last executing test programs: 15m16.276385s ago: executing program 32 (id=27): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r0, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x800, 0x6) 5m54.055040266s ago: executing program 5 (id=5818): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x550, &(0x7f0000000500)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@i_version}, {@norecovery}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x451, &(0x7f00000003c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920b5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 5m53.650899795s ago: executing program 5 (id=5822): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) 5m53.532907228s ago: executing program 5 (id=5824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) close(r2) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x40080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5m52.445514814s ago: executing program 5 (id=5826): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x2810400, &(0x7f0000000880)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x214, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xdc) rename(&(0x7f0000000440)='./bus\x00', 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x3e) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) fsync(r1) close(r0) 5m52.018793794s ago: executing program 5 (id=5836): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x0, 0x60}, 0x28) r5 = epoll_create1(0x80000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r6, 0x7, r5, 0x0) r8 = epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000580)={0xa0002008}) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, 0x0) 5m51.903153447s ago: executing program 5 (id=5838): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x90000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000200)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 5m51.841365678s ago: executing program 33 (id=5838): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x90000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000200)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 5m8.379716785s ago: executing program 1 (id=6247): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0374"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x45, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) 5m5.565471231s ago: executing program 1 (id=6257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newlink={0x58, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x88d0) 5m5.400309025s ago: executing program 1 (id=6258): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58d", 0xd5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45923cc47acab1da2c1b47f999d17a7f681eb1f12fb8771d", 0x97}, {&(0x7f0000000c80)="b8659518b69136c840de12f29e56372661ffc3250247a0a5b4d89fe71a1b9ced94b7b8948f88860d2b103e52888892ee3eb1e378638a70", 0x37}], 0x2}}], 0x2, 0x4000000) 5m4.864616348s ago: executing program 4 (id=6263): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea00000004", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 5m4.835294248s ago: executing program 4 (id=6264): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21089e, &(0x7f0000000300)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) timer_settime(r0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file3\x00', 0x80000b08) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 5m4.163218004s ago: executing program 1 (id=6267): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xffe0}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 5m3.740779674s ago: executing program 1 (id=6269): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 5m3.403280712s ago: executing program 1 (id=6270): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 5m2.906218954s ago: executing program 4 (id=6272): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x140800, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) poll(0x0, 0x0, 0x8000007) 5m0.385194843s ago: executing program 4 (id=6281): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000001c0)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1218, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/49, 0x31) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 5m0.08422419s ago: executing program 4 (id=6285): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) io_setup(0xa, &(0x7f0000000280)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 4m59.867856896s ago: executing program 4 (id=6289): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r2, &(0x7f0000000080)='%+\x00', 0x40, &(0x7f00000000c0)={@align=0x2, {0x7, 0x4, 0x1, 0x10}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xa2d7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m54.745171587s ago: executing program 3 (id=6308): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x140800, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) poll(&(0x7f0000000140)=[{r1, 0x2cfc08c20dafc34e}], 0x1, 0x8000007) 4m53.636888483s ago: executing program 3 (id=6313): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45923cc47acab1da2c1b47f999d17a7f681eb1f12fb8771d", 0x97}, {&(0x7f0000000c80)="b8659518b69136c840de12f29e56372661ffc3250247a0a5b4d89fe71a1b9ced94b7b8948f88860d2b103e52888892ee3eb1e378638a70", 0x37}], 0x2}}], 0x2, 0x4000000) 4m53.451758818s ago: executing program 3 (id=6316): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000180)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@errors_remount}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff"]) 4m52.807083593s ago: executing program 3 (id=6318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000140)={0x10000000d00, 0x414bb9c9, 0x4, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) fsopen(0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81819, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f881, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) 4m50.502674567s ago: executing program 3 (id=6327): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000580)={[{@shortname_lower}, {@shortname_mixed}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_lower}, {@rodir}, {@shortname_winnt}, {@fat=@errors_continue}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0x2a, 0x356, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) unshare(0x6020400) fsopen(0x0, 0x0) 4m50.127688756s ago: executing program 3 (id=6329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004800000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4095}, 0x20) 4m49.94995063s ago: executing program 34 (id=6329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004800000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4095}, 0x20) 4m46.919538872s ago: executing program 35 (id=6270): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) 4m43.569807661s ago: executing program 36 (id=6289): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r2, &(0x7f0000000080)='%+\x00', 0x40, &(0x7f00000000c0)={@align=0x2, {0x7, 0x4, 0x1, 0x10}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xa2d7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m17.179442175s ago: executing program 6 (id=6488): r0 = memfd_create(0x0, 0x1) pwritev(r0, &(0x7f0000011300), 0x0, 0x800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 4m15.989227992s ago: executing program 6 (id=6489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 4m15.420694316s ago: executing program 6 (id=6491): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000150041cc25bd7000ffdbdf250a108000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000114000200fe"], 0x8c}}, 0x8c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000016c0)={0x14, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x18e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843501580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="6002000090"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000200)=r4}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x15, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x4, 0x5, 0x5, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xda08}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x1, 0x1], &(0x7f0000000980)=[{0x1, 0x1, 0xf, 0xb}, {0x4, 0x5, 0x8, 0x2}, {0x1, 0x2, 0xb, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r6}, &(0x7f0000000280), &(0x7f0000000a80)=r7}, 0x20) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) 4m14.448259339s ago: executing program 6 (id=6497): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x80000000, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 4m14.37382133s ago: executing program 6 (id=6498): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 4m14.194257155s ago: executing program 6 (id=6502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m56.322802417s ago: executing program 37 (id=6502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.423256121s ago: executing program 7 (id=8255): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 7.704567438s ago: executing program 2 (id=8256): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 7.355273506s ago: executing program 9 (id=8257): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.874147328s ago: executing program 7 (id=8260): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6.798086019s ago: executing program 7 (id=8261): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 6.266864832s ago: executing program 9 (id=8262): r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6.225955003s ago: executing program 8 (id=8263): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6.200815954s ago: executing program 0 (id=8264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[], 0x0) 6.156972745s ago: executing program 2 (id=8265): socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRES32=r0, @ANYRES16, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8], 0x50) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 6.100111846s ago: executing program 0 (id=8266): syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffa, 0x8080) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="d3f34746b238aaaabaaaaaaa08004500001c000000"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(0x0, 0x12e) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xf0a0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) unshare(0x2a020480) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') setns(r8, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.099759216s ago: executing program 9 (id=8267): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() sendto$unix(r2, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c71bd77e49389b2721d006c4e04511516643e5d14844e91ff015a5e84dc3ac508610261eeaa05a02a54942b886d", 0xc3, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) tkill(r4, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.91657307s ago: executing program 8 (id=8268): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() sendto$unix(r2, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c71bd77e49389b2721d006c4e04511516643e5d14844e91ff015a5e84dc3ac508610261eeaa05a02a54942b886d", 0xc3, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) tkill(r4, 0xb) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.878519721s ago: executing program 7 (id=8269): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newchain={0x0, 0x64, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0xb}, {0xb, 0xd}, {0x655e660f020c6d2a, 0xd}}}, 0x50}, 0x1, 0x0, 0x0, 0x88000}, 0x59) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x12, &(0x7f00000030c0)={@local, @random="d1c7c73cf1bf", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x88f7}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r9 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.087748363s ago: executing program 0 (id=8270): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRESDEC=0x0, @ANYRES8], 0x50) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r5, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r4, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 3.754040921s ago: executing program 2 (id=8271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.720880322s ago: executing program 2 (id=8272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:00.0', 0xc) 3.311502822s ago: executing program 8 (id=8273): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.014875919s ago: executing program 9 (id=8274): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newchain={0x0, 0x64, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {0xb, 0xd}, {0x655e660f020c6d2a, 0xd}}}, 0x50}, 0x1, 0x0, 0x0, 0x88000}, 0x59) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080047f50024006500000502907864010102e000007a150fb26593a40f7701019404e25a00000014009078ac1433b8d6ec47ae9f"], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x12, &(0x7f00000030c0)={@local, @random="d1c7c73cf1bf", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x88f7}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.54979659s ago: executing program 0 (id=8275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0xffe0}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 2.445053902s ago: executing program 0 (id=8276): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 2.373692874s ago: executing program 8 (id=8277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[], 0x0) 2.327396985s ago: executing program 8 (id=8278): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$unix(r2, &(0x7f0000000300)="dfc3cea65ea8693244d6f9a68d6650d9967da87723c300224018206b06e51e454fa795acac703861de9ea2da099cc6dccc0964255389a2e15909bc11f62b70d4efae8b5383ba23a5270c7cdd078873c3394086749d329ff92de97dcb25984da1cdceb4ada85f52a7c7c7fcacc4b98a0dd2da559317d06fe6e8ed9a2cf078208771e64f7553528e18b404bb1b29f73a16a0e35261a87c71bd77e49389b2721d006c4e04511516643e5d14844e91ff015a5e84dc3ac508610261eeaa05a02a54942b886d", 0xc3, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.154656119s ago: executing program 7 (id=8279): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.596250702s ago: executing program 2 (id=8280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.555322174s ago: executing program 7 (id=8281): socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRES32=r0, @ANYRES16, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8], 0x50) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r3, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 1.410751257s ago: executing program 9 (id=8282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.389580487s ago: executing program 9 (id=8283): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) 1.300365369s ago: executing program 8 (id=8284): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 1.243238871s ago: executing program 2 (id=8285): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 0 (id=8286): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRESDEC=0x0, @ANYRES8], 0x50) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r5, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r4, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) kernel console output (not intermixed with test programs): : Failed to acquire dquot type 0 [ 824.889827][T25769] loop2: lost filesystem error report for type 5 error -117 [ 824.889982][T25769] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.7201: Freeing blocks not in datazone - block = 0, count = 4096 [ 824.911109][T25769] loop2: lost filesystem error report for type 5 error -117 [ 824.911374][T25769] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.7201: Invalid inode bitmap blk 0 in block_group 0 [ 824.933161][T25769] loop2: lost filesystem error report for type 5 error -117 [ 824.933280][T25769] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 824.949384][T14323] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 824.958755][T14323] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 0 [ 824.970685][T14323] loop2: lost filesystem error report for type 5 error -117 [ 824.970827][T25769] loop2: lost filesystem error report for type 5 error -117 [ 824.980632][T25769] EXT4-fs (loop2): 1 orphan inode deleted [ 824.994557][T25769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.023524][T23337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.045078][T25776] loop9: detected capacity change from 0 to 256 [ 825.052318][T25776] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 825.517158][T25795] __nla_validate_parse: 3 callbacks suppressed [ 825.517179][T25795] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7211'. [ 826.035714][T25801] netlink: 'syz.9.7213': attribute type 1 has an invalid length. [ 826.049769][T25801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.122971][T25804] EXT4-fs: inline encryption not supported [ 826.131867][T25804] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 826.189669][T25804] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.7214: Invalid block bitmap block 0 in block_group 0 [ 826.212242][T25804] loop9: lost filesystem error report for type 5 error -117 [ 826.212478][T25804] Quota error (device loop9): write_blk: dquota write failed [ 826.227428][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 826.227444][ C0] EXT4-fs (loop9): initial error at time 1785041890: ext4_read_block_bitmap_nowait:483 [ 826.227476][ C0] EXT4-fs (loop9): last error at time 1785041890: ext4_read_block_bitmap_nowait:483 [ 826.253514][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 826.262871][T25804] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 826.289565][T25804] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.7214: Failed to acquire dquot type 0 [ 826.303790][T25804] loop9: lost filesystem error report for type 5 error -117 [ 826.303993][T25804] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.7214: Freeing blocks not in datazone - block = 0, count = 4096 [ 826.325575][T25804] loop9: lost filesystem error report for type 5 error -117 [ 826.327072][T25804] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.7214: Invalid inode bitmap blk 0 in block_group 0 [ 826.345008][T25813] tipc: Enabled bearer , priority 0 [ 826.347687][T25804] loop9: lost filesystem error report for type 5 error -117 [ 826.353902][T25804] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 826.355482][ T49] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 826.361779][T25804] EXT4-fs (loop9): 1 orphan inode deleted [ 826.385367][T25804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.399709][T25813] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 826.405138][ T49] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 826.413010][T25813] tipc: Resetting bearer [ 826.432791][T25812] tipc: Disabling bearer [ 826.465932][T22553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.585818][T25824] syzkaller1: entered promiscuous mode [ 826.594167][T25824] syzkaller1: entered allmulticast mode [ 826.700808][T25831] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 826.741230][T25834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 827.180740][T25846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7231'. [ 827.200619][T25846] bond0: entered promiscuous mode [ 827.211023][T25846] bond_slave_0: entered promiscuous mode [ 827.220479][T25846] bond_slave_1: entered promiscuous mode [ 827.232729][T25846] bridge0: entered promiscuous mode [ 827.248683][T25846] gretap0: entered promiscuous mode [ 827.259901][T25846] debugfs: 'hsr1' already exists in 'hsr' [ 827.271358][T25846] Cannot create hsr debugfs directory [ 827.279292][T25846] hsr1: entered promiscuous mode [ 827.392418][T25851] syzkaller0: entered promiscuous mode [ 827.400372][T25851] syzkaller0: entered allmulticast mode [ 827.562498][T25858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25858 comm=syz.0.7235 [ 827.587550][T25863] set_capacity_and_notify: 1 callbacks suppressed [ 827.587570][T25863] loop8: detected capacity change from 0 to 1024 [ 827.600843][T25861] loop7: detected capacity change from 0 to 512 [ 827.608012][T25864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.616604][T25864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.633134][T25864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25864 comm=syz.9.7237 [ 827.634142][T25863] EXT4-fs: inline encryption not supported [ 827.658024][T25864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7237'. [ 827.669534][T25863] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 827.681786][T25864] 8021q: adding VLAN 0 to HW filter on device bond4 [ 827.686769][T25861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 827.707930][T25864] vlan2: entered allmulticast mode [ 827.714182][T25864] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 827.716868][T25863] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.7239: Invalid block bitmap block 0 in block_group 0 [ 827.729026][T25861] ext4 filesystem being mounted at /176/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.750400][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 827.756879][ C0] EXT4-fs (loop8): initial error at time 1785041892: ext4_read_block_bitmap_nowait:483 [ 827.762847][T25863] Quota error (device loop8): write_blk: dquota write failed [ 827.766595][ C0] EXT4-fs (loop8): last error at time 1785041892: ext4_read_block_bitmap_nowait:483 [ 827.776292][T25863] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 827.793600][T25863] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.7239: Failed to acquire dquot type 0 [ 827.805211][T25863] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.7239: Freeing blocks not in datazone - block = 0, count = 4096 [ 827.819224][T25863] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.7239: Invalid inode bitmap blk 0 in block_group 0 [ 827.833469][T25863] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 827.842240][T14325] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8 [ 827.851744][T14325] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 0 [ 827.863915][T25863] EXT4-fs (loop8): 1 orphan inode deleted [ 827.876423][T25863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.906450][T22476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.043355][T25880] loop8: detected capacity change from 0 to 256 [ 828.053220][T25880] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 828.316357][T25884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7246'. [ 828.455868][T19913] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 828.475303][T19913] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 828.639510][T25905] tipc: Enabled bearer , priority 0 [ 828.664855][T25905] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 828.717489][T25904] tipc: Disabling bearer [ 829.307645][T25925] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 829.323403][T25925] hsr1: left promiscuous mode [ 829.397028][T25929] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7263'. [ 829.834389][T25938] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 829.951740][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 829.973499][T22405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 830.112415][T25946] syzkaller0: entered promiscuous mode [ 830.127775][T25946] syzkaller0: entered allmulticast mode [ 830.154994][T25946] tipc: Enabled bearer , priority 0 [ 830.187981][T25946] tipc: Resetting bearer [ 830.207417][T25945] tipc: Resetting bearer [ 830.216976][T25953] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7274'. [ 830.236985][T25945] tipc: Disabling bearer [ 831.032007][T25983] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7284'. [ 831.069505][T25111] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 831.078807][T25111] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 831.299359][T25999] syzkaller0: entered promiscuous mode [ 831.305053][T25999] syzkaller0: entered allmulticast mode [ 831.397162][T26011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26011 comm=syz.9.7297 [ 831.410050][T26011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7297'. [ 831.425641][T26011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 831.439457][T26011] vlan2: entered allmulticast mode [ 831.514439][T26011] bond5: (slave vlan2): Error -34 calling dev_set_mtu [ 831.686821][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.117120][T26048] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 832.130334][T26048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 832.308983][T26054] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7314'. [ 832.722004][T26081] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7326'. [ 832.839861][T26086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26086 comm=syz.2.7328 [ 832.858116][T26086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7328'. [ 832.869976][T26088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.879779][T26086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.890966][T26088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.895566][T26086] vlan2: entered allmulticast mode [ 832.903682][T26088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26088 comm=syz.8.7329 [ 832.917263][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7329'. [ 832.925958][T26086] bond2: (slave vlan2): Error -34 calling dev_set_mtu [ 832.944397][T26088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 832.957780][T26088] vlan2: entered allmulticast mode [ 832.964000][T26088] bond3: (slave vlan2): Error -34 calling dev_set_mtu [ 833.025541][T26095] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7331'. [ 833.074110][T26097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7332'. [ 833.425994][T26119] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7342'. [ 833.636756][T26138] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7351'. [ 833.786531][T26151] loop7: detected capacity change from 0 to 256 [ 833.812984][T26151] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 834.221068][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.238857][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.266531][T26168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26168 comm=syz.8.7365 [ 834.309210][T26168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 834.366245][T26178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.390431][T26175] vlan2: entered allmulticast mode [ 834.412953][T26175] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 834.422031][T26178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.463877][T26178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26178 comm=syz.2.7369 [ 834.536393][T26181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 834.573479][T26178] vlan2: entered allmulticast mode [ 834.582906][T26178] bond3: (slave vlan2): Error -34 calling dev_set_mtu [ 834.847581][T26203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.856714][T26203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.866910][T26203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26203 comm=syz.7.7380 [ 834.886495][T26203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.914444][T26203] vlan2: entered allmulticast mode [ 834.920624][T26203] bond2: (slave vlan2): Error -34 calling dev_set_mtu [ 835.028972][T26214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26214 comm=syz.0.7383 [ 835.814650][T26248] syzkaller0: entered promiscuous mode [ 835.820955][T26248] syzkaller0: entered allmulticast mode [ 836.378103][T26279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.393987][T26279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.411524][T26279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26279 comm=syz.2.7409 [ 836.436533][T26279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 836.491529][T26279] vlan2: entered allmulticast mode [ 836.515562][T26279] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 836.583356][T25111] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 836.594342][T25111] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 836.647756][T26288] fido_id[26288]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 837.006705][T26305] __nla_validate_parse: 13 callbacks suppressed [ 837.006721][T26305] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7416'. [ 837.058723][T26307] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7417'. [ 837.070232][T26307] bond0 (unregistering): left promiscuous mode [ 837.076849][T26307] bond_slave_0: left promiscuous mode [ 837.082393][T26307] bond_slave_1: left promiscuous mode [ 837.088080][T26307] bridge0: left promiscuous mode [ 837.094553][T26307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.105105][T26307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.115822][T26307] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 837.124958][T26307] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.132173][T26307] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.140827][T26307] bond0 (unregistering): Released all slaves [ 837.188089][T26310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.197779][T26310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.206923][T26310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26310 comm=syz.2.7418 [ 837.219934][T26310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7418'. [ 837.258384][T26310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.274300][T26315] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7420'. [ 837.320344][T25116] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 837.334960][T25116] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 837.345812][T26322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.358689][T26310] vlan2: entered allmulticast mode [ 837.381194][T26325] fido_id[26325]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 837.393769][T26322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.408676][T26310] bond5: (slave vlan2): Error -34 calling dev_set_mtu [ 837.424399][T26322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26322 comm=syz.9.7423 [ 837.437570][T26329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.447032][T26329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.456874][T26322] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7423'. [ 837.469793][T26322] vlan2: entered allmulticast mode [ 837.478014][T26329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26329 comm=syz.8.7425 [ 837.490915][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7425'. [ 837.507182][T26329] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.523037][T26329] vlan2: entered allmulticast mode [ 837.529236][T26329] bond5: (slave vlan2): Error -34 calling dev_set_mtu [ 837.684030][T26338] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7429'. [ 837.727077][T26340] loop4: detected capacity change from 0 to 7 [ 837.779649][T26346] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7433'. [ 837.810986][ T3389] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 837.828246][ T3389] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 837.856977][T26351] fido_id[26351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 837.874705][T26355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.883724][T26355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.893634][T26355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26355 comm=syz.7.7437 [ 837.907191][T26355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7437'. [ 837.922718][T26353] syzkaller0: entered promiscuous mode [ 837.928346][T26353] syzkaller0: entered allmulticast mode [ 837.944125][T26355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 838.032685][T26358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26358 comm=syz.2.7438 [ 838.045490][T26358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7438'. [ 838.061389][T26358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 838.097533][T26364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.106696][T26364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.116192][T26364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26364 comm=syz.0.7441 [ 838.138075][T26368] loop4: detected capacity change from 0 to 7 [ 838.150942][T26364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.181882][T26370] bond0: entered promiscuous mode [ 838.190662][T26370] bond_slave_0: entered promiscuous mode [ 838.196763][T26370] bond_slave_1: entered promiscuous mode [ 838.202532][T26370] bridge0: entered promiscuous mode [ 838.209833][T26370] gretap0: entered promiscuous mode [ 838.222235][T26370] debugfs: 'hsr1' already exists in 'hsr' [ 838.228332][T26370] Cannot create hsr debugfs directory [ 838.233877][T26370] hsr1: entered promiscuous mode [ 838.244093][T26374] syzkaller0: entered promiscuous mode [ 838.249774][T26374] syzkaller0: entered allmulticast mode [ 838.275406][T26377] loop8: detected capacity change from 0 to 512 [ 838.292592][T26377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 838.305406][T26377] ext4 filesystem being mounted at /233/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.318226][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 838.358659][T26384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.367370][T26384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.376328][T26384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26384 comm=syz.9.7448 [ 838.395670][T26384] 8021q: adding VLAN 0 to HW filter on device bond6 [ 838.408712][T26384] vlan2: entered allmulticast mode [ 838.414676][T26384] bond6: (slave vlan2): Error -34 calling dev_set_mtu [ 838.519734][T26388] loop4: detected capacity change from 0 to 7 [ 838.545287][T26390] tipc: Enabling of bearer rejected, failed to enable media [ 838.678787][T26404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.687615][T26404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.696785][T26404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26404 comm=syz.7.7452 [ 838.712821][T26404] vlan2: entered allmulticast mode [ 838.748910][T26406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.757963][T26406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.767158][T26406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26406 comm=syz.0.7453 [ 838.785617][T26406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 838.798388][T26406] vlan2: entered allmulticast mode [ 838.804617][T26406] bond2: (slave vlan2): Error -34 calling dev_set_mtu [ 839.133224][T26417] bond2: (slave syz_tun): Removing an active aggregator [ 839.141127][T26417] bond2: (slave syz_tun): Releasing backup interface [ 839.217152][T26429] netlink: 'syz.9.7461': attribute type 1 has an invalid length. [ 839.346348][T26434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.355170][T26434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.367262][T26434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26434 comm=syz.9.7463 [ 839.377528][T26436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.389126][T26436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.396230][T26434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 839.420146][T26436] 8021q: adding VLAN 0 to HW filter on device bond4 [ 839.433584][T26436] vlan2: entered allmulticast mode [ 839.439879][T26436] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 840.503491][T26464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.512919][T26464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.525869][T26464] vlan2: entered allmulticast mode [ 840.535092][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 840.554490][T22476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 840.831689][T26472] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.838848][T26472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.846188][T26472] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.853305][T26472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.909833][T26472] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 840.969890][T26472] hsr1: left promiscuous mode [ 841.052328][T26478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.065113][T26478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.081380][T26478] 8021q: adding VLAN 0 to HW filter on device bond8 [ 841.323501][T26485] netlink: 'syz.7.7477': attribute type 10 has an invalid length. [ 842.474359][T26505] vlan2: entered allmulticast mode [ 842.494420][T26507] loop2: detected capacity change from 0 to 512 [ 842.522649][T26507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 842.559541][T26507] ext4 filesystem being mounted at /176/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.587714][T26513] loop4: detected capacity change from 0 to 7 [ 842.599395][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 842.640492][T26517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.649097][T26517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.658125][T26517] selinux_netlink_send: 4 callbacks suppressed [ 842.658142][T26517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26517 comm=syz.8.7489 [ 842.680573][T26517] vlan2: entered allmulticast mode [ 842.963692][T26519] __nla_validate_parse: 8 callbacks suppressed [ 842.963708][T26519] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7490'. [ 842.979971][T26519] bond0 (unregistering): left promiscuous mode [ 842.986373][T26519] bond_slave_0: left promiscuous mode [ 842.991902][T26519] bond_slave_1: left promiscuous mode [ 842.997485][T26519] bridge0: left promiscuous mode [ 843.003670][T26519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.013548][T26519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.024120][T26519] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 843.033005][T26519] bond0 (unregistering): Released all slaves [ 843.340883][T26533] syzkaller1: entered promiscuous mode [ 843.357944][T26533] syzkaller1: entered allmulticast mode [ 843.474637][T26536] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7495'. [ 843.812742][T26550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.821916][T26550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.832124][T26550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26550 comm=syz.8.7500 [ 843.845202][T26550] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7500'. [ 843.861423][T26550] 8021q: adding VLAN 0 to HW filter on device bond6 [ 844.082991][T26553] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7501'. [ 844.194048][T26560] syzkaller0: entered promiscuous mode [ 844.199738][T26560] syzkaller0: entered allmulticast mode [ 844.207184][T26560] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 844.435759][T26569] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7508'. [ 844.487374][T26573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.501207][T26573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.511241][T26573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26573 comm=syz.7.7510 [ 844.526062][T26575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.540727][T26573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7510'. [ 844.550152][T26575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.561159][T26575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26575 comm=syz.8.7511 [ 844.569893][T26573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.581675][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7511'. [ 844.596930][T26575] 8021q: adding VLAN 0 to HW filter on device bond7 [ 844.796675][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 844.816376][T23337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 845.001409][T26585] tipc: Enabling of bearer rejected, failed to enable media [ 845.200549][T26609] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7520'. [ 845.261818][ T3404] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 845.277416][ T3404] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 845.289287][T26617] loop8: detected capacity change from 0 to 512 [ 845.311993][T26617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 845.342056][T26618] fido_id[26618]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 845.359914][T26617] ext4 filesystem being mounted at /247/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.399287][T14323] Bluetooth: hci0: Frame reassembly failed (-84) [ 845.435460][T26629] loop4: detected capacity change from 0 to 7 [ 845.791939][T26636] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7528'. [ 845.812115][T26636] 8021q: adding VLAN 0 to HW filter on device bond9 [ 845.832183][T26636] vlan2: entered allmulticast mode [ 845.903134][T26639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.911895][T26639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.924108][T26639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26639 comm=syz.9.7529 [ 845.939125][T26639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7529'. [ 845.955164][T26639] 8021q: adding VLAN 0 to HW filter on device bond10 [ 846.132555][T26644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.142146][T26644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.151625][T26644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26644 comm=syz.2.7530 [ 846.171739][T26644] 8021q: adding VLAN 0 to HW filter on device bond7 [ 846.408870][ T3403] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 846.416869][ T3403] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 846.451151][T26654] fido_id[26654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 846.578467][T26661] syzkaller0: entered promiscuous mode [ 846.584072][T26661] syzkaller0: entered allmulticast mode [ 846.690255][T26663] syzkaller0: entered promiscuous mode [ 846.700558][T26663] syzkaller0: entered allmulticast mode [ 847.352352][T26687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.360888][T26687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.370133][T26687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26687 comm=syz.7.7546 [ 847.389246][T26687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 847.648507][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 847.648530][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 847.688574][T22476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 848.029218][T26704] netlink: 'syz.8.7550': attribute type 10 has an invalid length. [ 848.043560][T26704] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.055350][T26704] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.728105][T26723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.751077][T26723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.781200][T26723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26723 comm=syz.7.7559 [ 848.834358][T26723] __nla_validate_parse: 2 callbacks suppressed [ 848.834480][T26723] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7559'. [ 848.913689][T26723] 8021q: adding VLAN 0 to HW filter on device bond6 [ 848.948047][T26726] vlan2: entered allmulticast mode [ 848.963005][T26726] bond6: (slave vlan2): Error -34 calling dev_set_mtu [ 849.100074][T26732] syzkaller0: entered promiscuous mode [ 849.106087][T26732] syzkaller0: entered allmulticast mode [ 849.479140][T26740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.488710][T26740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.498816][T26740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26740 comm=syz.2.7566 [ 849.718672][T26743] loop4: detected capacity change from 0 to 7 [ 849.747381][T26745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7568'. [ 849.826900][T26753] tipc: Enabled bearer , priority 0 [ 849.848753][T26753] tipc: Resetting bearer [ 849.863611][T26752] tipc: Disabling bearer [ 849.955666][T26759] loop7: detected capacity change from 0 to 256 [ 849.991727][T26759] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 850.168049][T26764] loop4: detected capacity change from 0 to 7 [ 850.474349][T26772] netlink: 'syz.8.7578': attribute type 10 has an invalid length. [ 850.742922][T26777] syzkaller0: entered promiscuous mode [ 850.802789][T26777] syzkaller0: entered allmulticast mode [ 850.935746][T26780] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.942903][T26780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.950262][T26780] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.957393][T26780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.337431][T26780] geneve1: left promiscuous mode [ 851.373228][T26780] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 851.434612][T26781] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 851.501526][T26788] loop4: detected capacity change from 0 to 7 [ 851.570147][T26790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.631716][T26790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.682855][T26790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26790 comm=syz.0.7585 [ 852.152637][T26800] loop4: detected capacity change from 0 to 7 [ 852.264429][T26804] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7591'. [ 852.381923][T26814] vlan2: entered allmulticast mode [ 852.689510][T26829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.699403][T26829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.812782][T26831] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.819920][T26831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.827391][T26831] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.834510][T26831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.348406][T26844] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7607'. [ 853.364691][T26844] 8021q: adding VLAN 0 to HW filter on device bond11 [ 853.420835][T26847] syzkaller0: entered promiscuous mode [ 853.455534][T26847] syzkaller0: entered allmulticast mode [ 853.490011][T26851] syzkaller0: entered promiscuous mode [ 853.506639][T26851] syzkaller0: entered allmulticast mode [ 853.937704][T26864] syzkaller0: entered promiscuous mode [ 853.963827][T26864] syzkaller0: entered allmulticast mode [ 853.978875][T26866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.998137][T26864] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 854.015530][T26866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.065532][T26868] syzkaller0: entered promiscuous mode [ 854.089431][T26868] syzkaller0: entered allmulticast mode [ 854.163644][T26871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26871 comm=syz.2.7618 [ 854.236790][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7619'. [ 854.255512][T26873] 8021q: adding VLAN 0 to HW filter on device bond12 [ 854.501706][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 854.503715][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 854.543033][T26885] syzkaller0: entered promiscuous mode [ 854.548808][T26885] syzkaller0: entered allmulticast mode [ 854.609600][T26887] syzkaller1: entered promiscuous mode [ 854.615736][T26887] syzkaller1: entered allmulticast mode [ 854.736042][T26897] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 854.766527][T26899] syzkaller0: entered promiscuous mode [ 854.772706][T26899] syzkaller0: entered allmulticast mode [ 854.950409][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7631'. [ 854.970376][T26905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 854.984603][T26905] vlan2: entered allmulticast mode [ 855.016739][T26910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.025291][T26910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.096524][T26916] syzkaller1: entered promiscuous mode [ 855.102141][T26916] syzkaller1: entered allmulticast mode [ 855.229728][T26923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 855.335766][T26929] 8021q: adding VLAN 0 to HW filter on device bond13 [ 855.357959][T26932] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 855.368171][T26929] bond13: (slave syz_tun): Enslaving as an active interface with an up link [ 855.508534][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7645'. [ 855.525889][T26937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 855.539763][T26937] vlan2: entered allmulticast mode [ 855.627129][T26943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7647'. [ 855.668252][T26946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.676829][T26946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.686007][T26946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26946 comm=syz.2.7648 [ 855.698815][T26946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7648'. [ 855.714621][T26946] 8021q: adding VLAN 0 to HW filter on device bond8 [ 855.804102][T26957] syzkaller0: entered promiscuous mode [ 855.809665][T26957] syzkaller0: entered allmulticast mode [ 855.818594][T26957] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 855.969962][T26963] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 856.354483][T26975] netlink: 'syz.0.7658': attribute type 10 has an invalid length. [ 856.463194][T26977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7659'. [ 856.951382][T26981] syzkaller0: entered promiscuous mode [ 857.045550][T26981] syzkaller0: entered allmulticast mode [ 857.117810][T26988] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.125119][T26988] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.211010][T26988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.233217][T26988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.334734][T14325] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.361268][T14325] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.394094][T14325] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.430292][T14325] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.888741][T27003] netlink: 'syz.8.7667': attribute type 10 has an invalid length. [ 857.958471][T27003] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.971288][T27003] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.028714][T27008] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7668'. [ 858.242448][T27012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7670'. [ 858.522226][T27024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 858.530616][T27022] syzkaller0: entered promiscuous mode [ 858.537102][T27022] syzkaller0: entered allmulticast mode [ 858.562190][T27022] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 858.736621][T27029] syzkaller0: entered promiscuous mode [ 858.747013][T27029] syzkaller0: entered allmulticast mode [ 858.763079][T27029] tipc: Enabled bearer , priority 0 [ 858.793743][T27029] tipc: Resetting bearer [ 858.812039][T27028] tipc: Resetting bearer [ 858.829171][T27028] tipc: Disabling bearer [ 859.389028][T27038] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7680'. [ 859.460769][T27040] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7681'. [ 859.499645][T27042] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 859.815123][T27047] netlink: 'syz.7.7684': attribute type 1 has an invalid length. [ 859.831730][T27047] 8021q: adding VLAN 0 to HW filter on device bond7 [ 859.865796][T27047] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 860.364640][T27064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7691'. [ 860.415804][T27068] loop4: detected capacity change from 0 to 7 [ 860.645978][T27073] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.653235][T27073] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.690355][T27073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.700722][T27073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.766446][ T30] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.775754][T14323] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.793957][T14323] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.804147][T14323] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.933075][T27082] 8021q: adding VLAN 0 to HW filter on device bond9 [ 860.949324][T27082] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 861.082238][T27094] loop4: detected capacity change from 0 to 7 [ 861.145810][T27096] tipc: Enabled bearer , priority 0 [ 861.153672][T27096] syzkaller0: entered promiscuous mode [ 861.159249][T27096] syzkaller0: entered allmulticast mode [ 861.167772][T27096] tipc: Resetting bearer [ 861.175602][T27095] tipc: Resetting bearer [ 861.183561][T27095] tipc: Disabling bearer [ 861.426449][T27107] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.437506][T27107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.471312][T27107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.480072][T27107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.490557][T27107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 861.501008][T27107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 861.514060][T27107] veth1_vlan: left promiscuous mode [ 861.520135][T27107] veth0_vlan: left promiscuous mode [ 861.527679][T27107] veth0_vlan: entered promiscuous mode [ 861.534739][T27107] veth1_vlan: entered promiscuous mode [ 861.542756][T27107] veth1_macvtap: left promiscuous mode [ 861.548869][T27107] veth0_macvtap: left promiscuous mode [ 861.555116][T27107] veth0_macvtap: entered promiscuous mode [ 861.561768][T27107] veth1_macvtap: entered promiscuous mode [ 861.570378][T27107] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 861.577617][T27107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.586476][T27107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.595509][T27107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.604468][T27107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 861.616766][T27107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.625262][T27107] hsr1: left promiscuous mode [ 861.632353][T27107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.641850][T27107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.650619][T27107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 861.659314][T27107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.667790][T27107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.676311][T27107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 861.685044][T27107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 861.727429][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.734563][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.743048][T27108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.780669][T27108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.806620][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.813777][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.831403][T27108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27108 comm=syz.0.7709 [ 861.852411][T14325] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.861451][T14325] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.891618][T14325] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.911666][T14325] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.925545][T27108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7709'. [ 861.942623][T27108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.979363][T27108] vlan2: entered allmulticast mode [ 861.985568][T27108] bond5: (slave vlan2): Error -34 calling dev_set_mtu [ 862.110008][T27120] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.117262][T27120] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.151667][T27120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.172576][T27120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.262114][T14325] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.271843][T14315] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.297806][T14315] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.307029][T14315] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.634932][T27136] loop4: detected capacity change from 0 to 7 [ 862.664163][T27138] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 862.915443][T27144] loop4: detected capacity change from 0 to 7 [ 862.951014][T27146] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7721'. [ 863.503321][T27162] loop8: detected capacity change from 0 to 256 [ 863.516783][T27162] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 863.701939][T27168] loop4: detected capacity change from 0 to 7 [ 863.741626][T27170] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7728'. [ 863.756149][T27170] bond0 (unregistering): left promiscuous mode [ 863.778215][T27170] bond_slave_0: left promiscuous mode [ 863.788902][T27170] bond_slave_1: left promiscuous mode [ 863.799489][T27170] bridge0: left promiscuous mode [ 863.811979][T27170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.823862][T27170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.834628][T27170] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 863.844790][T27170] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 863.856538][T27170] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 863.868868][T27170] bond0 (unregistering): Released all slaves [ 863.995310][T27178] loop4: detected capacity change from 0 to 7 [ 864.024463][T27180] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7732'. [ 864.075401][T27182] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 864.106767][T27184] syzkaller0: entered promiscuous mode [ 864.112500][T27184] syzkaller0: entered allmulticast mode [ 864.217579][T27189] tipc: Enabled bearer , priority 0 [ 864.225967][T27189] syzkaller0: entered promiscuous mode [ 864.232344][T27189] syzkaller0: entered allmulticast mode [ 864.243657][T27189] tipc: Resetting bearer [ 864.252704][T27188] tipc: Resetting bearer [ 864.266121][T27188] tipc: Disabling bearer [ 864.272062][T27191] loop9: detected capacity change from 0 to 256 [ 864.287347][T27191] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 864.340705][T27194] loop4: detected capacity change from 0 to 7 [ 864.503510][T27206] tipc: Enabling of bearer rejected, failed to enable media [ 864.520107][T27206] syzkaller0: entered promiscuous mode [ 864.525990][T27206] syzkaller0: entered allmulticast mode [ 864.534649][T27206] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 864.688448][T27221] syzkaller0: entered promiscuous mode [ 864.694150][T27221] syzkaller0: entered allmulticast mode [ 864.878438][T27225] syzkaller0: entered promiscuous mode [ 864.884271][T27225] syzkaller0: entered allmulticast mode [ 864.898071][T27225] tipc: Enabled bearer , priority 0 [ 864.910723][T27225] tipc: Resetting bearer [ 864.919387][T27224] tipc: Resetting bearer [ 864.930470][T27224] tipc: Disabling bearer [ 865.122251][T27229] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.146004][T27229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.195967][T27229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.212048][T27229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.234714][T27229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 865.257684][T27229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.283292][T27229] veth1_vlan: left promiscuous mode [ 865.326265][T27229] veth0_vlan: left promiscuous mode [ 865.341319][T27229] veth0_vlan: entered promiscuous mode [ 865.362635][T27229] veth1_vlan: entered promiscuous mode [ 865.392890][T27229] veth1_macvtap: left promiscuous mode [ 865.409642][T27229] veth0_macvtap: left promiscuous mode [ 865.433633][T27237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27237 comm=syz.7.7755 [ 865.439011][T27229] veth0_macvtap: entered promiscuous mode [ 865.449099][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7755'. [ 865.461653][T27235] loop8: detected capacity change from 0 to 256 [ 865.473128][T27235] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 865.516390][T27229] veth1_macvtap: entered promiscuous mode [ 865.538052][T27229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.556653][T27229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.575374][T27229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.593727][T27229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.622881][T27247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7757'. [ 865.633027][T27229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.660863][T27229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.818899][T27229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.837542][T27229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.846134][T27229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 865.854529][T27229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 865.901683][T27229] 8021q: adding VLAN 0 to HW filter on device bond6 [ 865.910610][T27229] 8021q: adding VLAN 0 to HW filter on device bond7 [ 865.919068][T27229] 8021q: adding VLAN 0 to HW filter on device bond8 [ 865.945353][T27229] 8021q: adding VLAN 0 to HW filter on device bond9 [ 865.954196][T27229] 8021q: adding VLAN 0 to HW filter on device bond10 [ 865.962748][T27229] vlan2: left allmulticast mode [ 865.997430][T27229] 8021q: adding VLAN 0 to HW filter on device bond11 [ 866.010970][T27229] 8021q: adding VLAN 0 to HW filter on device bond12 [ 866.025186][T27229] 8021q: adding VLAN 0 to HW filter on device bond13 [ 866.037895][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.045051][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.073059][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.080197][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.114198][T27238] vlan2: entered allmulticast mode [ 866.130027][T14325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.144111][T14325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.154957][T14323] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 866.163049][T14323] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 866.187672][T27258] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.194862][T27258] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.202311][ T3403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 866.233249][T27258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.242603][T27258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.283288][T14325] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.299577][T14325] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.313116][T27263] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7762'. [ 866.322491][T27263] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7762'. [ 866.419850][T27272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7766'. [ 866.430900][T27272] bond7: (slave syz_tun): Releasing backup interface [ 866.482644][T27275] syzkaller0: entered promiscuous mode [ 866.489805][T27275] syzkaller0: entered allmulticast mode [ 866.553067][T27280] loop2: detected capacity change from 0 to 256 [ 866.563081][T27280] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 866.708687][T27286] syzkaller0: entered promiscuous mode [ 866.717183][T27286] syzkaller0: entered allmulticast mode [ 866.731280][T27286] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 866.741778][T27288] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7771'. [ 866.954161][T27299] syzkaller0: entered promiscuous mode [ 866.959689][T27299] syzkaller0: entered allmulticast mode [ 867.222651][T27305] syzkaller0: entered promiscuous mode [ 867.228176][T27305] syzkaller0: entered allmulticast mode [ 867.253983][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 867.254149][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 867.272683][T27307] loop4: detected capacity change from 0 to 7 [ 867.312083][T27310] syzkaller0: entered promiscuous mode [ 867.317935][T27311] loop7: detected capacity change from 0 to 256 [ 867.325038][T27310] syzkaller0: entered allmulticast mode [ 867.332718][T27311] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 867.375648][T27315] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7783'. [ 867.485203][T27326] loop9: detected capacity change from 0 to 512 [ 867.512202][T27328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.529041][T27328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.539564][T27326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 867.539987][T27328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27328 comm=syz.7.7789 [ 867.568853][T27326] ext4 filesystem being mounted at /269/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.584235][T27333] loop8: detected capacity change from 0 to 512 [ 867.631959][T27328] vlan2: entered allmulticast mode [ 867.668999][T27333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 867.689069][T27333] ext4 filesystem being mounted at /293/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.583041][T27356] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7795'. [ 868.683925][T27358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27358 comm=syz.2.7796 [ 868.747721][T27358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7796'. [ 868.813448][T27358] vlan2: entered allmulticast mode [ 869.026759][T27377] loop4: detected capacity change from 0 to 7 [ 869.136956][T27380] syzkaller0: entered promiscuous mode [ 869.150176][T27380] syzkaller0: entered allmulticast mode [ 869.433994][T22553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 869.943187][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 869.949245][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 869.966054][T22476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 870.276970][T27413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.292244][T27413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.300121][T27415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.311157][T27413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27413 comm=syz.8.7814 [ 870.323958][T27415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.329903][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7814'. [ 870.341310][T27415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27415 comm=syz.2.7815 [ 870.350716][T27413] vlan2: entered allmulticast mode [ 870.356176][T27415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7815'. [ 870.378035][T27415] 8021q: adding VLAN 0 to HW filter on device bond10 [ 870.398743][T27419] netlink: 'syz.9.7816': attribute type 1 has an invalid length. [ 870.412826][T27419] 8021q: adding VLAN 0 to HW filter on device bond14 [ 870.441540][T27423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.450137][T27423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.459743][T27423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27423 comm=syz.9.7817 [ 870.966925][T27431] loop2: detected capacity change from 0 to 512 [ 871.002453][T27431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 871.015148][T27431] ext4 filesystem being mounted at /245/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.048217][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 871.062899][T27439] loop8: detected capacity change from 0 to 256 [ 871.496965][T27449] netlink: 'syz.9.7824': attribute type 10 has an invalid length. [ 871.822526][T27454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27454 comm=syz.0.7828 [ 871.878910][T27454] vlan2: entered allmulticast mode [ 872.719806][T27464] syzkaller0: entered promiscuous mode [ 872.725549][T27464] syzkaller0: entered allmulticast mode [ 872.798928][T27466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.809993][T27466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.862356][T14325] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.876796][T14325] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.890917][T14325] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.905661][T14325] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.951792][T27471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.961487][T27471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.971561][T27471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27471 comm=syz.8.7833 [ 873.239546][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 873.272842][T23337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 873.329194][T27477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.355199][T27475] syzkaller0: entered promiscuous mode [ 873.361953][T27477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.371325][T27477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27477 comm=syz.2.7835 [ 873.372890][T27475] syzkaller0: entered allmulticast mode [ 873.384562][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7835'. [ 873.405684][T27477] 8021q: adding VLAN 0 to HW filter on device bond11 [ 873.562175][T27483] netlink: 'syz.8.7838': attribute type 1 has an invalid length. [ 873.599139][T27483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.679061][T27493] loop8: detected capacity change from 0 to 256 [ 873.723409][T27497] syzkaller0: entered promiscuous mode [ 873.729044][T27497] syzkaller0: entered allmulticast mode [ 873.783467][T27499] syzkaller0: entered promiscuous mode [ 873.793731][T27499] syzkaller0: entered allmulticast mode [ 874.001417][T27502] tipc: Enabled bearer , priority 0 [ 874.023159][T27502] tipc: Resetting bearer [ 874.053978][T27501] tipc: Disabling bearer [ 874.064469][T27505] syzkaller0: entered promiscuous mode [ 874.074434][T27505] syzkaller0: entered allmulticast mode [ 874.195813][T27510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.209468][T27510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.232241][T27510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27510 comm=syz.7.7848 [ 874.359763][T27515] syzkaller0: entered promiscuous mode [ 874.386882][T27515] syzkaller0: entered allmulticast mode [ 874.407571][T27518] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7852'. [ 874.471988][T27520] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7853'. [ 874.526627][T27524] loop2: detected capacity change from 0 to 256 [ 874.534475][T27524] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 874.557424][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.586244][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.596108][T27526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27526 comm=syz.9.7856 [ 874.608942][T27526] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7856'. [ 874.634567][T27526] 8021q: adding VLAN 0 to HW filter on device bond15 [ 874.658114][T27529] syzkaller0: entered promiscuous mode [ 874.663758][T27529] syzkaller0: entered allmulticast mode [ 874.838830][T27531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7858'. [ 875.193392][T27541] netlink: 'syz.7.7860': attribute type 10 has an invalid length. [ 875.347716][T27549] syzkaller0: entered promiscuous mode [ 875.369418][T27549] syzkaller0: entered allmulticast mode [ 875.558760][T27553] syzkaller0: entered promiscuous mode [ 875.582463][T27553] syzkaller0: entered allmulticast mode [ 875.607560][T27553] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 876.105102][T27567] syzkaller0: entered promiscuous mode [ 876.118658][T27567] syzkaller0: entered allmulticast mode [ 876.396926][T27571] syzkaller0: entered promiscuous mode [ 876.404150][T27582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.413094][T27571] syzkaller0: entered allmulticast mode [ 876.423715][T27582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.437041][T27582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27582 comm=syz.2.7873 [ 876.457555][T27582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7873'. [ 876.481601][T27582] 8021q: adding VLAN 0 to HW filter on device bond12 [ 876.510138][T27582] vlan2: entered allmulticast mode [ 876.530359][T27582] bond12: (slave vlan2): Error -34 calling dev_set_mtu [ 876.563705][T27587] syzkaller0: entered promiscuous mode [ 876.668088][T27587] syzkaller0: entered allmulticast mode [ 877.656705][T27595] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7877'. [ 877.715882][T27597] loop2: detected capacity change from 0 to 256 [ 877.839030][T27599] syzkaller0: entered promiscuous mode [ 877.859022][T27599] syzkaller0: entered allmulticast mode [ 877.981002][T27601] netlink: 116 bytes leftover after parsing attributes in process `syz.8.7880'. [ 879.142944][T27636] syzkaller0: entered promiscuous mode [ 879.148732][T27636] syzkaller0: entered allmulticast mode [ 879.167277][T27636] tipc: Enabling of bearer rejected, failed to enable media [ 879.187510][T27638] syzkaller0: entered promiscuous mode [ 879.193423][T27638] syzkaller0: entered allmulticast mode [ 879.422432][T27644] syzkaller0: entered promiscuous mode [ 879.428174][T27644] syzkaller0: entered allmulticast mode [ 879.591751][T27650] loop8: detected capacity change from 0 to 128 [ 879.610890][T27650] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 879.626479][T27650] FAT-fs (loop8): Filesystem has been set read-only [ 879.646512][T27648] netlink: 'syz.0.7895': attribute type 10 has an invalid length. [ 880.238481][T27659] syzkaller0: entered promiscuous mode [ 880.277261][T27659] syzkaller0: entered allmulticast mode [ 881.339739][T27681] tipc: Enabled bearer , priority 0 [ 881.355295][T27680] tipc: Disabling bearer [ 881.460079][T27686] loop7: detected capacity change from 0 to 128 [ 881.468086][T27687] tipc: Enabled bearer , priority 0 [ 881.477041][T27687] tipc: Resetting bearer [ 881.490834][T27685] tipc: Disabling bearer [ 881.502381][T27686] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 881.512483][T27686] FAT-fs (loop7): Filesystem has been set read-only [ 881.669858][T27690] loop8: detected capacity change from 0 to 128 [ 881.703396][T27690] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 881.739531][T27690] FAT-fs (loop8): Filesystem has been set read-only [ 882.224458][T27700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.234025][T27700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.243859][T27700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27700 comm=syz.9.7916 [ 882.256749][T27700] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7916'. [ 882.286210][T27700] 8021q: adding VLAN 0 to HW filter on device bond16 [ 882.763051][T27705] tipc: Enabled bearer , priority 0 [ 882.792950][T27705] syzkaller0: entered promiscuous mode [ 882.803335][T27705] syzkaller0: entered allmulticast mode [ 882.819433][T27705] tipc: Resetting bearer [ 882.836872][T27704] tipc: Resetting bearer [ 882.846289][T27704] tipc: Disabling bearer [ 882.945358][T27709] syzkaller0: entered promiscuous mode [ 882.951140][T27709] syzkaller0: entered allmulticast mode [ 883.078721][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7922'. [ 883.444163][T27726] syzkaller0: entered promiscuous mode [ 883.449913][T27726] syzkaller0: entered allmulticast mode [ 883.509813][T27735] loop2: detected capacity change from 0 to 256 [ 883.512571][T27733] loop8: detected capacity change from 0 to 1024 [ 883.549934][T27733] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 883.590554][T27733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.610219][T27738] tipc: Enabled bearer , priority 0 [ 883.620507][T27741] loop2: detected capacity change from 0 to 1024 [ 883.627456][T27738] syzkaller0: entered promiscuous mode [ 883.639066][T27738] syzkaller0: entered allmulticast mode [ 883.641110][T27741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 883.654192][T27733] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.666650][T27738] tipc: Resetting bearer [ 883.682525][T27741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.695558][T27736] tipc: Resetting bearer [ 883.711057][T27736] tipc: Disabling bearer [ 883.712814][T27741] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.740686][T27744] syzkaller0: entered promiscuous mode [ 883.763568][T27744] syzkaller0: entered allmulticast mode [ 883.798259][T27752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.807309][T27752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.817006][T27752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27752 comm=syz.9.7936 [ 883.832983][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7936'. [ 883.848350][T27752] 8021q: adding VLAN 0 to HW filter on device bond17 [ 884.055336][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 884.751860][T27781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.760626][T27782] netlink: 'syz.9.7943': attribute type 10 has an invalid length. [ 884.801160][T27781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.986597][T27786] syzkaller0: entered promiscuous mode [ 884.999525][T27786] syzkaller0: entered allmulticast mode [ 885.552736][T27796] loop8: detected capacity change from 0 to 128 [ 885.600260][T27796] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 885.624354][T27796] FAT-fs (loop8): Filesystem has been set read-only [ 886.453510][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 887.332769][T27801] syzkaller0: entered promiscuous mode [ 887.338712][T27801] syzkaller0: entered allmulticast mode [ 887.623621][T27809] loop4: detected capacity change from 0 to 7 [ 888.627022][T27835] syzkaller0: entered promiscuous mode [ 888.644140][T27840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.686544][T27835] syzkaller0: entered allmulticast mode [ 888.703104][T27840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.725425][T27841] tipc: Enabling of bearer rejected, failed to enable media [ 888.752108][T27840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27840 comm=syz.7.7966 [ 888.778411][ T3671] Bluetooth: hci0: sending frame failed (-49) [ 888.784766][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 889.463101][T27846] loop4: detected capacity change from 0 to 7 [ 889.574752][T27850] loop7: detected capacity change from 0 to 128 [ 889.613543][T27852] syzkaller0: entered promiscuous mode [ 889.632247][T27850] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 889.653957][T27852] syzkaller0: entered allmulticast mode [ 889.670531][T27850] FAT-fs (loop7): Filesystem has been set read-only [ 889.682253][T27855] tipc: Enabled bearer , priority 0 [ 889.834067][T27852] tipc: Resetting bearer [ 889.853310][T27851] tipc: Resetting bearer [ 889.865187][T27851] tipc: Disabling bearer [ 890.710822][T27867] loop4: detected capacity change from 0 to 7 [ 890.720202][T27870] loop7: detected capacity change from 0 to 128 [ 890.741099][T27870] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 890.756524][T27870] FAT-fs (loop7): Filesystem has been set read-only [ 890.965816][T27876] loop2: detected capacity change from 0 to 512 [ 891.502148][T27876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 891.525284][T27876] ext4 filesystem being mounted at /274/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.544320][T14323] Bluetooth: hci0: Frame reassembly failed (-84) [ 891.706402][T27884] loop4: detected capacity change from 0 to 7 [ 891.782824][T27886] syzkaller0: entered promiscuous mode [ 891.788382][T27886] syzkaller0: entered allmulticast mode [ 891.796535][T27886] tipc: Enabled bearer , priority 0 [ 891.811113][T27886] tipc: Resetting bearer [ 891.818072][T27890] syzkaller0: entered promiscuous mode [ 891.824431][T27890] syzkaller0: entered allmulticast mode [ 891.832261][T27885] tipc: Resetting bearer [ 891.839955][T27885] tipc: Disabling bearer [ 891.955719][T27890] tipc: Enabling of bearer rejected, failed to enable media [ 892.270179][T27902] loop7: detected capacity change from 0 to 256 [ 892.473701][T27905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27905 comm=syz.9.7988 [ 892.526181][T27906] syzkaller0: entered promiscuous mode [ 892.543481][T27905] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7988'. [ 892.553823][T27906] syzkaller0: entered allmulticast mode [ 892.635323][T27905] 8021q: adding VLAN 0 to HW filter on device bond18 [ 893.669987][T27921] netlink: 'syz.9.7991': attribute type 10 has an invalid length. [ 893.730941][T27926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27926 comm=syz.0.7993 [ 893.744611][T27924] loop4: detected capacity change from 0 to 7 [ 893.768174][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7993'. [ 893.780444][T27926] vlan2: entered allmulticast mode [ 893.799209][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 893.805373][T22321] Bluetooth: hci0: command 0x1003 tx timeout [ 893.833437][T23337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 894.003123][T27933] syzkaller0: entered promiscuous mode [ 894.008839][T27934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7995'. [ 894.019514][T27933] syzkaller0: entered allmulticast mode [ 894.080263][T27936] loop2: detected capacity change from 0 to 1024 [ 894.092354][T27936] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 894.115281][T27936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.172992][T27936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.288745][T27946] syzkaller0: entered promiscuous mode [ 894.294562][T27946] syzkaller0: entered allmulticast mode [ 894.640385][T27959] loop2: detected capacity change from 0 to 512 [ 894.689115][T27959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 894.709430][T27959] ext4 filesystem being mounted at /279/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.858979][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8010'. [ 896.922031][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 896.928355][T22321] Bluetooth: hci0: command 0x1003 tx timeout [ 896.955513][T23337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 897.027969][T27979] loop8: detected capacity change from 0 to 256 [ 897.051573][T27977] syzkaller0: entered promiscuous mode [ 897.059123][T27977] syzkaller0: entered allmulticast mode [ 897.067058][T27977] tipc: Enabled bearer , priority 0 [ 897.076450][T27977] tipc: Resetting bearer [ 897.083545][T27976] tipc: Resetting bearer [ 897.143916][T27976] tipc: Disabling bearer [ 897.546759][T27982] syzkaller0: entered promiscuous mode [ 897.573398][T27982] syzkaller0: entered allmulticast mode [ 898.694552][T28008] loop9: detected capacity change from 0 to 1024 [ 898.702953][T28008] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 898.721541][T28008] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.737554][T28008] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.019717][T28012] loop9: detected capacity change from 0 to 512 [ 899.062582][T28012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 899.077873][T28012] ext4 filesystem being mounted at /304/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.100149][T14315] Bluetooth: hci0: Frame reassembly failed (-84) [ 899.131372][T28020] tipc: Enabled bearer , priority 0 [ 899.138713][T28020] syzkaller0: entered promiscuous mode [ 899.144280][T28020] syzkaller0: entered allmulticast mode [ 899.153330][T28020] tipc: Resetting bearer [ 899.160321][T28019] tipc: Resetting bearer [ 899.166995][T28019] tipc: Disabling bearer [ 899.269962][T28022] syzkaller0: entered promiscuous mode [ 899.275666][T28022] syzkaller0: entered allmulticast mode [ 899.548387][T28035] tipc: Enabling of bearer rejected, failed to enable media [ 899.635732][T28044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8028'. [ 900.160719][T28054] syzkaller0: entered promiscuous mode [ 900.166495][T28054] syzkaller0: entered allmulticast mode [ 900.662530][T28070] syzkaller0: entered promiscuous mode [ 900.668270][T28070] syzkaller0: entered allmulticast mode [ 900.758175][T28071] netlink: 'syz.0.8039': attribute type 10 has an invalid length. [ 900.916052][T28073] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8042'. [ 901.316472][T28077] loop8: detected capacity change from 0 to 256 [ 901.363995][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 901.370172][T22321] Bluetooth: hci0: command 0x1003 tx timeout [ 902.391654][T22553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 902.808747][T28082] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8045'. [ 903.640290][T28096] syzkaller0: entered promiscuous mode [ 903.648238][T28096] syzkaller0: entered allmulticast mode [ 903.815119][T28104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8050'. [ 903.915346][T28109] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8053'. [ 903.931259][T28110] loop9: detected capacity change from 0 to 256 [ 905.080383][T28130] syzkaller0: entered promiscuous mode [ 905.093924][T28130] syzkaller0: entered allmulticast mode [ 905.123800][T28118] tipc: Enabling of bearer rejected, failed to enable media [ 906.027244][T28141] netlink: 'syz.0.8059': attribute type 10 has an invalid length. [ 906.098965][T28143] loop7: detected capacity change from 0 to 256 [ 906.107351][T28142] loop2: detected capacity change from 0 to 256 [ 906.486619][T28143] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 907.564251][T28150] syzkaller0: entered promiscuous mode [ 907.779392][T28150] syzkaller0: entered allmulticast mode [ 907.818295][T28152] loop9: detected capacity change from 0 to 512 [ 907.831072][T28153] tipc: Enabled bearer , priority 0 [ 907.861661][T28152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 907.883497][T28149] tipc: Resetting bearer [ 907.893413][T28149] tipc: Disabling bearer [ 907.909906][T28152] ext4 filesystem being mounted at /308/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.935102][T22553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 907.991652][T28160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.001425][T28160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.011983][T28160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28160 comm=syz.8.8067 [ 908.025111][T28160] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8067'. [ 908.097806][T28160] 8021q: adding VLAN 0 to HW filter on device bond8 [ 908.121185][T28167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28167 comm=syz.7.8069 [ 908.145963][T28164] vlan2: entered allmulticast mode [ 908.162356][T28167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8069'. [ 908.176034][T28164] bond8: (slave vlan2): Error -34 calling dev_set_mtu [ 908.197478][T28167] vlan2: entered allmulticast mode [ 908.322921][T28172] loop7: detected capacity change from 0 to 256 [ 908.974289][T28178] syzkaller0: entered promiscuous mode [ 908.985421][T28178] syzkaller0: entered allmulticast mode [ 910.015649][T28190] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8077'. [ 910.849347][T28194] loop7: detected capacity change from 0 to 1024 [ 910.882642][T28194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 910.918441][T28200] loop2: detected capacity change from 0 to 128 [ 910.940112][T28194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.975016][T28202] tipc: Enabled bearer , priority 0 [ 910.984509][T28200] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 911.011909][T28202] syzkaller0: entered promiscuous mode [ 911.019890][T28194] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.031022][T28200] FAT-fs (loop2): Filesystem has been set read-only [ 911.041026][T28202] syzkaller0: entered allmulticast mode [ 911.209474][T28202] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 911.234654][T28202] tipc: Resetting bearer [ 911.340659][T28201] tipc: Resetting bearer [ 911.360646][T28212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.370305][T28212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.379927][T28201] tipc: Disabling bearer [ 911.393055][T28210] syzkaller0: entered promiscuous mode [ 911.400478][T28212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28212 comm=syz.0.8085 [ 911.413199][T28210] syzkaller0: entered allmulticast mode [ 911.421634][T28210] tipc: Enabled bearer , priority 0 [ 911.428869][T28212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8085'. [ 911.439930][T28210] tipc: Resetting bearer [ 911.472043][T28212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 911.497595][T28209] tipc: Resetting bearer [ 911.507586][T28209] tipc: Disabling bearer [ 911.528115][T28214] vlan2: entered allmulticast mode [ 911.535958][T28216] loop8: detected capacity change from 0 to 512 [ 911.543876][T28214] bond6: (slave vlan2): Error -34 calling dev_set_mtu [ 911.570402][T28216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 911.622347][T28216] ext4 filesystem being mounted at /354/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.704884][T22476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 911.954561][T28227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.985459][T28227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.008489][T28227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28227 comm=syz.2.8091 [ 912.035492][T28227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8091'. [ 912.063147][T28227] 8021q: adding VLAN 0 to HW filter on device bond13 [ 912.082167][T28227] vlan2: entered allmulticast mode [ 912.088106][T28227] bond13: (slave vlan2): Error -34 calling dev_set_mtu [ 913.442334][T28251] syzkaller0: entered promiscuous mode [ 913.454157][ T3381] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 913.460994][T28243] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 913.479567][T28251] syzkaller0: entered allmulticast mode [ 913.525300][T28256] loop7: detected capacity change from 0 to 512 [ 913.575003][T28256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 913.591726][T28256] ext4 filesystem being mounted at /394/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.703731][T22405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 913.865150][T28270] syzkaller0: entered promiscuous mode [ 913.877537][T28270] syzkaller0: entered allmulticast mode [ 914.133602][T28276] syzkaller0: entered promiscuous mode [ 914.149118][T28276] syzkaller0: entered allmulticast mode [ 914.326528][T28284] syzkaller0: entered promiscuous mode [ 914.332186][T28284] syzkaller0: entered allmulticast mode [ 914.340011][T28284] tipc: Enabled bearer , priority 0 [ 914.348209][T28284] tipc: Resetting bearer [ 914.364130][T28283] tipc: Resetting bearer [ 914.380545][T28283] tipc: Disabling bearer [ 914.959906][T28290] loop7: detected capacity change from 0 to 512 [ 915.024351][T28290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 915.229276][T28290] ext4 filesystem being mounted at /397/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.553719][T28302] netlink: 'syz.8.8114': attribute type 10 has an invalid length. [ 916.439190][ T3671] Bluetooth: hci0: sending frame failed (-49) [ 916.445498][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 916.867121][T22405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 916.891997][T28312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.922966][T28310] syzkaller0: entered promiscuous mode [ 916.928812][T28312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.956243][T28312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28312 comm=syz.9.8119 [ 916.971006][T28310] syzkaller0: entered allmulticast mode [ 916.999005][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8119'. [ 917.109180][T28312] 8021q: adding VLAN 0 to HW filter on device bond19 [ 917.203840][T28323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.226488][T28323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.248650][T28323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28323 comm=syz.7.8116 [ 917.279318][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8116'. [ 917.366561][T28323] 8021q: adding VLAN 0 to HW filter on device bond8 [ 917.377275][T28326] vlan2: entered allmulticast mode [ 917.383113][T28326] bond8: (slave vlan2): Error -34 calling dev_set_mtu [ 917.486007][T28331] netlink: 'syz.0.8122': attribute type 10 has an invalid length. [ 917.615920][T28330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.629069][T28330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.800515][T14325] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.865436][T14325] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.940972][T14325] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.013609][T14325] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.217088][T28340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.243697][T28342] loop8: detected capacity change from 0 to 512 [ 918.255679][T28340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.296575][T28340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28340 comm=syz.2.8125 [ 918.335758][T28342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 918.481871][T28342] ext4 filesystem being mounted at /363/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 918.639105][T28350] netlink: 'syz.7.8127': attribute type 10 has an invalid length. [ 918.884043][T28352] loop9: detected capacity change from 0 to 128 [ 918.913796][T28352] FAT-fs (loop9): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 918.944991][T28352] FAT-fs (loop9): Filesystem has been set read-only [ 919.173172][T28356] loop9: detected capacity change from 0 to 256 [ 919.209801][T28359] tipc: Enabled bearer , priority 0 [ 919.233651][T28359] syzkaller0: entered promiscuous mode [ 919.249586][T28359] syzkaller0: entered allmulticast mode [ 919.375171][T28359] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 919.384583][T28359] tipc: Resetting bearer [ 919.391669][T28357] tipc: Resetting bearer [ 919.399361][T28357] tipc: Disabling bearer [ 921.482997][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 921.516786][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 921.679232][T28364] netlink: 'syz.2.8132': attribute type 10 has an invalid length. [ 922.580817][T22476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 922.617279][T28368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28368 comm=syz.9.8134 [ 922.738311][T28376] netlink: 76 bytes leftover after parsing attributes in process `syz.8.8135'. [ 922.819273][ T12] bridge_slave_1: left allmulticast mode [ 922.826766][ T12] bridge_slave_1: left promiscuous mode [ 922.840625][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.980867][ T12] bridge_slave_0: left allmulticast mode [ 922.993249][ T12] bridge_slave_0: left promiscuous mode [ 923.007440][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.094278][T28388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8138'. [ 923.396831][ T28] audit: type=1400 audit(1785041980.489:2172): avc: denied { write } for pid=28370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.572228][ T28] audit: type=1400 audit(1785041980.645:2173): avc: denied { write } for pid=28397 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.609978][ T12] gretap0 (unregistering): left promiscuous mode [ 923.634043][ T12] bond1 (unregistering): Released all slaves [ 923.649650][ T12] bond2 (unregistering): Released all slaves [ 923.659259][ T12] bond3 (unregistering): Released all slaves [ 923.668939][ T12] bond4 (unregistering): Released all slaves [ 923.678577][ T12] bond0 (unregistering): Released all slaves [ 923.687745][ T12] bond5 (unregistering): Released all slaves [ 923.703799][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 923.806361][T28402] syzkaller0: entered promiscuous mode [ 923.843386][T28402] syzkaller0: entered allmulticast mode [ 923.857466][T28409] loop2: detected capacity change from 0 to 1024 [ 923.868581][T28409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 923.982871][T28402] tipc: Enabled bearer , priority 0 [ 924.014511][T28409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.035766][T28415] netlink: 'syz.8.8142': attribute type 10 has an invalid length. [ 924.065438][T28402] tipc: Resetting bearer [ 924.133148][T28409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.856484][T28401] tipc: Resetting bearer [ 924.878618][T28401] tipc: Disabling bearer [ 924.908640][ T12] tipc: Left network mode [ 924.924357][ T12] hsr_slave_0: left promiscuous mode [ 924.939243][ T12] hsr_slave_1: left promiscuous mode [ 924.961631][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.993024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.024821][T28429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.066552][T28429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.090332][ T28] audit: type=1400 audit(1785041982.047:2174): avc: denied { write } for pid=28408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.114241][T28429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28429 comm=syz.0.8145 [ 925.154033][ T12] team0 (unregistering): Port device team_slave_1 removed [ 925.170128][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8145'. [ 925.181929][ T28] audit: type=1400 audit(1785041982.139:2175): avc: denied { write } for pid=28432 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.206007][ T12] team0 (unregistering): Port device team_slave_0 removed [ 925.295916][T28429] 8021q: adding VLAN 0 to HW filter on device bond7 [ 925.357402][T28433] vlan2: entered allmulticast mode [ 925.368089][T28433] bond7: (slave vlan2): Error -34 calling dev_set_mtu [ 925.383757][T28438] tipc: Enabling of bearer rejected, failed to enable media [ 925.393534][T28438] syzkaller0: entered promiscuous mode [ 925.401004][T28438] syzkaller0: entered allmulticast mode [ 925.435737][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 925.553421][T28447] loop7: detected capacity change from 0 to 256 [ 925.573216][ T28] audit: type=1400 audit(1785041982.499:2176): avc: denied { write } for pid=28440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.602853][T28447] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 925.656668][ T28] audit: type=1400 audit(1785041982.573:2177): avc: denied { write } for pid=28453 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.709323][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 925.902386][ T12] IPVS: stop unused estimator thread 0... [ 927.393895][ T28] audit: type=1400 audit(1785041984.177:2178): avc: denied { write } for pid=28456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.445829][T28471] netlink: 'syz.8.8148': attribute type 10 has an invalid length. [ 928.447355][ T28] audit: type=1400 audit(1785041984.832:2179): avc: denied { write } for pid=28483 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.790384][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 930.067062][T28496] loop9: detected capacity change from 0 to 256 [ 930.076509][T28497] loop2: detected capacity change from 0 to 256 [ 930.251155][T28499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8154'. [ 932.960288][T28517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.979247][T28517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.010611][T28517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28517 comm=syz.7.8159 [ 933.056889][T28517] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8159'. [ 933.138579][T28517] 8021q: adding VLAN 0 to HW filter on device bond9 [ 933.159049][T28520] vlan2: entered allmulticast mode [ 933.174623][T28520] bond9: (slave vlan2): Error -34 calling dev_set_mtu [ 933.202026][T28522] syzkaller0: entered promiscuous mode [ 933.207802][T28522] syzkaller0: entered allmulticast mode [ 933.337832][T28524] loop8: detected capacity change from 0 to 256 [ 933.836654][T28529] loop2: detected capacity change from 0 to 512 [ 933.895346][T28529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 933.937738][T28535] tipc: Enabled bearer , priority 0 [ 934.031231][T28529] ext4 filesystem being mounted at /304/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.063122][T28539] syzkaller0: entered promiscuous mode [ 934.099768][T28539] syzkaller0: entered allmulticast mode [ 934.555288][T28542] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.565860][T28542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.593733][T28542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.602351][T28542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.613363][T28542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 934.623996][T28542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 934.636788][T28542] veth1_vlan: left promiscuous mode [ 934.642770][T28542] veth0_vlan: left promiscuous mode [ 934.650179][T28542] veth0_vlan: entered promiscuous mode [ 934.657000][T28542] veth1_vlan: entered promiscuous mode [ 934.665812][T28542] veth1_macvtap: left promiscuous mode [ 934.672224][T28542] veth0_macvtap: left promiscuous mode [ 934.678517][T28542] veth0_macvtap: entered promiscuous mode [ 934.684973][T28542] veth1_macvtap: entered promiscuous mode [ 934.693611][T28542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 934.702586][T28542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 934.711747][T28542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 934.720474][T28542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 934.732752][T28542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 934.743358][T28542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 934.752916][T28542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 934.761300][T28542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 934.770195][T28542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.778728][T28542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 934.787302][T28542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 934.796016][T28542] 8021q: adding VLAN 0 to HW filter on device bond7 [ 935.054424][T28535] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 935.062443][T28547] loop4: detected capacity change from 0 to 7 [ 935.109280][T14321] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.116434][T14321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.156456][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 935.341716][T14321] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.348853][T14321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.480762][T28552] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8168'. [ 935.494770][T28555] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8169'. [ 935.508861][T11687] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.521642][T11687] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.532880][T28543] tipc: Resetting bearer [ 935.550608][T28533] tipc: Resetting bearer [ 935.562620][T28533] tipc: Disabling bearer [ 935.601182][T11687] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.620045][T11687] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.662652][T28557] tipc: Enabled bearer , priority 0 [ 935.682925][T28557] syzkaller0: entered promiscuous mode [ 935.693241][T28557] syzkaller0: entered allmulticast mode [ 935.702962][T28557] tipc: Resetting bearer [ 935.710832][T28556] tipc: Resetting bearer [ 935.712657][T28559] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8171'. [ 935.741228][T28556] tipc: Disabling bearer [ 935.868438][T28569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.891807][T28569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.911423][T28573] loop9: detected capacity change from 0 to 256 [ 935.919217][T28569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28569 comm=syz.8.8175 [ 935.977159][T28569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8175'. [ 936.021496][T28569] 8021q: adding VLAN 0 to HW filter on device bond9 [ 936.042927][T28569] vlan2: entered allmulticast mode [ 936.055533][T28569] bond9: (slave vlan2): Error -34 calling dev_set_mtu [ 936.679538][T28583] loop4: detected capacity change from 0 to 7 [ 937.008364][T28585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.069392][T28585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.094292][T28589] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8181'. [ 937.117708][T28588] tipc: Enabled bearer , priority 0 [ 937.126554][T28585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28585 comm=syz.0.8179 [ 937.149241][T28588] syzkaller0: entered promiscuous mode [ 937.162771][T28588] syzkaller0: entered allmulticast mode [ 937.168548][T28585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8179'. [ 937.204794][T28588] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 937.349248][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 937.355568][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 937.363588][T28594] tipc: Resetting bearer [ 937.386513][T28585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 937.534329][T28590] vlan2: entered allmulticast mode [ 937.560397][T28590] bond8: (slave vlan2): Error -34 calling dev_set_mtu [ 937.596735][T28586] tipc: Resetting bearer [ 937.611595][T28586] tipc: Disabling bearer [ 937.843055][T28603] loop7: detected capacity change from 0 to 512 [ 937.955446][T28605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28605 comm=syz.8.8186 [ 937.973195][T28603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 937.986040][T28605] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8186'. [ 937.986197][T28603] ext4 filesystem being mounted at /415/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.019905][T28605] vlan2: entered allmulticast mode [ 938.361682][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8189'. [ 938.416489][T28618] tipc: Enabled bearer , priority 0 [ 938.459145][T28618] syzkaller0: entered promiscuous mode [ 938.496787][T28618] syzkaller0: entered allmulticast mode [ 938.548929][T28620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.579157][T28618] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 938.604821][T28620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.632847][T28617] tipc: Resetting bearer [ 938.661006][T28620] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8190'. [ 938.676239][T28617] tipc: Disabling bearer [ 938.912854][T28620] 8021q: adding VLAN 0 to HW filter on device bond10 [ 938.935971][T28623] vlan2: entered allmulticast mode [ 939.290809][T28625] loop4: detected capacity change from 0 to 7 [ 939.791981][T28627] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.802899][T28627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.843923][T28627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.852809][T28627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.864261][T28627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 939.874652][T28627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.887640][T28627] veth1_vlan: left promiscuous mode [ 939.893655][T28627] veth0_vlan: left promiscuous mode [ 939.901165][T28627] veth0_vlan: entered promiscuous mode [ 939.908254][T28627] veth1_vlan: entered promiscuous mode [ 939.916824][T28627] veth1_macvtap: left promiscuous mode [ 939.923194][T28627] veth0_macvtap: left promiscuous mode [ 939.929413][T28627] veth0_macvtap: entered promiscuous mode [ 939.936123][T28627] veth1_macvtap: entered promiscuous mode [ 939.945598][T28627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.954676][T28627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.964092][T28627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.973027][T28627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 939.987892][T28627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 939.997365][T28627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.006055][T28627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 940.014644][T28627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 940.023217][T28627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 940.032323][T28627] 8021q: adding VLAN 0 to HW filter on device bond5 [ 940.056233][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.069338][T22405] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 940.118197][T14321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.127104][T14321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.162859][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.170072][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.199441][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.206736][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.323979][T11687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.455033][T28636] tipc: Enabled bearer , priority 0 [ 940.473240][T28636] syzkaller0: entered promiscuous mode [ 940.481251][T28636] syzkaller0: entered allmulticast mode [ 940.532790][T28640] loop9: detected capacity change from 0 to 512 [ 940.533716][T28636] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 940.565060][T28639] syzkaller0: entered promiscuous mode [ 940.570879][T28639] syzkaller0: entered allmulticast mode [ 940.573682][T28640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 940.587525][T28639] tipc: Enabled bearer , priority 0 [ 940.604886][T28637] tipc: Resetting bearer [ 940.634731][T28637] tipc: Disabling bearer [ 940.652232][T28640] ext4 filesystem being mounted at /337/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.674127][T28636] tipc: Resetting bearer [ 940.764797][T28635] tipc: Resetting bearer [ 940.800699][T28635] tipc: Disabling bearer [ 940.823120][T23337] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 940.855348][T28648] tipc: Enabled bearer , priority 0 [ 940.872891][T28648] syzkaller0: entered promiscuous mode [ 940.881922][T28648] syzkaller0: entered allmulticast mode [ 940.889697][T28648] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 940.899881][T28648] tipc: Resetting bearer [ 940.974549][T28647] tipc: Resetting bearer [ 940.991668][T28647] tipc: Disabling bearer [ 941.051988][T28653] tipc: Enabled bearer , priority 0 [ 941.077947][T28653] syzkaller0: entered promiscuous mode [ 941.097771][T28653] syzkaller0: entered allmulticast mode [ 941.141274][T28653] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 941.199672][T28653] tipc: Resetting bearer [ 941.247556][T28651] tipc: Resetting bearer [ 941.284384][T28651] tipc: Disabling bearer [ 941.767715][ T28] audit: type=1400 audit(1785041997.429:2180): avc: denied { write } for pid=28659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.816196][ T28] audit: type=1400 audit(1785041997.476:2181): avc: denied { write } for pid=28675 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.926920][T28680] syzkaller0: entered promiscuous mode [ 941.932697][T28680] syzkaller0: entered allmulticast mode [ 941.940744][T28680] tipc: Enabled bearer , priority 0 [ 941.952544][T28680] tipc: Resetting bearer [ 941.963861][T28679] tipc: Resetting bearer [ 941.999473][T28679] tipc: Disabling bearer [ 942.006040][T28682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.015823][T28682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.027658][T28682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8204'. [ 942.046324][T28682] 8021q: adding VLAN 0 to HW filter on device bond9 [ 942.092013][T28682] vlan2: entered allmulticast mode [ 942.100434][T28685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8205'. [ 942.174042][T28688] loop4: detected capacity change from 0 to 7 [ 942.374690][ T28] audit: type=1400 audit(1785041997.992:2182): avc: denied { write } for pid=28689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.483242][ T28] audit: type=1400 audit(1785041998.084:2183): avc: denied { write } for pid=28706 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.505899][T28708] syzkaller0: entered promiscuous mode [ 942.520793][T28708] syzkaller0: entered allmulticast mode [ 942.542148][T28708] tipc: Enabled bearer , priority 0 [ 942.588616][T28708] tipc: Resetting bearer [ 942.617182][T28707] tipc: Resetting bearer [ 942.634359][T28707] tipc: Disabling bearer [ 942.652279][T28712] tipc: Enabling of bearer rejected, failed to enable media [ 942.760059][T28716] loop2: detected capacity change from 0 to 128 [ 942.822222][T28716] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 942.841956][T28716] FAT-fs (loop2): Filesystem has been set read-only [ 942.861021][T22553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 943.830221][ T3381] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 943.854259][T28725] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 944.720017][T28735] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8218'. [ 944.785388][T28739] loop4: detected capacity change from 0 to 7 [ 944.824306][T28740] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.838582][T28740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.919667][T28740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.929555][T28740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.944141][T28740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 944.954619][T28740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 944.969729][T28740] veth1_vlan: left promiscuous mode [ 944.975751][T28740] veth0_vlan: left promiscuous mode [ 944.983215][T28740] veth0_vlan: entered promiscuous mode [ 944.990176][T28740] veth1_vlan: entered promiscuous mode [ 944.998617][T28740] veth1_macvtap: left promiscuous mode [ 945.004856][T28740] veth0_macvtap: left promiscuous mode [ 945.011777][T28740] veth0_macvtap: entered promiscuous mode [ 945.019185][T28740] veth1_macvtap: entered promiscuous mode [ 945.035839][T28740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.047778][T28740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.200443][T28740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 945.211709][T28740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 945.222783][T28740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 945.241934][T28740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 945.252342][T28740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 945.262993][T28740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.273831][T28740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 945.284246][T28740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 945.296680][T28740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 945.306903][T28740] 8021q: adding VLAN 0 to HW filter on device bond7 [ 945.317250][T28740] 8021q: adding VLAN 0 to HW filter on device bond8 [ 945.325886][T28740] 8021q: adding VLAN 0 to HW filter on device bond9 [ 945.334499][T28740] 8021q: adding VLAN 0 to HW filter on device bond10 [ 945.343692][T28740] 8021q: adding VLAN 0 to HW filter on device bond11 [ 945.381253][T28740] 8021q: adding VLAN 0 to HW filter on device bond12 [ 945.390493][T28740] 8021q: adding VLAN 0 to HW filter on device bond13 [ 945.496365][T14323] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.503510][T14323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.569623][T28749] netlink: 'syz.0.8220': attribute type 10 has an invalid length. [ 945.580565][ T28] audit: type=1400 audit(1785042000.915:2184): avc: denied { write } for pid=28730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.611262][T14323] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.618380][T14323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.652044][ T28] audit: type=1400 audit(1785042001.008:2185): avc: denied { write } for pid=28756 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.693802][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.726217][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.757599][ T93] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 945.775235][ T93] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 945.783950][ T3381] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 945.806574][T28749] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.817037][T28749] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.874321][ T3381] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 945.882088][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.892554][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.901378][T28772] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8227'. [ 946.016316][ T28] audit: type=1400 audit(1785042001.349:2186): avc: denied { write } for pid=28773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.044104][T28792] tipc: Enabling of bearer rejected, failed to enable media [ 946.088570][ T28] audit: type=1400 audit(1785042001.423:2187): avc: denied { write } for pid=28793 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.138649][T28796] syzkaller0: entered promiscuous mode [ 946.154300][T28800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.162932][T28796] syzkaller0: entered allmulticast mode [ 946.170606][T28800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.184096][T28800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28800 comm=syz.7.8231 [ 946.432922][T28809] loop4: detected capacity change from 0 to 7 [ 946.507187][T28811] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8235'. [ 946.551225][T28800] vlan2: entered allmulticast mode [ 946.803086][T25108] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 946.812051][T28825] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8241'. [ 946.855260][T28829] tipc: Enabling of bearer rejected, failed to enable media [ 947.155683][T28840] netlink: 'syz.2.8243': attribute type 10 has an invalid length. [ 947.216280][T28845] loop4: detected capacity change from 0 to 7 [ 947.230568][T28848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28848 comm=syz.7.8248 [ 947.250703][T28846] tipc: Enabled bearer , priority 0 [ 947.277037][T28844] syzkaller0: entered promiscuous mode [ 947.286010][T28844] syzkaller0: entered allmulticast mode [ 947.293979][T28848] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8248'. [ 947.316989][T28846] syzkaller0: entered promiscuous mode [ 947.333037][T28846] syzkaller0: entered allmulticast mode [ 947.354218][T28852] vlan2: entered allmulticast mode [ 947.369384][T28851] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 947.384248][T28846] tipc: Resetting bearer [ 947.394284][T28841] tipc: Resetting bearer [ 947.524036][T28841] tipc: Disabling bearer [ 947.665791][T28859] loop8: detected capacity change from 0 to 512 [ 947.744599][T28861] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8253'. [ 947.814391][T28859] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 947.886777][T28859] ext4 filesystem being mounted at /386/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.242311][T28895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.271033][T28895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.299070][T28895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28895 comm=syz.0.8259 [ 949.360793][T28895] vlan2: entered allmulticast mode [ 949.432982][T28898] loop4: detected capacity change from 0 to 7 [ 949.838942][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 950.028795][T28902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28902 comm=syz.9.8262 [ 950.041662][T28902] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8262'. [ 950.057263][T22476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 950.100298][T28906] loop4: detected capacity change from 0 to 7 [ 950.491699][T28919] netlink: 'syz.0.8266': attribute type 10 has an invalid length. [ 951.251186][T28917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.274398][T28917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.295669][T28917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28917 comm=syz.7.8269 [ 951.455089][T28917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8269'. [ 951.495356][T28917] 8021q: adding VLAN 0 to HW filter on device bond10 [ 952.149131][T28922] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.163481][T28922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.255200][T28922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.265641][T28922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.279853][T28922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 952.290273][T28922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 952.305345][T28922] veth1_vlan: left promiscuous mode [ 952.311962][T28922] veth0_vlan: left promiscuous mode [ 952.320804][T28922] veth0_vlan: entered promiscuous mode [ 952.329401][T28922] veth1_vlan: entered promiscuous mode [ 952.350934][T28922] veth1_macvtap: left promiscuous mode [ 952.357808][T28922] veth0_macvtap: left promiscuous mode [ 952.398796][T28922] veth0_macvtap: entered promiscuous mode [ 952.405780][T28922] veth1_macvtap: entered promiscuous mode [ 952.415423][T28922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.425130][T28922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.434603][T28922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.714886][T28922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.724410][T28922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 952.736456][T28922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 952.745063][T28922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 952.753841][T28922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 952.763371][T28922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 952.772967][T28922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 952.783711][T28922] 8021q: adding VLAN 0 to HW filter on device bond7 [ 952.794848][T28922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.805443][T28922] 8021q: adding VLAN 0 to HW filter on device bond8 [ 952.949541][T28917] vlan2: entered allmulticast mode [ 952.956741][T28917] bond10: (slave vlan2): Error -34 calling dev_set_mtu [ 953.246868][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.253981][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.281697][ T3389] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 953.342900][T28938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.382398][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.389541][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.412084][T28938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.448993][T28938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28938 comm=syz.9.8274 [ 953.699123][ T93] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.713149][ T93] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.736277][ T93] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.749292][ T93] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.800212][T25109] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 953.806986][T28934] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 954.132436][T28949] loop4: detected capacity change from 0 to 7 [ 954.669376][ T3403] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 954.898685][T28958] loop9: detected capacity change from 0 to 512 [ 954.941562][T28958] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 954.972384][T28958] ext4 filesystem being mounted at /353/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.379401][T14323] Bluetooth: hci0: Frame reassembly failed (-84) [ 957.090672][T28976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.108718][T28976] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.123379][T28976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.507277][T28976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.516321][T28976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.527607][T28976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 957.538290][T28976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 957.550941][T28976] veth1_vlan: left promiscuous mode [ 957.556929][T28976] veth0_vlan: left promiscuous mode [ 957.564257][T28976] veth0_vlan: entered promiscuous mode [ 957.570671][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 957.572300][T28976] veth1_vlan: entered promiscuous mode [ 957.576958][T22321] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 957.588393][T28976] veth1_macvtap: left promiscuous mode [ 957.588560][T22321] ================================================================== [ 957.588593][T22321] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 957.588623][T22321] [ 957.588630][T22321] write to 0xffffffff86c783a0 of 8 bytes by task 28976 on cpu 1: [ 957.588648][T22321] data_alloc+0x2fc/0x380 [ 957.588672][T22321] prb_reserve+0x8e3/0xaf0 [ 957.588710][T22321] vprintk_store+0x54a/0x910 [ 957.588734][T22321] vprintk_emit+0x1a4/0x600 [ 957.588755][T22321] vprintk_default+0x26/0x30 [ 957.588777][T22321] vprintk+0x1d/0x30 [ 957.588810][T22321] _printk+0x79/0xa0 [ 957.588859][T22321] __netdev_printk+0x310/0x370 [ 957.588976][T22321] netdev_info+0xa6/0xd0 [ 957.589011][T22321] __dev_set_promiscuity+0x1e5/0x3c0 [ 957.589036][T22321] __dev_set_rx_mode+0x1e4/0x220 [ 957.589063][T22321] dev_set_rx_mode+0x31/0x50 [ 957.589100][T22321] __dev_open+0x4a5/0x550 [ 957.589149][T22321] __dev_change_flags+0x1c8/0x490 [ 957.589181][T22321] netif_change_flags+0x53/0xc0 [ 957.589208][T22321] do_setlink+0x8fc/0x2860 [ 957.589276][T22321] rtnl_newlink+0xf51/0x1400 [ 957.589303][T22321] rtnetlink_rcv_msg+0x64b/0x720 [ 957.589379][T28976] veth0_macvtap: left promiscuous mode [ 957.589330][T22321] netlink_rcv_skb+0x11e/0x220 [ 957.589422][T22321] rtnetlink_rcv+0x1c/0x30 [ 957.589444][T22321] netlink_unicast+0x5a7/0x680 [ 957.589463][T22321] netlink_sendmsg+0x5be/0x6f0 [ 957.589487][T22321] ____sys_sendmsg+0x532/0x580 [ 957.589566][T22321] ___sys_sendmsg+0x195/0x1e0 [ 957.589606][T22321] __x64_sys_sendmsg+0xd4/0x160 [ 957.589645][T22321] x64_sys_call+0x194c/0x3020 [ 957.589668][T22321] do_syscall_64+0x136/0x3c0 [ 957.589744][T22321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.589785][T22321] [ 957.589793][T22321] read to 0xffffffff86c783a0 of 16 bytes by task 22321 on cpu 0: [ 957.589814][T22321] _prb_read_valid+0x183/0x930 [ 957.589834][T22321] prb_read_valid+0x3c/0x60 [ 957.589859][T22321] printk_get_next_message+0xea/0x550 [ 957.589890][T22321] console_flush_all+0x2bc/0x6b0 [ 957.589917][T22321] console_unlock+0xa1/0x280 [ 957.589941][T22321] vprintk_emit+0x3e4/0x600 [ 957.589969][T22321] vprintk_default+0x26/0x30 [ 957.589998][T22321] vprintk+0x1d/0x30 [ 957.590034][T22321] _printk+0x79/0xa0 [ 957.590049][T22321] bt_err+0xa7/0xd0 [ 957.590079][T22321] hci_dev_open_sync+0xf8e/0x2260 [ 957.590144][T22321] hci_power_on+0xef/0x390 [ 957.590187][T22321] process_scheduled_works+0x4d4/0x9a0 [ 957.590224][T22321] worker_thread+0x569/0x750 [ 957.590258][T22321] kthread+0x221/0x270 [ 957.590273][T28976] veth0_macvtap: entered promiscuous mode [ 957.590280][T22321] ret_from_fork+0x146/0x330 [ 957.590321][T22321] ret_from_fork_asm+0x1a/0x30 [ 957.590345][T22321] [ 957.590350][T22321] Reported by Kernel Concurrency Sanitizer on: [ 957.590366][T22321] CPU: 0 UID: 0 PID: 22321 Comm: kworker/u9:0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 957.590395][T22321] Tainted: [W]=WARN [ 957.590404][T22321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 957.590423][T22321] Workqueue: hci0 hci_power_on [ 957.590450][T22321] ================================================================== [ 957.591707][T28976] veth1_macvtap: entered promiscuous mode [ 957.907908][T28976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.916930][T28976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.926008][T28976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.935175][T28976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.949682][T28976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 957.959026][T28976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 957.967660][T28976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 957.976196][T28976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 957.985012][T28976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 957.993302][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 957.996008][T28976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 958.009618][T28976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 958.018270][T28976] 8021q: adding VLAN 0 to HW filter on device bond8 [ 958.027504][T28976] 8021q: adding VLAN 0 to HW filter on device bond9 [ 958.036160][T28976] 8021q: adding VLAN 0 to HW filter on device bond10 [ 958.043538][T22553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 958.046766][T28976] 8021q: adding VLAN 0 to HW filter on device bond11 [ 958.061607][T28976] 8021q: adding VLAN 0 to HW filter on device bond12 [ 958.070207][T28976] 8021q: adding VLAN 0 to HW filter on device bond13 [ 958.137707][T14321] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.144816][T14321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.170036][T14321] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.177199][T14321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.224166][ T93] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.233037][ T93] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.246764][ T93] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.255774][T14321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0