, 0x37a, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x2d0, 0x10}) getsockname$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000240)=0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1962, 0x80, 0x3d98, 0xf7b6, 0x8}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 795.98009ms ago: executing program 9 (id=13983): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 695.235676ms ago: executing program 9 (id=13985): memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x84000108) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r2, 0x0, 0x0, 0x1000f4) 609.134849ms ago: executing program 9 (id=13986): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, 0xffffffffffffffff, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x80000001) 578.994781ms ago: executing program 9 (id=13987): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000500)={0x350, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x328, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "b5a5bd8735c9af9792593108aef84829e6c1905c267908fa8dc715e674bb9a3149a328e9e94fffa24524d28f34bf3cfab179f95e3a3a68f672e6300802e3d9"}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "5c529a7291401a5ec095e23ab479254e8ac784ac50237d316b4a33ca99cb420bda288765f5d15aab10275e93d1ce1da72ef48573cb52be73e6800798e021651df32e37cd778cc5af51c8b5b72328560a6230a363186b36596426923aa6c13ec564e0e0a5738690fbda5e9bc31a6168a3ae70d7f49fc27a6d81c2a8b8cffba1e3b9e2eae47c4bd4f9582206151de0e12521d6a7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0xf5, 0x5, "3daad24c17ced6cd12ffe0f2915302c6b02246d9300988465c4702b8102de7add5c3a8b483989412555e85dabd321e0fd8aaab9016b72dca89aedbd5a3c1d30964f67be2586c8480632ac8f3e4d16be7ecc593abe98d6c00d660ab09c05181ebe448c6cea9a0c4d4c8b8eb26bfb4aba5f6147ac647989abab986afc40eaf2db3beff2137df862486b53057ba90710796bfd376a197a9ed34a85fbcfc788f8aef388a3787a14eae2939fac9e62f37312c531fd3b70609d36bf231b25a0b364ac72646fa5b93e6a79f8eed249cc882fa1cf76d3a7545b7f96a6d9d1d10190365867813aa227cc05d676d32b79c8c9308870f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "8dff071834080ba6cbab8c0648053951f1d80d6e8ece3a40c0282d5625a6040e21897196f2d788e18fc774a4fb0314937dc31d59d7be0753b44a52ff03dad5d638be44769ff5e0b3240ed3359c698c729bb9e0f6cf273261a62f1c7646d1b2173c0e3051b48fd5b221936dc344161f32ddb62553c06dd8137d5da9aef47d5a"}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+^\xc9.)\x12\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x26, 0x2, '/proc/sys/net/ipv4/vs/drop_packet\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'i}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c3}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x4810}, 0x10004000) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x10404, 0x0, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 519.163494ms ago: executing program 5 (id=13988): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='b *:333', @ANYRESHEX], 0x9) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xb874, 0x8, 0x10000000, 0x379, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') 484.869866ms ago: executing program 2 (id=13989): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 397.18968ms ago: executing program 5 (id=13990): openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 347.951653ms ago: executing program 5 (id=13991): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r0 = socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 347.403353ms ago: executing program 2 (id=13992): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$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") r0 = fsopen(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000000000018) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0x2d0, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000240)=0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1962, 0x80, 0x3d98, 0xf7b6, 0x8}, 0x14) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 292.020045ms ago: executing program 5 (id=13993): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='b *:333', @ANYRESHEX], 0x9) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x17, r1, 0x1, 0x7, 0x6, @local}, 0x14) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xb874, 0x8, 0x10000000, 0x379, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 258.604457ms ago: executing program 7 (id=13994): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) 258.063397ms ago: executing program 3 (id=13995): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 202.30566ms ago: executing program 5 (id=13996): memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x84000108) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r2, 0x0, 0x0, 0x1000f4) 119.674874ms ago: executing program 3 (id=13997): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, 0xffffffffffffffff, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x80000001) 119.281274ms ago: executing program 7 (id=13998): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/33, 0x0) 47.291777ms ago: executing program 7 (id=13999): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$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") prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2000000000000018) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x1000, 0x1, 0x37a, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)={0x2d0, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) getsockname$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000240)=0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1962, 0x80, 0x3d98, 0xf7b6, 0x8}, 0x14) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 47.041807ms ago: executing program 3 (id=14000): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$eJzs3N9rHNUeAPDvbJJNe9vc7O291x/9YVerGPyRNGnVPgj+QKEvgqAP9TGmaalNG2ki2BJsFKmP0r+g+ij4F/ikL6KCoPiqj4IIRfLS2gcZmd2dZLPZjZs0m22Tzwe2OWfOzJxzZubMnjmnswFsW+XsnyRid0T8HBGD1ejyFcrVPzcX5ib+XJibSCJNX/sjqax3Y2FuIl81325XLTJUiCh8mMS+JvnOXLx0dnxqavJCLT4ye+7tkZmLl548c2789OTpyfNjx44dPTL6zNNjT21IPQeysu59b3r//cffuPrKxImrb377eVbe3bX0GwtzxeVblPLA3ohIG/f3fBt5lqO8/FjWeWRtxb/jDdSFk94uFoQ16YmI7HT1Vdr/YPTE0skbjJc/iCh0tXxA56RpmvavWJrdFXZmgfkU2MKS6HYJgO7Iv/Gz5/j8s8ldkK66/kL1ASir983ap5rSW3nyKZeqz0YDHcq/HAcj4ta1E/O3rkXDeAoAQCd8mfV/nmjW/yvEPXXr/bs2N1SKiP9ExJ6I+G9E/C8i/h9RWffeiLiv3YyT5lMjK/s/P+5cZ9XakvX/nq3NbS3v/y2Oe5d6arGBSv37klNnpiYP147JUPT1Z/HRVfL46qWfPm6VVo6IrO+Xf7L8875grRy/9zYM0J0cnx2/nTrXu34wYm9vs/onizMBSexY9/4HihFnHvtsf6v0f67/KjZgnin9NOLR6vmfj4b655LV5ydHdsTU5OGR/KpY6bsfrrzaKv/bqv8GuP5+xL+aXv+L9S8l9fO1M2vOovfKLx+1fKZZ7/VfTF6vhPNJ23fHZ2cvjEYUk/mVy8eWts3j+fpZ/YcONW//eyL++qS23b6IyC7iAxHxQETlqS0r+4MR8VBEHFrlAHzz4sNvZX+/X1f9Oyur/8k1nf/6QF80LmkW6Dn79Ret8m/v/B+thIZqS5buf2lPq/1WM8/vW60LeFsHDwAAAO4Shcr/gU+SiOq4ye66tGL2HD09M/v4qel3zp+sppWir5CPdA3WjYeO1saG8/hYQ/xIZdw4TdN0ZyU+PDE91ak5daA9u6rtvzC8eC8oFIaHq2m/NYyuPdeVEgIdtaZ5tFZvtAF3pfbav4YPW9Fi+1/5JmBO44ctqtr+ewa7XQ5g8/m9Fti+mrX/yxE3u1AUYJP5/oftS/uH7Wut7b/UoXIAm8/3P2xLy1+JL0Ybr/O3FdhzfGP2szUDkSwd+Z5ul6d/fZtH4Q45mPWBpElSYXHJgV/zH4YotL3n4oYULFZbpz8i2t3h5disg9ntOxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDG+DsAAP//KI/hOg==") fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4f2f, 0x0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x1000, 0x1, 0x37a, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x2d0, 0x10}) getsockname$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000240)=0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x1962, 0x80, 0x3d98, 0xf7b6, 0x8}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 46.304207ms ago: executing program 9 (id=14001): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x60005, 0x1000000}}) 13.780739ms ago: executing program 5 (id=14002): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='b *:333', @ANYRESHEX], 0x9) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xb874, 0x8, 0x10000000, 0x379, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') 13.640409ms ago: executing program 9 (id=14003): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r0 = socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 0s ago: executing program 2 (id=14004): socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) kernel console output (not intermixed with test programs): 487.941744][ T1720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.041609][T16317] netlink: 'syz.9.12557': attribute type 22 has an invalid length. [ 1488.065662][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12557'. [ 1488.092835][T16331] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12559'. [ 1489.819334][T16417] netlink: 'syz.9.12572': attribute type 1 has an invalid length. [ 1490.621105][T16463] syzkaller0: entered promiscuous mode [ 1490.626673][T16463] syzkaller0: entered allmulticast mode [ 1490.697963][ T1573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.825531][ T1573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.882025][T16486] net_ratelimit: 10 callbacks suppressed [ 1490.882061][T16486] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1490.894571][T16486] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1490.942788][ T1573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.968736][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12590'. [ 1491.050155][ T1573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.221781][ T1573] bridge_slave_1: left allmulticast mode [ 1491.240839][ T1573] bridge_slave_1: left promiscuous mode [ 1491.246791][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.280963][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12600'. [ 1491.299914][ T1573] bridge_slave_0: left allmulticast mode [ 1491.311493][ T1573] bridge_slave_0: left promiscuous mode [ 1491.329778][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.493521][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.504040][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.514126][ T1573] bond0 (unregistering): Released all slaves [ 1491.594152][ T1573] hsr_slave_0: left promiscuous mode [ 1491.599948][ T1573] hsr_slave_1: left promiscuous mode [ 1491.624173][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.640948][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.661666][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.669313][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.682707][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12606'. [ 1491.720530][ T1573] veth1_macvtap: left promiscuous mode [ 1491.726197][ T1573] veth0_macvtap: left promiscuous mode [ 1491.732131][ T1573] veth1_vlan: left promiscuous mode [ 1491.740272][ T1573] veth0_vlan: left promiscuous mode [ 1491.816302][T16584] netlink: 'syz.4.12609': attribute type 22 has an invalid length. [ 1491.825754][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12609'. [ 1491.892923][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1491.903747][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1492.083402][T16500] chnl_net:caif_netlink_parms(): no params data found [ 1492.212144][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.228044][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.235669][T16500] bridge_slave_0: entered allmulticast mode [ 1492.242690][T16500] bridge_slave_0: entered promiscuous mode [ 1492.252799][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.260000][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.268256][T16500] bridge_slave_1: entered allmulticast mode [ 1492.281978][T16500] bridge_slave_1: entered promiscuous mode [ 1492.304305][T16540] chnl_net:caif_netlink_parms(): no params data found [ 1492.362372][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.379377][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.461980][T16500] team0: Port device team_slave_0 added [ 1492.487874][T16500] team0: Port device team_slave_1 added [ 1492.549297][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.556571][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.583284][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.595394][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.602645][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.629294][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.670947][T16549] chnl_net:caif_netlink_parms(): no params data found [ 1492.693029][T16540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.700378][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.707940][T16540] bridge_slave_0: entered allmulticast mode [ 1492.714834][T16540] bridge_slave_0: entered promiscuous mode [ 1492.733299][ T1573] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.786569][T16540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.799872][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.810002][T16540] bridge_slave_1: entered allmulticast mode [ 1492.816929][T16540] bridge_slave_1: entered promiscuous mode [ 1492.854161][T16500] hsr_slave_0: entered promiscuous mode [ 1492.860629][T16500] hsr_slave_1: entered promiscuous mode [ 1492.866723][T16500] debugfs: 'hsr0' already exists in 'hsr' [ 1492.872581][T16500] Cannot create hsr debugfs directory [ 1492.888362][ T1573] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.913205][T16540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.924409][T16540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.949283][T16549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.956553][T16549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.964044][T16549] bridge_slave_0: entered allmulticast mode [ 1492.970719][T16549] bridge_slave_0: entered promiscuous mode [ 1492.987194][T16540] team0: Port device team_slave_0 added [ 1492.996642][ T1573] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.008577][T16549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.016338][T16549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.023904][T16549] bridge_slave_1: entered allmulticast mode [ 1493.030726][T16549] bridge_slave_1: entered promiscuous mode [ 1493.047819][T16540] team0: Port device team_slave_1 added [ 1493.063551][T16549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.099628][ T1573] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.113734][T16549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.142493][T16540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1493.149916][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.176776][T16540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.188640][T16540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.195959][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.222834][T16540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.251599][T16549] team0: Port device team_slave_0 added [ 1493.271953][T16549] team0: Port device team_slave_1 added [ 1493.317320][T16549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1493.329676][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.356804][T16549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.410316][T16703] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12628'. [ 1493.410951][T16549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.426585][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.453281][T16549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.473672][T16540] hsr_slave_0: entered promiscuous mode [ 1493.481174][T16540] hsr_slave_1: entered promiscuous mode [ 1493.487718][T16540] debugfs: 'hsr0' already exists in 'hsr' [ 1493.494043][T16540] Cannot create hsr debugfs directory [ 1493.513487][T16703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.524557][T16703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.537070][T16703] bond0 (unregistering): Released all slaves [ 1493.588695][T16549] hsr_slave_0: entered promiscuous mode [ 1493.595685][T16549] hsr_slave_1: entered promiscuous mode [ 1493.602696][T16549] debugfs: 'hsr0' already exists in 'hsr' [ 1493.612462][T16549] Cannot create hsr debugfs directory [ 1493.627117][ T1573] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.704529][ T1573] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.768431][ T1573] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.822859][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12633'. [ 1493.835831][ T1573] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.950330][T16500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1493.983979][T16500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1494.002768][ T1573] bridge_slave_1: left allmulticast mode [ 1494.010704][ T1573] bridge_slave_1: left promiscuous mode [ 1494.025270][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.038922][ T1573] bridge_slave_0: left allmulticast mode [ 1494.047383][ T1573] bridge_slave_0: left promiscuous mode [ 1494.053368][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.074320][ T1573] bridge_slave_1: left allmulticast mode [ 1494.081379][ T1573] bridge_slave_1: left promiscuous mode [ 1494.087349][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.095832][ T1573] bridge_slave_0: left allmulticast mode [ 1494.101902][ T1573] bridge_slave_0: left promiscuous mode [ 1494.107791][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.234369][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.245098][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.255350][ T1573] bond0 (unregistering): Released all slaves [ 1494.304282][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.314401][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.324498][ T1573] bond0 (unregistering): Released all slaves [ 1494.331891][T16500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1494.344598][T16500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1494.378490][ T1573] hsr_slave_0: left promiscuous mode [ 1494.389199][ T1573] hsr_slave_1: left promiscuous mode [ 1494.396642][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.406095][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.414550][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.422158][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.432254][ T1573] hsr_slave_0: left promiscuous mode [ 1494.439946][ T1573] hsr_slave_1: left promiscuous mode [ 1494.446081][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.453781][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.462323][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.470446][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.485914][ T1573] veth1_macvtap: left promiscuous mode [ 1494.491837][ T1573] veth0_macvtap: left promiscuous mode [ 1494.497767][ T1573] veth1_vlan: left promiscuous mode [ 1494.503464][ T1573] veth0_vlan: left promiscuous mode [ 1494.509803][ T1573] veth1_macvtap: left promiscuous mode [ 1494.515683][ T1573] veth0_macvtap: left promiscuous mode [ 1494.521781][ T1573] veth1_vlan: left promiscuous mode [ 1494.527179][ T1573] veth0_vlan: left promiscuous mode [ 1494.611984][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12641'. [ 1494.657176][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1494.670603][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1494.851435][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1494.869226][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1495.010870][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.063227][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.077670][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.084932][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.120122][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.127557][ T689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.208565][T16540] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1495.222822][T16540] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1495.242904][T16540] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1495.263705][T16540] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1495.316901][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.384188][T16540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.396446][T16540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.410965][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.418366][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.427978][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.435190][ T689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.569523][T16500] veth0_vlan: entered promiscuous mode [ 1495.593758][T16549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1495.603625][T16549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1495.615165][T16549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1495.625427][T16549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1495.636218][T16500] veth1_vlan: entered promiscuous mode [ 1495.649583][T16540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.695113][T16500] veth0_macvtap: entered promiscuous mode [ 1495.715913][T16500] veth1_macvtap: entered promiscuous mode [ 1495.749835][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.784413][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.809697][T16549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.823671][ T689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.848168][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.859921][ T689] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.877081][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.884209][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.909710][ T689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.931947][T11235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.939180][T11235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.984821][ T1720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.025554][T16549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1496.071924][T16549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1496.147160][T16540] veth0_vlan: entered promiscuous mode [ 1496.166627][T16540] veth1_vlan: entered promiscuous mode [ 1496.251971][T16540] veth0_macvtap: entered promiscuous mode [ 1496.261670][T16549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.284647][T16540] veth1_macvtap: entered promiscuous mode [ 1496.321745][T16540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.349182][T16540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.368468][ T689] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.394036][ T689] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.425518][ T689] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.453510][ T689] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.549157][T16549] veth0_vlan: entered promiscuous mode [ 1496.567660][ T28] audit: type=1400 audit(2000000352.290:2149): avc: denied { write } for pid=17021 comm="syz.4.12679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1496.593226][T16549] veth1_vlan: entered promiscuous mode [ 1496.634368][T16549] veth0_macvtap: entered promiscuous mode [ 1496.642578][T16549] veth1_macvtap: entered promiscuous mode [ 1496.654492][T16549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.672357][T16549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.697113][ T689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.722154][ T689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.736579][ T689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.760428][ T689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.709759][T17148] xt_socket: unknown flags 0x50 [ 1497.901301][ T689] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.444657][T17242] netlink: 'syz.2.12738': attribute type 22 has an invalid length. [ 1498.485549][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12738'. [ 1498.535982][T17180] chnl_net:caif_netlink_parms(): no params data found [ 1498.664393][T17180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.681311][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.689250][T17180] bridge_slave_0: entered allmulticast mode [ 1498.696720][T17180] bridge_slave_0: entered promiscuous mode [ 1498.703891][T17180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.711747][T17180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.719344][T17180] bridge_slave_1: entered allmulticast mode [ 1498.726386][T17180] bridge_slave_1: entered promiscuous mode [ 1498.785870][T17180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.807375][T17180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.863812][T17180] team0: Port device team_slave_0 added [ 1498.878912][T17180] team0: Port device team_slave_1 added [ 1498.923251][T17180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.940142][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.977847][T17308] netlink: 'syz.2.12754': attribute type 22 has an invalid length. [ 1498.986044][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12754'. [ 1498.995721][T17180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.007368][T17180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.015859][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.051010][T17180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.103028][T17180] hsr_slave_0: entered promiscuous mode [ 1499.109605][T17180] hsr_slave_1: entered promiscuous mode [ 1499.384696][T17364] netlink: 'syz.4.12767': attribute type 22 has an invalid length. [ 1499.392816][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12767'. [ 1499.471180][ T689] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.542881][ T689] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.625394][ T689] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.715342][T17180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1499.747638][T17180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1499.775931][T17425] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12781'. [ 1499.792350][T17180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1499.812960][T17428] netlink: 'syz.3.12782': attribute type 22 has an invalid length. [ 1499.830162][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12782'. [ 1499.842222][T17180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1499.942258][ T689] bridge_slave_1: left allmulticast mode [ 1499.951995][ T689] bridge_slave_1: left promiscuous mode [ 1499.957720][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.987065][T17455] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12787'. [ 1500.016535][ T689] bridge_slave_0: left allmulticast mode [ 1500.026750][ T689] bridge_slave_0: left promiscuous mode [ 1500.035529][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.165529][ T689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.175788][ T689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.186409][ T689] bond0 (unregistering): Released all slaves [ 1500.202956][T17455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.218293][T17455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.238852][T17455] bond0 (unregistering): Released all slaves [ 1500.251504][T17462] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1500.315807][ T689] hsr_slave_0: left promiscuous mode [ 1500.333569][ T689] hsr_slave_1: left promiscuous mode [ 1500.349968][ T689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.370407][ T689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.383329][ T28] audit: type=1400 audit(2000000356.100:2150): avc: denied { ioctl } for pid=17505 comm="syz.3.12795" path="socket:[149602]" dev="sockfs" ino=149602 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1500.415634][ T689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.428261][ T689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.444823][ T689] veth1_macvtap: left promiscuous mode [ 1500.450370][ T689] veth0_macvtap: left promiscuous mode [ 1500.468732][ T689] veth1_vlan: left promiscuous mode [ 1500.478242][ T689] veth0_vlan: left promiscuous mode [ 1500.578847][ T689] team0 (unregistering): Port device team_slave_1 removed [ 1500.592663][ T689] team0 (unregistering): Port device team_slave_0 removed [ 1500.652945][T17524] syz.3.12795 (17524) used obsolete PPPIOCDETACH ioctl [ 1500.735590][T17180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.758679][T17180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.771331][T17559] netlink: 'syz.4.12802': attribute type 22 has an invalid length. [ 1500.790617][ T1695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.790994][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12802'. [ 1500.797915][ T1695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.858079][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.865358][T11105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.069759][T17180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.250910][T17629] netlink: 'syz.3.12818': attribute type 22 has an invalid length. [ 1501.258923][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12818'. [ 1501.385560][T17180] veth0_vlan: entered promiscuous mode [ 1501.394298][T17180] veth1_vlan: entered promiscuous mode [ 1501.413211][T17180] veth0_macvtap: entered promiscuous mode [ 1501.422195][T17180] veth1_macvtap: entered promiscuous mode [ 1501.435803][T17180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.448798][T17180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.462862][ T1573] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.897635][ T1573] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.911229][ T1695] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.955078][ T1695] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.440648][T17729] netlink: 'syz.2.12832': attribute type 22 has an invalid length. [ 1502.448927][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12832'. [ 1502.492627][T17740] syzkaller0: entered promiscuous mode [ 1502.524613][T17740] syzkaller0: entered allmulticast mode [ 1502.746934][T17774] netlink: 'syz.2.12846': attribute type 1 has an invalid length. [ 1502.780918][T17774] netlink: 'syz.2.12846': attribute type 2 has an invalid length. [ 1502.929052][T17798] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12852'. [ 1502.973626][T11105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.041155][T17798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.091933][T17798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.114484][T17798] bond0 (unregistering): Released all slaves [ 1503.142320][T11105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.195041][T17831] syzkaller0: entered promiscuous mode [ 1503.200561][T17831] syzkaller0: entered allmulticast mode [ 1503.239067][T11105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.357403][T11105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.513224][T17876] netlink: 'syz.6.12873': attribute type 22 has an invalid length. [ 1503.541065][T17876] __nla_validate_parse: 1 callbacks suppressed [ 1503.541081][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12873'. [ 1503.565999][T17871] syzkaller0: entered promiscuous mode [ 1503.571959][T17871] syzkaller0: entered allmulticast mode [ 1503.649069][T11105] bridge_slave_1: left allmulticast mode [ 1503.667983][T11105] bridge_slave_1: left promiscuous mode [ 1503.681172][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.708824][T11105] bridge_slave_0: left allmulticast mode [ 1503.718213][T11105] bridge_slave_0: left promiscuous mode [ 1503.725540][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.741492][T17900] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12884'. [ 1503.792637][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12881'. [ 1503.804529][T11105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.815017][T11105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.825142][T11105] bond0 (unregistering): Released all slaves [ 1503.881969][T11105] hsr_slave_0: left promiscuous mode [ 1503.894143][T11105] hsr_slave_1: left promiscuous mode [ 1503.907347][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.914847][T11105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.923523][T11105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.931171][T11105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.948409][T11105] veth1_macvtap: left promiscuous mode [ 1503.955464][T17910] netlink: 'syz.6.12887': attribute type 1 has an invalid length. [ 1503.958611][T11105] veth0_macvtap: left promiscuous mode [ 1503.965603][T17910] netlink: 65023 bytes leftover after parsing attributes in process `syz.6.12887'. [ 1503.969406][T11105] veth1_vlan: left promiscuous mode [ 1503.984453][T11105] veth0_vlan: left promiscuous mode [ 1504.018553][T17914] netlink: 'syz.2.12889': attribute type 22 has an invalid length. [ 1504.027051][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12889'. [ 1504.136743][T17918] netlink: 'syz.6.12891': attribute type 10 has an invalid length. [ 1504.145088][T17918] netlink: 55 bytes leftover after parsing attributes in process `syz.6.12891'. [ 1504.145667][T11105] team0 (unregistering): Port device team_slave_1 removed [ 1504.169694][T11105] team0 (unregistering): Port device team_slave_0 removed [ 1504.267730][T17817] chnl_net:caif_netlink_parms(): no params data found [ 1504.383416][T17817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.390969][T17817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.398299][T17817] bridge_slave_0: entered allmulticast mode [ 1504.405279][T17817] bridge_slave_0: entered promiscuous mode [ 1504.412773][T17817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.420135][T17817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.430605][T17817] bridge_slave_1: entered allmulticast mode [ 1504.437420][T17817] bridge_slave_1: entered promiscuous mode [ 1504.457168][T17817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.474174][T17817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.513932][T17817] team0: Port device team_slave_0 added [ 1504.524203][T17946] syzkaller0: entered promiscuous mode [ 1504.530966][T17946] syzkaller0: entered allmulticast mode [ 1504.542749][T17817] team0: Port device team_slave_1 added [ 1504.585110][T17949] syzkaller0: entered promiscuous mode [ 1504.592860][T17949] syzkaller0: entered allmulticast mode [ 1504.639692][T17817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.647393][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.674464][T17817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.704552][T17817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.711776][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.741482][T17967] netlink: 'syz.6.12902': attribute type 22 has an invalid length. [ 1504.749537][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12902'. [ 1504.760054][T17817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.835237][T17817] hsr_slave_0: entered promiscuous mode [ 1504.843152][T17817] hsr_slave_1: entered promiscuous mode [ 1504.849206][T17817] debugfs: 'hsr0' already exists in 'hsr' [ 1504.858376][T17817] Cannot create hsr debugfs directory [ 1504.895235][ T1720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.968750][ T1720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.047403][ T1720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.138966][T17817] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.167724][ T1720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.270983][T17817] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.357299][ T1720] bridge_slave_1: left allmulticast mode [ 1505.369286][ T1720] bridge_slave_1: left promiscuous mode [ 1505.380530][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.388932][ T1720] bridge_slave_0: left allmulticast mode [ 1505.395622][ T1720] bridge_slave_0: left promiscuous mode [ 1505.401850][ T1720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.608757][T17817] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.710151][ T1720] hsr_slave_0: left promiscuous mode [ 1505.716331][ T1720] hsr_slave_1: left promiscuous mode [ 1505.722290][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.732523][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.750861][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.762482][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.774143][ T1720] veth1_macvtap: left promiscuous mode [ 1505.779678][ T1720] veth0_macvtap: left promiscuous mode [ 1505.785824][ T1720] veth1_vlan: left promiscuous mode [ 1505.792345][ T1720] veth0_vlan: left promiscuous mode [ 1505.897285][ T1720] team0 (unregistering): Port device team_slave_1 removed [ 1505.907524][ T1720] team0 (unregistering): Port device team_slave_0 removed [ 1505.953141][T17817] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.046604][T18001] chnl_net:caif_netlink_parms(): no params data found [ 1506.071808][T17817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1506.081031][T17817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1506.110254][T17817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1506.127182][T17817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1506.174118][T18001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.181875][T18001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.189357][T18001] bridge_slave_0: entered allmulticast mode [ 1506.198583][T18001] bridge_slave_0: entered promiscuous mode [ 1506.214539][T18001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.222144][T18001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.229392][T18001] bridge_slave_1: entered allmulticast mode [ 1506.236222][T18001] bridge_slave_1: entered promiscuous mode [ 1506.300037][T18001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.320474][T17817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.352562][T18001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.364819][T18055] chnl_net:caif_netlink_parms(): no params data found [ 1506.380577][T17817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.421912][T18001] team0: Port device team_slave_0 added [ 1506.428852][T18001] team0: Port device team_slave_1 added [ 1506.468972][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.476136][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.508337][T18001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.515716][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.541813][T18001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.559132][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.566306][T11105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.601282][T18001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.608284][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.634634][T18001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.667885][T18055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.675030][T18055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.682283][T18055] bridge_slave_0: entered allmulticast mode [ 1506.688824][T18055] bridge_slave_0: entered promiscuous mode [ 1506.698323][T18055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.715055][T18055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.730983][T18055] bridge_slave_1: entered allmulticast mode [ 1506.737649][T18055] bridge_slave_1: entered promiscuous mode [ 1506.747612][T18001] hsr_slave_0: entered promiscuous mode [ 1506.754034][T18001] hsr_slave_1: entered promiscuous mode [ 1506.760095][T18001] debugfs: 'hsr0' already exists in 'hsr' [ 1506.766542][T18001] Cannot create hsr debugfs directory [ 1506.779372][ T1720] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.842019][ T1720] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.905668][T18055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.938918][ T1720] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.962429][T18055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.014065][T18055] team0: Port device team_slave_0 added [ 1507.022340][ T1720] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.048744][T18055] team0: Port device team_slave_1 added [ 1507.115113][T18055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.123014][T18055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.149599][T18055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.170354][T18136] chnl_net:caif_netlink_parms(): no params data found [ 1507.186013][T18055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.193223][T18055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.219802][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12932'. [ 1507.229261][T18055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.263866][T17817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.317546][T18055] hsr_slave_0: entered promiscuous mode [ 1507.324108][T18055] hsr_slave_1: entered promiscuous mode [ 1507.330310][T18055] debugfs: 'hsr0' already exists in 'hsr' [ 1507.337056][T18055] Cannot create hsr debugfs directory [ 1507.416621][T18136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.423864][T18136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.431664][T18136] bridge_slave_0: entered allmulticast mode [ 1507.438564][T18136] bridge_slave_0: entered promiscuous mode [ 1507.449496][T18136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.457361][T18136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.465727][T18136] bridge_slave_1: entered allmulticast mode [ 1507.473118][T18136] bridge_slave_1: entered promiscuous mode [ 1507.495756][ T1720] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.549820][T18136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.567762][ T1720] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.587021][T18136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.641547][ T1720] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.670555][T18136] team0: Port device team_slave_0 added [ 1507.691919][T18136] team0: Port device team_slave_1 added [ 1507.704790][T17817] veth0_vlan: entered promiscuous mode [ 1507.739074][T18136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.746208][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.773096][T18136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.787778][ T1720] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.801709][T18136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.808685][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.835096][T18136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.855917][T17817] veth1_vlan: entered promiscuous mode [ 1507.886230][T18136] hsr_slave_0: entered promiscuous mode [ 1507.892595][T18136] hsr_slave_1: entered promiscuous mode [ 1507.898973][T18136] debugfs: 'hsr0' already exists in 'hsr' [ 1507.905031][T18136] Cannot create hsr debugfs directory [ 1507.916196][T18001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1507.946168][T18001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1507.955608][T18001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1507.983045][T18001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1508.007051][T17817] veth0_macvtap: entered promiscuous mode [ 1508.049858][T17817] veth1_macvtap: entered promiscuous mode [ 1508.071279][ T1720] bridge_slave_1: left allmulticast mode [ 1508.077193][ T1720] bridge_slave_1: left promiscuous mode [ 1508.083055][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.091714][ T1720] bridge_slave_0: left allmulticast mode [ 1508.097521][ T1720] bridge_slave_0: left promiscuous mode [ 1508.104190][ T1720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.113372][ T1720] bridge_slave_1: left allmulticast mode [ 1508.119287][ T1720] bridge_slave_1: left promiscuous mode [ 1508.125398][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.134224][ T1720] bridge_slave_0: left allmulticast mode [ 1508.139964][ T1720] bridge_slave_0: left promiscuous mode [ 1508.146452][ T1720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.254322][ T1720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.264728][ T1720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.275177][ T1720] bond0 (unregistering): Released all slaves [ 1508.377959][T17817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.416742][T17817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.438494][ T1720] hsr_slave_0: left promiscuous mode [ 1508.445096][ T1720] hsr_slave_1: left promiscuous mode [ 1508.451385][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.459025][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.467801][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.475718][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.486090][ T1720] hsr_slave_0: left promiscuous mode [ 1508.492266][ T1720] hsr_slave_1: left promiscuous mode [ 1508.498138][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.506483][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.514418][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.522426][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.538260][ T1720] veth1_macvtap: left promiscuous mode [ 1508.544461][ T1720] veth0_macvtap: left promiscuous mode [ 1508.550134][ T1720] veth1_vlan: left promiscuous mode [ 1508.555921][ T1720] veth0_vlan: left promiscuous mode [ 1508.562440][ T1720] veth1_macvtap: left promiscuous mode [ 1508.568094][ T1720] veth0_macvtap: left promiscuous mode [ 1508.574532][ T1720] veth1_vlan: left promiscuous mode [ 1508.579841][ T1720] veth0_vlan: left promiscuous mode [ 1508.714524][ T1720] team0 (unregistering): Port device team_slave_1 removed [ 1508.725328][ T1720] team0 (unregistering): Port device team_slave_0 removed [ 1508.805859][ T1720] team0 (unregistering): Port device team_slave_1 removed [ 1508.816872][ T1720] team0 (unregistering): Port device team_slave_0 removed [ 1508.867771][T11235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.877361][T11235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.907726][T11235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.918185][T11235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.970168][T18055] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1508.990222][T18055] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1509.005124][T18055] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1509.034378][T18001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.042690][T18055] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1509.061859][T18001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.080180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.087579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.104671][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.111962][T11105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.147405][T18001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1509.159677][T18001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.249308][T18055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.284944][T18055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.300243][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.307567][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.347712][T18001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.368015][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.375344][T11105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.416415][T18055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1509.444688][T18055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.485224][T18136] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1509.517647][T18136] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1509.535227][T18136] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1509.546198][T18136] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1509.570127][T18439] netlink: 'syz.5.12935': attribute type 1 has an invalid length. [ 1509.581501][T18439] netlink: 'syz.5.12935': attribute type 2 has an invalid length. [ 1509.627131][T18055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.649074][T18001] veth0_vlan: entered promiscuous mode [ 1509.696421][T18001] veth1_vlan: entered promiscuous mode [ 1509.784340][T18001] veth0_macvtap: entered promiscuous mode [ 1509.805345][T18136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.815886][T18479] netlink: 'syz.4.12940': attribute type 10 has an invalid length. [ 1509.829527][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.841978][T18479] hsr0: entered promiscuous mode [ 1509.851700][T18001] veth1_macvtap: entered promiscuous mode [ 1509.870348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.877784][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.902632][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.909888][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.964876][T18001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.999980][T18001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.042167][T18055] veth0_vlan: entered promiscuous mode [ 1510.050340][T18055] veth1_vlan: entered promiscuous mode [ 1510.064436][ T1573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.087665][ T1573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.104683][ T1573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.118393][ T1573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.175323][T18055] veth0_macvtap: entered promiscuous mode [ 1510.184199][T18055] veth1_macvtap: entered promiscuous mode [ 1510.207330][T18136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.248559][T18055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.272366][T18055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.293858][ T1720] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.308520][T18508] netlink: 'syz.5.12945': attribute type 10 has an invalid length. [ 1510.333437][ T1720] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.377315][T18508] team0: Device xfrm0 is of different type [ 1510.397806][ T1720] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.411533][T18519] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12946'. [ 1510.428385][ T1720] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.451388][T18531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12946'. [ 1510.557248][T18547] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12952'. [ 1510.596828][T18547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.657738][T18547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.722706][T18547] bond0 (unregistering): Released all slaves [ 1511.005115][T18136] veth0_vlan: entered promiscuous mode [ 1511.032696][T18136] veth1_vlan: entered promiscuous mode [ 1511.080111][T18136] veth0_macvtap: entered promiscuous mode [ 1511.092902][T18136] veth1_macvtap: entered promiscuous mode [ 1511.129430][T18136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.157259][T18136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.194033][ T1720] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.219367][ T1720] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.241893][ T1720] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.275331][ T1720] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.299184][T18610] syzkaller0: entered promiscuous mode [ 1511.316129][T18610] syzkaller0: entered allmulticast mode [ 1511.446028][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12970'. [ 1511.482438][T18646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12970'. [ 1511.561628][T18662] netlink: 'syz.7.12974': attribute type 1 has an invalid length. [ 1511.614910][T18669] ref_ctr_offset mismatch. inode: 0x3a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 1511.869222][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12985'. [ 1511.892196][T18706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12985'. [ 1514.441565][T19007] netlink: 60 bytes leftover after parsing attributes in process `syz.9.13011'. [ 1514.459360][T19007] netlink: 60 bytes leftover after parsing attributes in process `syz.9.13011'. [ 1514.624375][T19030] netlink: 14 bytes leftover after parsing attributes in process `syz.9.13018'. [ 1514.637787][T19030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.650470][T19030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.662348][T19030] bond0 (unregistering): Released all slaves [ 1514.855383][T19043] netlink: 'syz.9.13024': attribute type 1 has an invalid length. [ 1515.124122][T19059] syzkaller0: entered promiscuous mode [ 1515.130010][T19059] syzkaller0: entered allmulticast mode [ 1515.262298][ T28] audit: type=1400 audit(2000000370.990:2151): avc: denied { setopt } for pid=19060 comm="syz.9.13033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1515.684153][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13042'. [ 1515.710234][T19082] syzkaller0: entered promiscuous mode [ 1515.716219][T19082] syzkaller0: entered allmulticast mode [ 1516.144711][T19099] netlink: 14 bytes leftover after parsing attributes in process `syz.7.13051'. [ 1516.157511][T19099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.168134][T19099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.178936][T19099] bond0 (unregistering): Released all slaves [ 1516.726406][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13054'. [ 1516.827473][T19112] syzkaller0: entered promiscuous mode [ 1516.833222][T19112] syzkaller0: entered allmulticast mode [ 1517.104089][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13065'. [ 1517.260072][T18969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1517.405958][T19163] netlink: 'syz.7.13079': attribute type 10 has an invalid length. [ 1517.522349][T19187] syzkaller0: entered promiscuous mode [ 1517.528083][T19187] syzkaller0: entered allmulticast mode [ 1517.570208][T19189] lo speed is unknown, defaulting to 1000 [ 1517.586734][T19189] lo speed is unknown, defaulting to 1000 [ 1517.609019][T19189] lo speed is unknown, defaulting to 1000 [ 1517.688317][T19189] infiniband syz2: set active [ 1517.695292][T15884] lo speed is unknown, defaulting to 1000 [ 1517.703586][T19189] infiniband syz2: added lo [ 1517.729426][T19189] RDS/IB: syz2: added [ 1517.733741][T19189] smc: adding ib device syz2 with port count 1 [ 1517.740315][T19189] smc: ib device syz2 port 1 has no pnetid [ 1517.746875][T15884] lo speed is unknown, defaulting to 1000 [ 1517.753581][T19189] lo speed is unknown, defaulting to 1000 [ 1517.833849][T19189] lo speed is unknown, defaulting to 1000 [ 1517.943885][T19189] lo speed is unknown, defaulting to 1000 [ 1518.009867][T19189] lo speed is unknown, defaulting to 1000 [ 1518.083310][T19189] lo speed is unknown, defaulting to 1000 [ 1518.138586][T19189] lo speed is unknown, defaulting to 1000 [ 1518.202128][T19189] lo speed is unknown, defaulting to 1000 [ 1518.252979][T19189] lo speed is unknown, defaulting to 1000 [ 1518.310169][T19189] lo speed is unknown, defaulting to 1000 [ 1519.315527][ T28] audit: type=1400 audit(2000000375.040:2152): avc: denied { read } for pid=19347 comm="syz.4.13151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1520.614162][ T28] audit: type=1400 audit(2000000376.340:2153): avc: denied { attach_queue } for pid=19357 comm="syz.9.13155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1520.638821][T19208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1520.771250][T19377] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13164'. [ 1521.151042][T19448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13182'. [ 1521.539462][ T1573] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.766201][ T1573] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.858736][ T1573] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.921978][T19518] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13191'. [ 1521.944682][T19518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=19518 comm=syz.4.13191 [ 1521.967071][ T1573] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.995324][T19499] lo speed is unknown, defaulting to 1000 [ 1522.087972][ T1573] bridge_slave_1: left allmulticast mode [ 1522.107947][ T1573] bridge_slave_1: left promiscuous mode [ 1522.127316][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.154200][ T1573] bridge_slave_0: left allmulticast mode [ 1522.165423][ T1573] bridge_slave_0: left promiscuous mode [ 1522.176999][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.446682][ T1573] hsr_slave_0: left promiscuous mode [ 1522.455033][ T1573] hsr_slave_1: left promiscuous mode [ 1522.464369][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.474642][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.486287][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.495182][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.510382][ T1573] veth1_macvtap: left promiscuous mode [ 1522.518583][ T1573] veth0_macvtap: left promiscuous mode [ 1522.527246][ T1573] veth1_vlan: left promiscuous mode [ 1522.534878][ T1573] veth0_vlan: left promiscuous mode [ 1522.630212][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1522.644948][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1522.682255][T32409] smc: removing ib device syz2 [ 1522.691318][T15886] lo speed is unknown, defaulting to 1000 [ 1522.700785][T15886] syz2: Port: 1 Link DOWN [ 1522.719064][T19499] chnl_net:caif_netlink_parms(): no params data found [ 1522.795200][T19499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.803257][T19499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.810716][T19499] bridge_slave_0: entered allmulticast mode [ 1522.820102][T19499] bridge_slave_0: entered promiscuous mode [ 1522.829668][T19499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.837657][T19499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.846542][T19499] bridge_slave_1: entered allmulticast mode [ 1522.856928][T19499] bridge_slave_1: entered promiscuous mode [ 1522.885818][T19499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.899761][T19499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.933246][T19499] team0: Port device team_slave_0 added [ 1522.942569][T19499] team0: Port device team_slave_1 added [ 1522.969290][T19499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.980351][T19499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.022137][T19499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.035857][T19499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.044720][T19499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.074644][T19499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.107895][T19499] hsr_slave_0: entered promiscuous mode [ 1523.114617][T19499] hsr_slave_1: entered promiscuous mode [ 1523.658684][T19602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13210'. [ 1523.847661][T19612] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13215'. [ 1523.858148][T19612] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13215'. [ 1523.870832][T19398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1523.882025][T19499] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1523.899864][T19499] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1523.939260][T19499] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1523.962168][T19499] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1524.075545][T19636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13222'. [ 1524.114404][T19499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.136339][T19499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.178640][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.185801][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.260113][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.267421][ T1720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.470155][T19499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.536905][T19680] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13238'. [ 1524.551480][T19683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1524.647500][T19702] netlink: 'syz.4.13243': attribute type 2 has an invalid length. [ 1524.681707][T19702] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13243'. [ 1524.858819][T19499] veth0_vlan: entered promiscuous mode [ 1524.867072][T19726] netlink: 'syz.7.13249': attribute type 1 has an invalid length. [ 1524.880977][T19726] netlink: 'syz.7.13249': attribute type 2 has an invalid length. [ 1524.893197][T19499] veth1_vlan: entered promiscuous mode [ 1524.953461][T19499] veth0_macvtap: entered promiscuous mode [ 1524.968514][T19499] veth1_macvtap: entered promiscuous mode [ 1525.019772][T19747] syzkaller0: entered promiscuous mode [ 1525.030817][T19747] syzkaller0: entered allmulticast mode [ 1525.044846][T19750] netlink: 'syz.4.13258': attribute type 39 has an invalid length. [ 1525.097531][T19499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.128745][T19499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.185864][T11235] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.222916][T11235] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.248761][ T1720] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.262867][ T1720] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.451581][T19806] syzkaller0: entered promiscuous mode [ 1525.462753][T19806] syzkaller0: entered allmulticast mode [ 1525.771449][T19855] syzkaller0: entered promiscuous mode [ 1525.799026][T19855] syzkaller0: entered allmulticast mode [ 1526.191184][T19919] netdevsim netdevsim5 ªªªªªª: renamed from netdevsim0 (while UP) [ 1526.201738][T19923] delete_channel: no stack [ 1526.394660][T19952] __nla_validate_parse: 1 callbacks suppressed [ 1526.394678][T19952] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13313'. [ 1526.520755][T19966] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13318'. [ 1526.771810][T20009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13327'. [ 1527.095974][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13337'. [ 1527.171558][T20061] IPv6: NLM_F_CREATE should be specified when creating new route [ 1527.290666][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13344'. [ 1527.315150][T20083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5122 sclass=netlink_audit_socket pid=20083 comm=syz.8.13345 [ 1527.441289][T20107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13350'. [ 1527.624895][T20136] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13359'. [ 1527.773110][T20153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13363'. [ 1527.913655][T20173] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13368'. [ 1527.949812][ T28] audit: type=1400 audit(2000000383.660:2154): avc: denied { mounton } for pid=20176 comm="syz.0.13369" path="/74/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1528.008105][ T28] audit: type=1400 audit(2000000383.730:2155): avc: denied { unmount } for pid=18001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1528.091633][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13375'. [ 1528.356465][T20228] syzkaller0: entered promiscuous mode [ 1528.365628][T20228] syzkaller0: entered allmulticast mode [ 1529.006027][T20285] syzkaller0: entered promiscuous mode [ 1529.030792][T20285] syzkaller0: entered allmulticast mode [ 1529.780858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.148038][ T28] audit: type=1400 audit(2000000385.870:2156): avc: denied { getopt } for pid=20356 comm="syz.5.13422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1531.454973][T20471] vlan2: entered promiscuous mode [ 1531.460352][T20471] vlan2: entered allmulticast mode [ 1531.484972][T20471] hsr_slave_1: entered allmulticast mode [ 1531.715917][T20471] __nla_validate_parse: 9 callbacks suppressed [ 1531.716884][T20471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13455'. [ 1532.408611][T20509] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13462'. [ 1532.654686][T20532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13466'. [ 1532.978476][T20559] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13473'. [ 1535.350702][T32409] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.473085][T32409] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.508269][ T28] audit: type=1326 audit(2000000391.230:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.570775][ T28] audit: type=1326 audit(2000000391.260:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.633820][T32409] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.640937][ T28] audit: type=1326 audit(2000000391.260:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.669292][ T28] audit: type=1326 audit(2000000391.270:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.693432][ T28] audit: type=1326 audit(2000000391.270:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.717613][ T28] audit: type=1326 audit(2000000391.270:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.758659][ T28] audit: type=1326 audit(2000000391.270:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.783078][ T28] audit: type=1326 audit(2000000391.270:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.809478][ T28] audit: type=1326 audit(2000000391.270:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.844395][T32409] netdevsim netdevsim5 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.872284][ T28] audit: type=1326 audit(2000000391.270:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20674 comm="syz.7.13497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f19b637c799 code=0x7ffc0000 [ 1535.997459][T32409] bridge_slave_1: left allmulticast mode [ 1536.003321][T32409] bridge_slave_1: left promiscuous mode [ 1536.009295][T32409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.041491][T32409] bridge_slave_0: left allmulticast mode [ 1536.047444][T32409] bridge_slave_0: left promiscuous mode [ 1536.071872][T32409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.643088][T32409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.681321][T32409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.702126][T32409] bond0 (unregistering): Released all slaves [ 1536.780363][T32409] hsr_slave_0: left promiscuous mode [ 1536.810784][T32409] hsr_slave_1: left promiscuous mode [ 1536.827423][T32409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.836144][T32409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.845314][T32409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.862174][T32409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.884759][T32409] veth1_macvtap: left promiscuous mode [ 1536.890494][T32409] veth0_macvtap: left promiscuous mode [ 1536.900935][T32409] veth1_vlan: left promiscuous mode [ 1536.910932][T32409] veth0_vlan: left promiscuous mode [ 1537.320536][T32409] team0 (unregistering): Port device team_slave_1 removed [ 1537.365236][T32409] team0 (unregistering): Port device team_slave_0 removed [ 1537.773668][T20668] chnl_net:caif_netlink_parms(): no params data found [ 1537.790915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.966050][T20668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.993552][T20668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.009812][T20668] bridge_slave_0: entered allmulticast mode [ 1538.031954][T20668] bridge_slave_0: entered promiscuous mode [ 1538.071638][T20668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.078870][T20668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.119615][T20668] bridge_slave_1: entered allmulticast mode [ 1538.141513][T20668] bridge_slave_1: entered promiscuous mode [ 1538.246235][T20668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.276995][T20668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.349364][T20668] team0: Port device team_slave_0 added [ 1538.374773][T20668] team0: Port device team_slave_1 added [ 1538.456262][T20668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.480765][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.517470][T20668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.549952][T20668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.560796][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.642440][T20668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.742747][T20668] hsr_slave_0: entered promiscuous mode [ 1538.749066][T20668] hsr_slave_1: entered promiscuous mode [ 1538.756924][T20668] debugfs: 'hsr0' already exists in 'hsr' [ 1538.770833][T20668] Cannot create hsr debugfs directory [ 1539.761416][T20668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1539.802972][T20668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1539.833276][T20668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1539.865054][T20668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1540.041996][T20668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.086490][T20668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.120930][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.128120][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.149274][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.156482][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.240340][T20668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1540.403067][T20668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.629354][T20668] veth0_vlan: entered promiscuous mode [ 1540.691807][T20668] veth1_vlan: entered promiscuous mode [ 1540.745000][T20668] veth0_macvtap: entered promiscuous mode [ 1540.782723][T20668] veth1_macvtap: entered promiscuous mode [ 1540.823009][T20668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1540.842197][T20668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1540.865656][ T1573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.889875][ T1573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.926813][ T1573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.940451][ T1573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.684821][T21035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.703997][T21035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.838976][T32409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.904436][T32409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.978973][T32409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.066306][T32409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.089816][T21033] chnl_net:caif_netlink_parms(): no params data found [ 1544.230181][T21033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.237560][T21033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.245359][T21033] bridge_slave_0: entered allmulticast mode [ 1544.252470][T21033] bridge_slave_0: entered promiscuous mode [ 1544.263121][T21033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.270358][T21033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.282786][T21033] bridge_slave_1: entered allmulticast mode [ 1544.304361][T21033] bridge_slave_1: entered promiscuous mode [ 1544.395108][T21033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.437251][T21033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.486545][T32409] bridge_slave_1: left allmulticast mode [ 1544.510800][T32409] bridge_slave_1: left promiscuous mode [ 1544.521170][T32409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.601260][T32409] bridge_slave_0: left allmulticast mode [ 1544.606957][T32409] bridge_slave_0: left promiscuous mode [ 1544.633304][T32409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.804907][T21085] netlink: 'syz.1.13523': attribute type 10 has an invalid length. [ 1544.858445][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1544.858541][ T28] audit: type=1400 audit(2000000400.580:2168): avc: denied { write } for pid=21063 comm="syz.1.13523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1544.910072][T21033] team0: Port device team_slave_0 added [ 1544.941844][T21033] team0: Port device team_slave_1 added [ 1544.990984][T32409] hsr_slave_0: left promiscuous mode [ 1545.033437][T32409] hsr_slave_1: left promiscuous mode [ 1545.039232][T32409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.065092][T32409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.080512][T32409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.101093][T32409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.120150][T21101] netlink: 'syz.1.13527': attribute type 4 has an invalid length. [ 1545.136589][T32409] veth1_macvtap: left promiscuous mode [ 1545.152213][T32409] veth0_macvtap: left promiscuous mode [ 1545.168505][T32409] veth1_vlan: left promiscuous mode [ 1545.184821][T32409] veth0_vlan: left promiscuous mode [ 1545.400333][T32409] team0 (unregistering): Port device team_slave_1 removed [ 1545.415458][T32409] team0 (unregistering): Port device team_slave_0 removed [ 1545.521475][T21033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.538796][T21033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.590960][T21033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.621440][T21033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.628608][T21033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.700787][T21033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.802545][T21033] hsr_slave_0: entered promiscuous mode [ 1545.821728][T21033] hsr_slave_1: entered promiscuous mode [ 1545.827771][T21033] debugfs: 'hsr0' already exists in 'hsr' [ 1545.856232][T21033] Cannot create hsr debugfs directory [ 1546.003519][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13532'. [ 1548.206512][ T1573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.243501][T21200] infiniband syz1: set active [ 1548.249768][T21200] infiniband syz1: added syz_tun [ 1548.277270][T21200] RDS/IB: syz1: added [ 1548.282018][T21200] smc: adding ib device syz1 with port count 1 [ 1548.288354][T21200] smc: ib device syz1 port 1 has no pnetid [ 1548.301955][ T1573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.388731][ T1573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.468368][ T1573] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.696087][T21033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1548.718847][T21033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1548.732983][T21033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1548.779288][ T1573] bridge_slave_1: left allmulticast mode [ 1548.785466][ T1573] bridge_slave_1: left promiscuous mode [ 1548.791359][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.804491][ T1573] bridge_slave_0: left allmulticast mode [ 1548.810367][ T1573] bridge_slave_0: left promiscuous mode [ 1548.816619][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.211371][T21033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1549.370060][T21156] chnl_net:caif_netlink_parms(): no params data found [ 1549.515853][T21156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.530863][T21156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.550969][T21156] bridge_slave_0: entered allmulticast mode [ 1549.557772][T21156] bridge_slave_0: entered promiscuous mode [ 1549.580901][T21156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.590812][T21156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.608422][T21156] bridge_slave_1: entered allmulticast mode [ 1549.619135][T21156] bridge_slave_1: entered promiscuous mode [ 1549.681587][T21156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.722697][T21156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.764050][T21180] chnl_net:caif_netlink_parms(): no params data found [ 1549.790383][T21033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.829216][T21156] team0: Port device team_slave_0 added [ 1549.864420][T21156] team0: Port device team_slave_1 added [ 1549.897934][T21033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.961739][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.968866][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.983103][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.990400][ T689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.000693][T21156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.010903][T21156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.060767][T21156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.078616][T21033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1550.110802][T21033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1550.123209][T21180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.130334][T21180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.141122][T21180] bridge_slave_0: entered allmulticast mode [ 1550.148154][T21180] bridge_slave_0: entered promiscuous mode [ 1550.168825][T21180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.215025][T21180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.223153][T21180] bridge_slave_1: entered allmulticast mode [ 1550.229879][T21180] bridge_slave_1: entered promiscuous mode [ 1550.292553][T21156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.299687][T21156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.327574][T21156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.359272][T21156] hsr_slave_0: entered promiscuous mode [ 1550.365669][T21156] hsr_slave_1: entered promiscuous mode [ 1550.372167][T21156] debugfs: 'hsr0' already exists in 'hsr' [ 1550.377994][T21156] Cannot create hsr debugfs directory [ 1550.461269][ T1573] hsr_slave_0: left promiscuous mode [ 1550.492311][ T1573] hsr_slave_1: left promiscuous mode [ 1550.498059][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.505792][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.513725][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.521683][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.531354][ T1573] veth1_macvtap: left promiscuous mode [ 1550.537287][ T1573] veth0_macvtap: left promiscuous mode [ 1550.543478][ T1573] veth1_vlan: left promiscuous mode [ 1550.555841][ T1573] veth0_vlan: left promiscuous mode [ 1550.695165][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1550.706165][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1550.790521][T21323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.800150][T21323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.840631][T21180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.882194][T21180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.912901][T21033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.978678][T21180] team0: Port device team_slave_0 added [ 1550.992928][T21180] team0: Port device team_slave_1 added [ 1551.052486][T21180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1551.071162][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.090212][T21347] sd 0:0:1:0: device reset [ 1551.127243][T21180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.155256][T21180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.162351][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.188978][T21180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.317883][T21180] hsr_slave_0: entered promiscuous mode [ 1551.341489][T21180] hsr_slave_1: entered promiscuous mode [ 1551.348629][T21180] debugfs: 'hsr0' already exists in 'hsr' [ 1551.370919][T21180] Cannot create hsr debugfs directory [ 1551.409862][ T1573] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.513224][ T1573] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.676597][T21033] veth0_vlan: entered promiscuous mode [ 1551.707044][T21033] veth1_vlan: entered promiscuous mode [ 1551.729840][ T1573] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.780182][T21033] veth0_macvtap: entered promiscuous mode [ 1551.805021][ T1573] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.828907][T21033] veth1_macvtap: entered promiscuous mode [ 1551.857555][T21033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.866027][T21377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.877198][T21377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.901012][T21033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.911868][T21156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1551.941653][T21156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1551.960346][T21156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1551.970110][ T689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.023830][T21156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1552.068395][ T1573] bridge_slave_1: left allmulticast mode [ 1552.074416][ T1573] bridge_slave_1: left promiscuous mode [ 1552.080217][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.089252][ T1573] bridge_slave_0: left allmulticast mode [ 1552.095282][ T1573] bridge_slave_0: left promiscuous mode [ 1552.101839][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.173145][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.186034][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.201924][ T1573] bond0 (unregistering): Released all slaves [ 1552.227475][ T689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.254069][ T689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.282728][ T689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.331117][ T1573] hsr_slave_0: left promiscuous mode [ 1552.339178][ T1573] hsr_slave_1: left promiscuous mode [ 1552.345318][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.355401][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.365910][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.376055][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.393103][ T1573] veth1_macvtap: left promiscuous mode [ 1552.398994][ T1573] veth0_macvtap: left promiscuous mode [ 1552.405286][ T1573] veth1_vlan: left promiscuous mode [ 1552.410817][ T1573] veth0_vlan: left promiscuous mode [ 1552.695458][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1552.706472][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1552.821188][T21156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.833695][T21419] vlan2: entered promiscuous mode [ 1552.839079][T21419] vlan2: entered allmulticast mode [ 1552.846561][T21419] hsr_slave_1: entered allmulticast mode [ 1552.911256][T21156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.921002][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13515'. [ 1552.953779][T32409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.961033][T32409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.974538][T32409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.981813][T32409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.044770][T21438] netlink: 'syz.1.13571': attribute type 4 has an invalid length. [ 1553.119052][T21156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.403596][T21180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1553.430058][T21180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1553.451354][T21180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1553.479523][T21180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1553.622816][T21156] veth0_vlan: entered promiscuous mode [ 1553.642600][T21156] veth1_vlan: entered promiscuous mode [ 1553.689117][T21180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.700693][T21156] veth0_macvtap: entered promiscuous mode [ 1553.716548][T21180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.725208][T21156] veth1_macvtap: entered promiscuous mode [ 1553.739053][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.746308][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.755991][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.763131][T11105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.797070][T21156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.813058][T21156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.831323][T32409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.842061][T32409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.860045][T32409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.876041][T32409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.994678][T21180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.350319][T21180] veth0_vlan: entered promiscuous mode [ 1554.365829][T21180] veth1_vlan: entered promiscuous mode [ 1554.380344][T21180] veth0_macvtap: entered promiscuous mode [ 1554.388173][T21180] veth1_macvtap: entered promiscuous mode [ 1554.427541][T21180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.480065][T21180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.547596][ T1720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.764594][ T28] audit: type=1400 audit(2000000410.253:2169): avc: denied { mount } for pid=21531 comm="syz.3.13579" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1555.111991][T21542] random: crng reseeded on system resumption [ 1555.169898][ T28] audit: type=1400 audit(2000000410.646:2170): avc: denied { write } for pid=21532 comm="syz.1.13580" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1555.193682][ T28] audit: type=1400 audit(2000000410.646:2171): avc: denied { open } for pid=21532 comm="syz.1.13580" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1555.532915][T21550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.564901][T21550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.588455][ T1720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.607782][ T1720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.652426][ T1720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.727934][ T28] audit: type=1400 audit(2000000411.226:2172): avc: denied { connect } for pid=21557 comm="syz.1.13583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1556.188130][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13590'. [ 1556.348012][T21627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13599'. [ 1558.984679][ T28] audit: type=1400 audit(2000000414.277:2173): avc: denied { watch watch_reads } for pid=21738 comm="syz.6.13620" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1560.621390][T21685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1563.560770][T21861] tmpfs: Unsupported parameter 'huge' [ 1563.896091][T21892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.925456][T21892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.156492][ T28] audit: type=1400 audit(2000000419.105:2174): avc: denied { listen } for pid=21905 comm="syz.6.13650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1564.892224][T21838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1564.921906][T21942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.939525][T21942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.755145][T22005] IPv6: NLM_F_CREATE should be specified when creating new route [ 1567.599516][T22117] xt_TCPMSS: Only works on TCP SYN packets [ 1567.620740][T15704] IPVS: starting estimator thread 0... [ 1567.746589][T22119] IPVS: using max 1920 ests per chain, 96000 per kthread [ 1567.867575][T22131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.894050][T22131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.845851][T22207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1569.393733][T22257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.403701][T22257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.414068][T22257] random: crng reseeded on system resumption [ 1569.863538][T22026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1572.979615][T22472] loop3: detected capacity change from 0 to 128 [ 1573.792524][T22485] chnl_net:caif_netlink_parms(): no params data found [ 1573.841266][T22485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.848986][T22485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.856313][T22485] bridge_slave_0: entered allmulticast mode [ 1573.863183][T22485] bridge_slave_0: entered promiscuous mode [ 1573.925450][T22485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.932856][T22485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.940480][T22485] bridge_slave_1: entered allmulticast mode [ 1573.950892][T22485] bridge_slave_1: entered promiscuous mode [ 1573.976997][T22485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.990661][T22485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.021682][T22503] usb usb7: usbfs: process 22503 (syz.3.13734) did not claim interface 0 before use [ 1574.046312][T22485] team0: Port device team_slave_0 added [ 1574.053429][T22485] team0: Port device team_slave_1 added [ 1574.092206][T22485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.107121][T22485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.137201][T22485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.156893][T22485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.164205][T22485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.202618][T22485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.298557][T22510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.340607][T22510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.375555][T22485] hsr_slave_0: entered promiscuous mode [ 1574.394656][T22485] hsr_slave_1: entered promiscuous mode [ 1574.477249][T22390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1574.501309][T11105] smc: removing ib device syz1 [ 1574.517259][T15952] syz1: Port: 1 Link DOWN [ 1574.912607][T22485] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1574.929109][T22485] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1574.939880][T22485] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1574.951790][T22485] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1575.175451][ T1573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.252863][ T1573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.327419][ T1573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.369677][ T1573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.438719][T22618] IPv6: NLM_F_CREATE should be specified when creating new route [ 1575.519891][ T1573] bridge_slave_1: left allmulticast mode [ 1575.525770][ T1573] bridge_slave_1: left promiscuous mode [ 1575.538375][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.547091][ T1573] bridge_slave_0: left allmulticast mode [ 1575.553977][ T1573] bridge_slave_0: left promiscuous mode [ 1575.561199][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.678570][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1575.691933][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1575.702363][ T1573] bond0 (unregistering): Released all slaves [ 1575.769931][ T1573] hsr_slave_0: left promiscuous mode [ 1575.777943][ T1573] hsr_slave_1: left promiscuous mode [ 1575.784810][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.792498][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.801484][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.809197][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.824054][ T1573] veth1_macvtap: left promiscuous mode [ 1575.829979][ T1573] veth0_macvtap: left promiscuous mode [ 1575.835926][ T1573] veth1_vlan: left promiscuous mode [ 1575.841578][ T1573] veth0_vlan: left promiscuous mode [ 1575.981390][ T1573] team0 (unregistering): Port device team_slave_1 removed [ 1575.997601][ T1573] team0 (unregistering): Port device team_slave_0 removed [ 1576.057210][T22643] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 1576.078509][T22598] chnl_net:caif_netlink_parms(): no params data found [ 1576.162342][T22598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.169807][T22598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.177064][T22598] bridge_slave_0: entered allmulticast mode [ 1576.184551][T22598] bridge_slave_0: entered promiscuous mode [ 1576.192105][T22598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.199470][T22598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.207064][T22598] bridge_slave_1: entered allmulticast mode [ 1576.214404][T22598] bridge_slave_1: entered promiscuous mode [ 1576.235616][T22598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.247499][T22598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.269870][T22598] team0: Port device team_slave_0 added [ 1576.276970][T22598] team0: Port device team_slave_1 added [ 1576.297326][T22598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.304471][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.331331][T22598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.343069][T22598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.350264][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.382266][T22598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.413949][T22598] hsr_slave_0: entered promiscuous mode [ 1576.420237][T22598] hsr_slave_1: entered promiscuous mode [ 1576.426774][T22598] debugfs: 'hsr0' already exists in 'hsr' [ 1576.432567][T22598] Cannot create hsr debugfs directory [ 1578.117886][T22554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1578.134871][T22598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1578.158479][T22598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1578.182490][T22673] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1578.198170][T22598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1578.233219][T22598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1578.276742][T22485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.297250][T22485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.312699][T32409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.319856][T32409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.333471][T32409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.340698][T32409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.410917][T22598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.433724][T22598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.457672][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.464810][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.522320][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.529641][ T1720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.578597][T22598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1578.597773][T22485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.896724][T22598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.142445][T22485] veth0_vlan: entered promiscuous mode [ 1579.151584][T22485] veth1_vlan: entered promiscuous mode [ 1579.168985][T22485] veth0_macvtap: entered promiscuous mode [ 1579.192731][T22485] veth1_macvtap: entered promiscuous mode [ 1579.214099][T22485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.232040][T22485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.255569][ T1573] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.279383][T22598] veth0_vlan: entered promiscuous mode [ 1579.285769][ T1573] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.310313][T22598] veth1_vlan: entered promiscuous mode [ 1579.320986][ T1573] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.335390][ T1573] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.368331][T22598] veth0_macvtap: entered promiscuous mode [ 1579.378307][T22598] veth1_macvtap: entered promiscuous mode [ 1579.391643][T22598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.408441][T22786] netlink: 64 bytes leftover after parsing attributes in process `syz.9.13732'. [ 1579.411334][T22598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.430668][ T1720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.442467][ T1720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.463231][ T1720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.481598][ T1720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.588598][T22799] netlink: 'syz.5.13787': attribute type 2 has an invalid length. [ 1579.654528][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13788'. [ 1579.847863][T22809] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13792'. [ 1580.149325][T22833] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13804'. [ 1580.913475][T22848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.929794][T22848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.031119][T22856] loop5: detected capacity change from 0 to 128 [ 1581.059102][T22856] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1581.079489][T22856] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.633425][T15884] IPVS: starting estimator thread 0... [ 1581.777230][T22871] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1582.036348][T22598] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1582.334838][T22774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1582.617074][T22918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13831'. [ 1582.626377][T22918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13831'. [ 1586.982193][T22954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1587.160958][ T28] audit: type=1400 audit(2000000440.638:2175): avc: denied { bind } for pid=23015 comm="syz.9.13861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1587.876375][ T28] audit: type=1400 audit(2000000441.303:2176): avc: denied { bind } for pid=23041 comm="syz.3.13868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1587.937457][T23047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13869'. [ 1589.323930][ T28] audit: type=1400 audit(2000000442.659:2177): avc: denied { bind } for pid=23109 comm="syz.5.13879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1590.269605][T23170] loop2: detected capacity change from 0 to 512 [ 1590.301940][T23170] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.13890: bad orphan inode 13 [ 1590.347454][T23170] loop2: lost filesystem error report for type 5 error -117 [ 1590.347625][T23170] ext4_test_bit(bit=12, block=4) = 1 [ 1590.360353][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1590.360378][ C1] EXT4-fs (loop2): initial error at time 2000000443: ext4_orphan_get:1417 [ 1590.360408][ C1] EXT4-fs (loop2): last error at time 2000000443: ext4_orphan_get:1417 [ 1590.433080][T23170] is_bad_inode(inode)=0 [ 1590.437310][T23170] NEXT_ORPHAN(inode)=0 [ 1590.441529][T23170] max_ino=32 [ 1590.444953][T23170] i_nlink=1 [ 1590.448907][T23170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1590.521442][T23184] loop5: detected capacity change from 0 to 512 [ 1590.558428][T23184] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.13891: bad orphan inode 13 [ 1590.569063][T23184] loop5: lost filesystem error report for type 5 error -117 [ 1590.570007][T23184] ext4_test_bit(bit=12, block=4) = 1 [ 1590.577473][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1590.577491][ C1] EXT4-fs (loop5): initial error at time 2000000443: ext4_orphan_get:1417 [ 1590.577525][ C1] EXT4-fs (loop5): last error at time 2000000443: ext4_orphan_get:1417 [ 1590.656073][T23184] is_bad_inode(inode)=0 [ 1590.666555][T23184] NEXT_ORPHAN(inode)=0 [ 1590.675827][T23184] max_ino=32 [ 1590.682741][T23184] i_nlink=1 [ 1590.689920][T23184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1590.713850][T23184] EXT4-fs warning (device loop5): dx_probe:813: inode #2: comm syz.5.13891: Hash code is SIPHASH, but hash not in dirent [ 1590.747687][T23184] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.13891: Corrupt directory, running e2fsck is recommended [ 1590.787126][T23184] EXT4-fs warning (device loop5): dx_probe:813: inode #2: comm syz.5.13891: Hash code is SIPHASH, but hash not in dirent [ 1590.862478][T23184] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.13891: Corrupt directory, running e2fsck is recommended [ 1590.888344][T23184] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.13891: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 1590.942368][T23207] loop3: detected capacity change from 0 to 1764 [ 1590.949968][T23207] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 1591.187502][T23212] bpf: Bad value for 'gid' [ 1591.277159][T23049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1591.414951][T21033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.487010][T22598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.879580][ T28] audit: type=1400 audit(2000000445.055:2178): avc: denied { read } for pid=23228 comm="syz.7.13902" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1591.965795][T23233] loop5: detected capacity change from 0 to 512 [ 1592.132656][T23233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.223103][ T28] audit: type=1400 audit(2000000445.364:2179): avc: denied { write } for pid=23232 comm="syz.5.13898" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1592.263624][T23253] loop2: detected capacity change from 0 to 512 [ 1592.323283][T23253] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.13908: bad orphan inode 13 [ 1592.390858][T23253] loop2: lost filesystem error report for type 5 error -117 [ 1592.391048][T23253] ext4_test_bit(bit=12, block=4) = 1 [ 1592.403731][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1592.403757][ C0] EXT4-fs (loop2): initial error at time 2000000445: ext4_orphan_get:1417 [ 1592.403789][ C0] EXT4-fs (loop2): last error at time 2000000445: ext4_orphan_get:1417 [ 1592.473267][T23266] loop9: detected capacity change from 0 to 512 [ 1592.504537][T23266] EXT4-fs: Ignoring removed bh option [ 1592.533561][T23266] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1592.555636][T23253] is_bad_inode(inode)=0 [ 1592.570576][T23266] EXT4-fs (loop9): 1 truncate cleaned up [ 1592.580443][T23253] NEXT_ORPHAN(inode)=0 [ 1592.599195][T23266] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.620926][T23253] max_ino=32 [ 1592.631932][T23253] i_nlink=1 [ 1592.642607][T23253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.723150][T23274] loop3: detected capacity change from 0 to 512 [ 1592.846384][T22598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.900170][T22485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.182655][T23389] netlink: 36 bytes leftover after parsing attributes in process `syz.9.13921'. [ 1594.212217][T23391] loop9: detected capacity change from 0 to 512 [ 1594.228795][T23391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1594.441293][T22485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.479526][T23397] bpf: Bad value for 'gid' [ 1594.579150][T23173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1595.502557][T23257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1595.593762][T21033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.753855][T23428] bpf: Bad value for 'gid' [ 1595.918727][T23448] loop2: detected capacity change from 0 to 512 [ 1595.931268][T23451] loop7: detected capacity change from 0 to 512 [ 1595.955371][T23448] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.13940: bad orphan inode 13 [ 1595.991740][T23448] loop2: lost filesystem error report for type 5 error -117 [ 1595.995100][T23448] ext4_test_bit(bit=12, block=4) = 1 [ 1596.002548][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1596.002594][ C0] EXT4-fs (loop2): initial error at time 2000000448: ext4_orphan_get:1417 [ 1596.002620][ C0] EXT4-fs (loop2): last error at time 2000000448: ext4_orphan_get:1417 [ 1596.034362][T23451] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.13941: bad orphan inode 13 [ 1596.044750][T23451] loop7: lost filesystem error report for type 5 error -117 [ 1596.046976][T23448] is_bad_inode(inode)=0 [ 1596.054481][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1596.054507][ C1] EXT4-fs (loop7): initial error at time 2000000448: ext4_orphan_get:1417 [ 1596.054542][ C1] EXT4-fs (loop7): last error at time 2000000448: ext4_orphan_get:1417 [ 1596.076104][T23451] ext4_test_bit(bit=12, block=4) = 1 [ 1596.082696][T23448] NEXT_ORPHAN(inode)=0 [ 1596.091736][T23448] max_ino=32 [ 1596.095011][T23448] i_nlink=1 [ 1596.098777][T23448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.117569][T23451] is_bad_inode(inode)=0 [ 1596.122248][T23451] NEXT_ORPHAN(inode)=0 [ 1596.126697][T23451] max_ino=32 [ 1596.130467][T23451] i_nlink=1 [ 1596.134568][T23451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.149284][T23451] EXT4-fs warning (device loop7): dx_probe:813: inode #2: comm syz.7.13941: Hash code is SIPHASH, but hash not in dirent [ 1596.163213][T23451] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.13941: Corrupt directory, running e2fsck is recommended [ 1596.177421][T23451] EXT4-fs warning (device loop7): dx_probe:813: inode #2: comm syz.7.13941: Hash code is SIPHASH, but hash not in dirent [ 1596.191757][T23451] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.13941: Corrupt directory, running e2fsck is recommended [ 1596.207428][T23451] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.13941: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 1596.278374][T23454] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1596.617507][T23478] bpf: Bad value for 'gid' [ 1597.402518][ T23] page_pool_release_retry() stalled pool shutdown: id 487, 1 inflight 60 sec [ 1599.087409][T23444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1599.126456][T21033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.143865][T18055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.310376][ T23] IPVS: starting estimator thread 0... [ 1599.375880][T23558] loop9: detected capacity change from 0 to 512 [ 1599.390158][T23560] loop5: detected capacity change from 0 to 512 [ 1599.409912][T23558] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.13979: bad orphan inode 13 [ 1599.431781][T23558] loop9: lost filesystem error report for type 5 error -117 [ 1599.432011][T23558] ext4_test_bit(bit=12, block=4) = 1 [ 1599.445121][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1599.445145][ C1] EXT4-fs (loop9): initial error at time 2000000452: ext4_orphan_get:1417 [ 1599.445174][ C1] EXT4-fs (loop9): last error at time 2000000452: ext4_orphan_get:1417 [ 1599.479979][T23552] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1599.494721][T23568] loop2: detected capacity change from 0 to 512 [ 1599.511885][T23560] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.13980: bad orphan inode 13 [ 1599.532719][T23568] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.13981: bad orphan inode 13 [ 1599.569005][T23558] is_bad_inode(inode)=0 [ 1599.573779][T23558] NEXT_ORPHAN(inode)=0 [ 1599.578057][T23558] max_ino=32 [ 1599.578273][T23568] loop2: lost filesystem error report for type 5 error -117 [ 1599.581558][T23558] i_nlink=1 [ 1599.592974][T23558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.609211][T23568] ext4_test_bit(bit=12, block=4) = 1 [ 1599.614618][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1599.614646][ C1] EXT4-fs (loop2): initial error at time 2000000452: ext4_orphan_get:1417 [ 1599.614679][ C1] EXT4-fs (loop2): last error at time 2000000452: ext4_orphan_get:1417 [ 1599.630353][T23560] loop5: lost filesystem error report for type 5 error -117 [ 1599.647881][T23558] tipc: Started in network mode [ 1599.655339][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1599.655363][ C0] EXT4-fs (loop5): initial error at time 2000000452: ext4_orphan_get:1417 [ 1599.655384][ C0] EXT4-fs (loop5): last error at time 2000000452: ext4_orphan_get:1417 [ 1599.686038][T23568] is_bad_inode(inode)=0 [ 1599.690460][T23568] NEXT_ORPHAN(inode)=0 [ 1599.694659][T23560] ext4_test_bit(bit=12, block=4) = 1 [ 1599.700293][T23560] is_bad_inode(inode)=0 [ 1599.704707][T23568] max_ino=32 [ 1599.707961][T23560] NEXT_ORPHAN(inode)=0 [ 1599.713215][T23560] max_ino=32 [ 1599.716577][T23568] i_nlink=1 [ 1599.720044][T23560] i_nlink=1 [ 1599.723840][T23560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.736716][T23568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.752615][T23568] EXT4-fs warning (device loop2): dx_probe:813: inode #2: comm syz.2.13981: Hash code is SIPHASH, but hash not in dirent [ 1599.767496][T23560] EXT4-fs warning (device loop5): dx_probe:813: inode #2: comm syz.5.13980: Hash code is SIPHASH, but hash not in dirent [ 1599.781749][T23560] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.13980: Corrupt directory, running e2fsck is recommended [ 1599.798123][T23558] tipc: Node identity 4, cluster identity 4711 [ 1599.804801][T23558] tipc: Node number set to 4 [ 1599.812758][T23568] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.13981: Corrupt directory, running e2fsck is recommended [ 1599.835292][T23560] EXT4-fs warning (device loop5): dx_probe:813: inode #2: comm syz.5.13980: Hash code is SIPHASH, but hash not in dirent [ 1599.854026][T22485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.863432][T23568] EXT4-fs warning (device loop2): dx_probe:813: inode #2: comm syz.2.13981: Hash code is SIPHASH, but hash not in dirent [ 1599.888286][T23568] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.13981: Corrupt directory, running e2fsck is recommended [ 1599.888434][T23576] tipc: Started in network mode [ 1599.908957][T23560] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.13980: Corrupt directory, running e2fsck is recommended [ 1599.923826][T23568] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.13981: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 1599.958789][T23560] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.13980: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 1599.987785][T23576] tipc: Node identity 4, cluster identity 4711 [ 1600.024074][T23576] tipc: Node number set to 4 [ 1600.120920][T22598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.403157][T21033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.477878][T23618] can0: slcan on ttyS3. [ 1600.567168][T23627] loop2: detected capacity change from 0 to 512 [ 1600.630498][T23627] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.13992: bad orphan inode 13 [ 1600.689077][ T23] IPVS: starting estimator thread 0... [ 1600.699031][T23627] loop2: lost filesystem error report for type 5 error -117 [ 1600.699206][T23627] ext4_test_bit(bit=12, block=4) = 1 [ 1600.706822][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1600.706843][ C1] EXT4-fs (loop2): initial error at time 2000000453: ext4_orphan_get:1417 [ 1600.706871][ C1] EXT4-fs (loop2): last error at time 2000000453: ext4_orphan_get:1417 [ 1600.744022][T23627] is_bad_inode(inode)=0 [ 1600.748627][T23627] NEXT_ORPHAN(inode)=0 [ 1600.752824][T23627] max_ino=32 [ 1600.756254][T23627] i_nlink=1 [ 1600.773654][T23627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.788758][T23604] can0 (unregistered): slcan off ttyS3. [ 1600.841217][T23637] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1600.851319][T23646] loop7: detected capacity change from 0 to 512 [ 1600.880093][T23652] loop3: detected capacity change from 0 to 512 [ 1600.892892][T23646] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.13999: bad orphan inode 13 [ 1600.904234][T23646] loop7: lost filesystem error report for type 5 error -117 [ 1600.904381][T23646] ext4_test_bit(bit=12, block=4) = 1 [ 1600.911818][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1600.911847][ C0] EXT4-fs (loop7): initial error at time 2000000453: ext4_orphan_get:1417 [ 1600.911880][ C0] EXT4-fs (loop7): last error at time 2000000453: ext4_orphan_get:1417 [ 1600.941615][T23646] is_bad_inode(inode)=0 [ 1600.945827][T23646] NEXT_ORPHAN(inode)=0 [ 1600.956124][T21033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.965254][T23646] max_ino=32 [ 1600.968498][T23646] i_nlink=1 [ 1600.982743][T23646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.998827][T23646] EXT4-fs warning (device loop7): dx_probe:813: inode #2: comm syz.7.13999: Hash code is SIPHASH, but hash not in dirent [ 1601.012937][T23664] tipc: Started in network mode [ 1601.019173][T23646] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.13999: Corrupt directory, running e2fsck is recommended [ 1601.032498][T23646] EXT4-fs warning (device loop7): dx_probe:813: inode #2: comm syz.7.13999: Hash code is SIPHASH, but hash not in dirent [ 1601.032764][ T2989] ================================================================== [ 1601.045542][T23646] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.13999: Corrupt directory, running e2fsck is recommended [ 1601.053635][ T2989] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1601.073676][ T2989] [ 1601.076116][ T2989] write to 0xffffffff86cb54c8 of 88 bytes by task 23646 on cpu 0: [ 1601.076327][T23646] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.13999: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 1601.083942][ T2989] prb_reserve+0x6e6/0xae0 [ 1601.107594][ T2989] vprintk_store+0x54a/0x910 [ 1601.111722][T23664] tipc: Node identity 4, cluster identity 4711 [ 1601.112228][ T2989] vprintk_emit+0x1a4/0x600 [ 1601.118415][T23664] tipc: Node number set to 4 [ 1601.122919][ T2989] vprintk_default+0x26/0x30 [ 1601.122946][ T2989] vprintk+0x1d/0x30 [ 1601.122974][ T2989] _printk+0x79/0xa0 [ 1601.122997][ T2989] __ext4_warning_inode+0x184/0x1a0 [ 1601.145300][ T2989] dx_probe+0x21f/0x990 [ 1601.149508][ T2989] ext4_add_entry+0x47b/0x1f80 [ 1601.154319][ T2989] ext4_add_nondir+0x4e/0x180 [ 1601.159053][ T2989] ext4_create+0x1fe/0x2f0 [ 1601.163504][ T2989] path_openat+0xd75/0x2050 [ 1601.168149][ T2989] do_file_open+0x16c/0x290 [ 1601.172707][ T2989] do_sys_openat2+0x94/0x130 [ 1601.177340][ T2989] __x64_sys_openat+0xf2/0x120 [ 1601.182243][ T2989] x64_sys_call+0x1e39/0x3020 [ 1601.187010][ T2989] do_syscall_64+0x12c/0x370 [ 1601.191667][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.197691][ T2989] [ 1601.200043][ T2989] read to 0xffffffff86cb54c8 of 8 bytes by task 2989 on cpu 1: [ 1601.207619][ T2989] _prb_read_valid+0x383/0x950 [ 1601.212567][ T2989] prb_read_valid+0x3c/0x60 [ 1601.217114][ T2989] syslog_print+0x109/0x560 [ 1601.221730][ T2989] do_syslog+0x52b/0x7f0 [ 1601.225991][ T2989] __x64_sys_syslog+0x41/0x50 [ 1601.230683][ T2989] x64_sys_call+0x2b9e/0x3020 [ 1601.235477][ T2989] do_syscall_64+0x12c/0x370 [ 1601.240085][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.246008][ T2989] [ 1601.248440][ T2989] value changed: 0x000000000000254b -> 0x000000000000454b [ 1601.255647][ T2989] [ 1601.257987][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 1601.264197][ T2989] CPU: 1 UID: 0 PID: 2989 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 1601.274994][ T2989] Tainted: [W]=WARN [ 1601.278811][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1601.289074][ T2989] ================================================================== [ 1601.304383][T23646] tipc: Started in network mode [ 1601.309391][T23646] tipc: Node identity 4, cluster identity 4711 [ 1601.315803][T23646] tipc: Node number set to 4 [ 1601.383895][T18055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.