last executing test programs: 3m50.366121514s ago: executing program 32 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fcdbdf25190000000500a300000000000500a3000000000005001d00000000000500a2000600000006136d000900000005001e0002000000050060000000000005007e552fca000005006000080000007023e8862f56d16a735eb64a4fdf9810acfa002e656c6781205e317f8e66b0c8e75f4f2fe0f3b8b3550208df3113af6e76a226d7879d2d9298bb783c4080844cc32aea4981b26d91478439f9e27726463baf416fe448402f0b96964c327b524611c8d235504b456b894d9ddc33a83bc57517019b1f6d4b11073b04b1000073c52de4ac148aa6d81becfe7a316641951b8f81293c94b4fe903b386f4d0ee9a888127c3962e722e75f0899128c9a34eb11ce75039dcccc502fa52753a611cf4aa56fd00cd945ec149150f5faedbdd43ba5eda9fbec"], 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x800) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10096, 0x0, 0x8, 0x0, 0x4, 0x8b1, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0xa, 0x0) creat(0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x1, 0x0, 0x3, 0x0, 0x5, 0x2454, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0xb1, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES64=r6], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m38.63380423s ago: executing program 33 (id=366): socket$unix(0x1, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000100000000000050000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 3m32.703156995s ago: executing program 34 (id=442): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000800e0000a400000000030400000000000000950000000000000099911725652331a2ec9c18147894347c91852592e25b254d6381a9a7fc5d87512597893f55c2daed2e777fbe897111b489c91a457e96136beeaeb3e0b14db5915a4cddef60167c211cde8b617e218518096923fd1d3a3e949b7a7ef3bca61544b80477d30c00bd4f1c9efb361e7582803d00c8726c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3m22.157350281s ago: executing program 35 (id=594): semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 2m58.077492926s ago: executing program 36 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r4}, 0x20) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40018162) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004c40)=@newtfilter={0x47c, 0x2c, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0x0, 0xa}, {0x383cb0b96f1e4956, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x33, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0x43c, 0x2, [@TCA_BASIC_ACT={0x438, 0x3, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x1, 0x4, 0x1, 0xff, 0x2, 0xfffff800, 0x0, 0x0, 0x10000, 0x401, 0x2, 0x4, 0x5, 0x4, 0x3, 0x530, 0x6, 0xff, 0x0, 0x6, 0x1, 0x9091aad, 0x9, 0x7, 0x400, 0x7, 0x9, 0xffff, 0x6, 0x8, 0xd, 0x5, 0x9, 0x4, 0x7fff, 0x3, 0x2, 0x7ff, 0x8, 0xe, 0xd, 0x800, 0xff, 0x3, 0x5, 0x4, 0x3, 0x41, 0x17, 0x400, 0x9, 0x727, 0x17800000, 0x9, 0xfffffffb, 0xb568, 0x100, 0x400, 0x8d1f, 0xf, 0xf6b7, 0x985, 0x0, 0x3, 0x3, 0xe5b, 0x5, 0xadb, 0x4, 0xb, 0x400, 0x58, 0x6, 0xffffffc0, 0x2, 0x98, 0x8, 0x400, 0x8, 0x3, 0x1400000, 0xb, 0x10001, 0x5, 0x5, 0xfffffff2, 0x3, 0x8, 0xffffffff, 0x4, 0x8, 0x1, 0x821c, 0x6, 0x5, 0x3, 0x1, 0x0, 0x8, 0x3, 0x9, 0xff, 0xc7, 0xe9, 0x401, 0x2, 0x200, 0x8, 0x5, 0xfffffffa, 0x10001, 0x28, 0x5, 0x1, 0x3, 0x2, 0x3, 0x5, 0x6103, 0x48000, 0x8000, 0x3, 0x8000, 0xc, 0xdab, 0x67, 0x7dff, 0x7fff, 0x1, 0x6, 0x5, 0x3, 0x2, 0x1, 0x2, 0x1, 0xd6a, 0x2, 0x2, 0x9, 0xffffff00, 0x7, 0x5, 0xc, 0x4, 0x1, 0x8, 0x10001, 0x3, 0xfff, 0x2, 0x8, 0x7, 0x5, 0x7f, 0xb3c, 0x8, 0xb, 0x0, 0xfffffff9, 0xfffffffd, 0x2, 0x8, 0x3, 0x1, 0x7, 0x4, 0x7, 0x3de9, 0x3, 0x4, 0x1, 0xff, 0x2, 0x1ff, 0x5, 0x4, 0x6, 0x8001, 0x40, 0xffffffff, 0xa3, 0xbf2, 0x1, 0xffff0001, 0x3, 0x6, 0x4, 0x6, 0x85, 0x3, 0x4, 0x6, 0x10001, 0x83, 0x7f, 0x3ff, 0x3, 0x3, 0x0, 0x400, 0xfff, 0x3, 0x7fffffff, 0x4, 0x7fff, 0x7, 0x101, 0x5, 0x4, 0x6, 0x2, 0x1, 0xfffffe01, 0xff, 0xaee, 0xe, 0x3, 0x400, 0x4, 0x101, 0x0, 0x8, 0x4, 0x17f, 0x7, 0x0, 0x7, 0x6, 0x619, 0x4, 0x4, 0x3, 0x8, 0xe, 0x7, 0x8, 0x81, 0x9b, 0x7fff, 0x7fff, 0x7, 0xfffffffe, 0x8001, 0x6, 0x6, 0x8, 0x5, 0x3, 0x9, 0x1, 0x32, 0x6, 0x2, 0xecd8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x403, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r4}, 0x20) (async) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40018162) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004c40)=@newtfilter={0x47c, 0x2c, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0x0, 0xa}, {0x383cb0b96f1e4956, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x33, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0x43c, 0x2, [@TCA_BASIC_ACT={0x438, 0x3, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x1, 0x4, 0x1, 0xff, 0x2, 0xfffff800, 0x0, 0x0, 0x10000, 0x401, 0x2, 0x4, 0x5, 0x4, 0x3, 0x530, 0x6, 0xff, 0x0, 0x6, 0x1, 0x9091aad, 0x9, 0x7, 0x400, 0x7, 0x9, 0xffff, 0x6, 0x8, 0xd, 0x5, 0x9, 0x4, 0x7fff, 0x3, 0x2, 0x7ff, 0x8, 0xe, 0xd, 0x800, 0xff, 0x3, 0x5, 0x4, 0x3, 0x41, 0x17, 0x400, 0x9, 0x727, 0x17800000, 0x9, 0xfffffffb, 0xb568, 0x100, 0x400, 0x8d1f, 0xf, 0xf6b7, 0x985, 0x0, 0x3, 0x3, 0xe5b, 0x5, 0xadb, 0x4, 0xb, 0x400, 0x58, 0x6, 0xffffffc0, 0x2, 0x98, 0x8, 0x400, 0x8, 0x3, 0x1400000, 0xb, 0x10001, 0x5, 0x5, 0xfffffff2, 0x3, 0x8, 0xffffffff, 0x4, 0x8, 0x1, 0x821c, 0x6, 0x5, 0x3, 0x1, 0x0, 0x8, 0x3, 0x9, 0xff, 0xc7, 0xe9, 0x401, 0x2, 0x200, 0x8, 0x5, 0xfffffffa, 0x10001, 0x28, 0x5, 0x1, 0x3, 0x2, 0x3, 0x5, 0x6103, 0x48000, 0x8000, 0x3, 0x8000, 0xc, 0xdab, 0x67, 0x7dff, 0x7fff, 0x1, 0x6, 0x5, 0x3, 0x2, 0x1, 0x2, 0x1, 0xd6a, 0x2, 0x2, 0x9, 0xffffff00, 0x7, 0x5, 0xc, 0x4, 0x1, 0x8, 0x10001, 0x3, 0xfff, 0x2, 0x8, 0x7, 0x5, 0x7f, 0xb3c, 0x8, 0xb, 0x0, 0xfffffff9, 0xfffffffd, 0x2, 0x8, 0x3, 0x1, 0x7, 0x4, 0x7, 0x3de9, 0x3, 0x4, 0x1, 0xff, 0x2, 0x1ff, 0x5, 0x4, 0x6, 0x8001, 0x40, 0xffffffff, 0xa3, 0xbf2, 0x1, 0xffff0001, 0x3, 0x6, 0x4, 0x6, 0x85, 0x3, 0x4, 0x6, 0x10001, 0x83, 0x7f, 0x3ff, 0x3, 0x3, 0x0, 0x400, 0xfff, 0x3, 0x7fffffff, 0x4, 0x7fff, 0x7, 0x101, 0x5, 0x4, 0x6, 0x2, 0x1, 0xfffffe01, 0xff, 0xaee, 0xe, 0x3, 0x400, 0x4, 0x101, 0x0, 0x8, 0x4, 0x17f, 0x7, 0x0, 0x7, 0x6, 0x619, 0x4, 0x4, 0x3, 0x8, 0xe, 0x7, 0x8, 0x81, 0x9b, 0x7fff, 0x7fff, 0x7, 0xfffffffe, 0x8001, 0x6, 0x6, 0x8, 0x5, 0x3, 0x9, 0x1, 0x32, 0x6, 0x2, 0xecd8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x403, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) 2m52.839864352s ago: executing program 37 (id=1059): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002100050100000000000000000200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m42.994248637s ago: executing program 38 (id=1170): ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000029252c7569649caeac8486b8d40bc70a5ed413ff07b7445156df21edde6a10007f1d9bf18d"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast1}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 2m42.444950499s ago: executing program 39 (id=1189): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850007008c00000095000000000000009500ad0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1c, 0x1c7, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001000000"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m30.802465688s ago: executing program 40 (id=1314): r0 = syz_io_uring_setup(0x7cad, &(0x7f0000000200)={0x0, 0xb4e8, 0x2, 0x1, 0x21b}, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000300)=[0x2faca95, 0x6], 0x2) unshare(0x22020600) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r1], 0x1b4}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fdatasync(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, 0x0, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBKDxaW5AqvbGHJUDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnZHXla78lrR/pDn84FdvXkzu+999+lp3szo7QRQWtPZUxpxNCKuJBFTTesmo75yurHd42/uXc0eSdRq//o62cortn/S+Hkwe0oixiPi4/MRv65sL3f9zt3rC9Va3csRsxura7Prd+6eXFlduLZ0benG/Km/nj4z97f50/N7EmcR14WL//zdG6/87y/Ln1RPJnE2Lo++tBgtceyV6ZiOJ40Qm/NHIuJMlmjzuew3RQjJgOvB7lQav4+jEXEkpqKSL9VNxcrrA60c0FO1SkQNKKlE/4eSKsYBxbF9L46Dh9mjc/UDoO3xj9TPjcR4fmx04HHSdGRUP949tAflZ2X8eO/YO9kjOpyHGNmDcjrZvB8Rv20Xf/38zqH8LE4Wfxpp0+uy9FxEjDU+i3SX5U+3LPf79+954m9uhyzes42fWf75XZY/6PgBKKeH5xo78s1s6en+LxsZFuOfaDP+mWyz79qNQe//Oo//iv39eH6OPG0Zh2Vjnkvt33K0NeOL1y681an85vFf9sjKL8aC/fDofsSxlvhfzQdzyVb7J23aP9vkSpdl/OPTry50Wjfo+GsPIo63Pf55ekUrS81urK4VeS3XJ2eXV6pLc/XntmV88NF/3+tU/qDjz9o/OsS/U/tneWtdlvH+pQerndZNPjP+9Mux5HKeGmvk/H9hY+PWfMRYcrGxSVP+qZ3rUmxTvEcW/4k/tu//O8SfN/Rml/Gv/fv643pq+1XSrtt/21+V3JNal3XoJIt/cZft/2aXZXz3n9u/b8maKBI7xT+x/a2Sbj9zAAAAAAAAKKM0vwabpDNb6TSdmanP4f1NHEirN9c3/rR88/aNxYgT+f9DjqbFle6p+nKSLc83/h+2WD7VsvzniDgcEW9XJvLlmas3q4uDDh4AAAAAAAAAAAAAAAAAAACGxMHG/P/iPtXfVurz/7uycaTHtQN6rpc3mAOGm/4P5ZX3/93ewRXY1+z/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgBfS4T88/DyJiM2/T+SPzFhj3ehAawb02vP38eme1APov0pfXwYMk61L/6b/Q+l0Nf7/vvHlgL2vDjAASbvMfHBQ27nzP2z7SgAAAAAAAAAAAACgB44fNf8fyiqNDwddBWBAfsZEft8BAPucr/6H8nKMDzxrFv94pxXm/wMAAAAAAAAAAABA30zmjySdadwCdDLSdGYm4pcRcShGk+WV6tJcRPwqIj6rjP4iW54fdKUBAAAAAAAAAAAAAAAAAADgBbN+5+71hWp16VZz4odtOS92orgL6rDUpzkRSf8LnYiIYYi9N4mRppwkYjNr+aGo2K31GIpqpHk1BvyHCQAAAAAAAAAAAAAAAAAASqhp7nF7x97tc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP+e3v9/94nkGe8z6BgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3ppwAAAP//Nyg5Rw==") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000006872bc037676c97a8c7280a54eba44a900ea810015000806000186dd06100004aaaaaaaaaabb00000000000000000000000000020001b16314dc3ec1fc0200"], &(0x7f0000000180)={0x0, 0x2, [0x4c9, 0x6f3, 0x60a, 0xb2c]}) 2m26.554839286s ago: executing program 9 (id=1359): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0xfffffffffffffffd, 0xfffffffffffffdfe, 0x0, 0x2, 0x200000000003, 0x1, 0x1020000}, &(0x7f0000000280), 0x0) 2m26.532785578s ago: executing program 9 (id=1360): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x400, 0x2000004, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xf, 0xe}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) 2m26.49423448s ago: executing program 9 (id=1361): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmmsg(r1, &(0x7f0000005b00)=[{{&(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x80, 0x0}}, {{&(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, 0x0}}], 0x2, 0x20001000) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x70, 0x1, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf4ba}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000020"], 0x48) sendmmsg$inet6(r3, &(0x7f0000000e80)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6719c6d41) r4 = fcntl$dupfd(r0, 0x0, r0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) gettimeofday(0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 2m26.398711355s ago: executing program 9 (id=1362): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb00000000000080ffffff00000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 2m26.249820044s ago: executing program 9 (id=1364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f00000191c0)={r2, r3}) write$UHID_INPUT(r1, &(0x7f0000000e00)={0xc, {"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", 0x1000}}, 0x1006) 2m25.926135713s ago: executing program 9 (id=1369): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000200000000000001800000008000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.885762905s ago: executing program 41 (id=1369): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000200000000000001800000008000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m21.155693241s ago: executing program 4 (id=1407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000001000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a900020000d9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) 2m20.963992332s ago: executing program 4 (id=1410): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x5000}, 0x90) 2m20.949583143s ago: executing program 4 (id=1411): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000024000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000108000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m20.888539197s ago: executing program 4 (id=1412): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000100ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac1414aa000000000000000000000000fefffffffffffffffeffffffffffffff0000000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000000008400000000000000000000000000000000000000000000000000000000000feffffff0000000000000000020004032c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10c7fffffffffffffff00074f4c001400686d61632873686132353629"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 2m20.572242565s ago: executing program 4 (id=1415): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000800e0000a400000000002000000000000000950000000000000099911725652331a2ec9c18147894347c91852592e25b254d6381a9a7fc5d87512597893f55c2daed2e777fbe897111b489c91a457e96136beeaeb3e0b14db5915a4cddef60167c211cde8b617e218518096923fd1d3a3e949b7a7ef3bca61544b80477d30c00bd4f1c9efb361e7582803d00c8726c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2m20.238801345s ago: executing program 4 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a0000ff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 2m20.169510288s ago: executing program 42 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a0000ff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1m58.600230618s ago: executing program 0 (id=1628): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xff8, 0xffffffffffffffff, 0xee7eb000) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/4\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0x1, "2fdb68bdfe5a4c6cb4e2605cd1f1aa06b9defa2211c68ed0f541f347a94ca6e1", 0xfffffffc, 0x3, 0x7f, 0x4}, 0x3c) 1m58.542232951s ago: executing program 0 (id=1630): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000001000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1m58.378963121s ago: executing program 0 (id=1633): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004100)=ANY=[], 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000018c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1, 0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x3000000]}}], 0xffc8) 1m58.22629689s ago: executing program 0 (id=1635): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb000000000000ffffffffffffff80ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 1m58.043342011s ago: executing program 0 (id=1637): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7, '\x00', r0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x40) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdf66}}, './file0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x7}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x6040081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30d, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9599}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x11, '\x00', r0}, 0x94) 1m57.36608442s ago: executing program 0 (id=1648): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) 1m57.293619044s ago: executing program 43 (id=1648): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) 1m42.934543692s ago: executing program 5 (id=1813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x105}, [@CTA_MARK={0x0, 0x8, 0x1, 0x0, 0x5}, @CTA_NAT_SRC={0x0, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x0, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x0, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MAXIP={0x0, 0x2, @loopback}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@i_version}]}, 0xff, 0x545, &(0x7f0000001300)="$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") 1m42.376106425s ago: executing program 5 (id=1818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a0104000000ff000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a900020000d9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) 1m41.882479854s ago: executing program 5 (id=1819): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x20, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000100004000000d9ffffff00000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}, 0x1, 0x0, 0x0, 0x811}, 0x0) 1m41.505894516s ago: executing program 5 (id=1822): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) unshare(0x22020400) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143041, 0x0) 1m40.966898367s ago: executing program 5 (id=1825): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000400003800900020073797a30000000010900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 1m39.783315516s ago: executing program 5 (id=1843): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005440)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001f00)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0xe0, &(0x7f0000002340)=[@ip_retopts={{0x10, 0x11}}], 0x10}}], 0x2, 0x0) 1m39.698866742s ago: executing program 44 (id=1843): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005440)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001f00)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0, 0xe0, &(0x7f0000002340)=[@ip_retopts={{0x10, 0x11}}], 0x10}}], 0x2, 0x0) 1m38.658492552s ago: executing program 8 (id=1851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) unshare(0x8040480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="183f95322b20a300085644d3de833278681d32024d76c80028c294475a0eae0f"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x101e404, &(0x7f0000000340)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@flag='nolazytime'}, {@audit}, {@appraise_type}]}, 0x1, 0x206, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x150) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbe5b}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f00000002c0)={0x1}) io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0xfffffffffffffff2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003740)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1a, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x300, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4000855) 1m37.631154102s ago: executing program 8 (id=1866): perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xfeffffffffffffff}, 0x0, 0xef4, 0x0, 0x4, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m37.552579076s ago: executing program 8 (id=1867): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd0102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r4, 0x500}, 0x38) io_setup(0x5, &(0x7f0000000040)=0x0) r6 = eventfd(0x3ff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x8001420, 0x4) r10 = open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) r11 = open$dir(&(0x7f0000000340)='./file0\x00', 0x1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) ftruncate(r12, 0x9) sendfile(r11, r12, 0x0, 0x7ffff000) readv(r10, &(0x7f0000000200)=[{&(0x7f00000013c0)=""/4116, 0x1014}], 0x1) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000600)="ba703e9e4049bb0aaa1645b7533c5902b8fe07eff9bbfa5b316cb317cda872feec98210fe3a3896615784992dd09df1c8c1b1f49238b8e952aa4426b336ed5d45afacbc09dc3e60fb37ce9b81c0b9856e0e918acac97e1a8d1e19bdf709393a494a9fff464651a9256a5b0607df7ec336788168f3bb7b841be231b3ad9995a9d401ffadaf59cdc7751f8621a10b53c42232ecfab8201d89311c53d950d34b80a13ccdb41c294002d7fccff34e7ad0772e714bc5340b99ca04a2273f17cc3cac4c2c47fb6b425", 0xc6}, {&(0x7f0000000700)="57b02d303aefacea702dcb0eae63e90bf3269538a5b772830d71f35007dd103dfd95cc0448078431b693f9511ab92ad1e8716a6eaa4a36ac7ff58497d2b936177771cbfa3aec1ac00d6c58fc292de2cfa0c4864efd10c61e399a1bf180689dcfb468af318e44d397f9622a0da9bd27a94d8a6eda6328e07b619f2c5e4124df28131929d29367226ba5e20d83a407bdf50031be13fd317f11b90f119d78a70089988835e792e4ad962faac70307eb0defe5e8cebd4a2a4732160cc467d514ce98274ea8e3cb77bcb6e929e2a2dcf6a19921b88788c0cf8159", 0xd8}], 0x2, 0x80, 0x0) io_submit(r5, 0x4, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9df8, r4, &(0x7f0000000080)="1637092b6da266d39ca1b64d9f310bb06af741d8adeaaad3d2e1ca9a23f2c60ae8a82b7a481cdff12b14f72e8c40b7b49b1931372dc2eea665394cd1490bc44ba00fa2aee22d1d76a4ed77d83d927ef32a3e0adeeabb569bfe7740878e8275ca49f5425dd0db6db99e2d1c3317849ac6fe041e", 0x73, 0x9, 0x0, 0x3, r6}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, r7, &(0x7f00000002c0)="e463e094aae72b67022373dffa0f24e996fb50b92aef148d6227ecd26c11b4f1d5a79361625df90c3ee74559950e7d8de501d9de86b5ed95ce3ac76f3283e1744664129503bc2cf0c655e5faacdf0a68dd30d15c32ee029e925fbfd4a62e9a26fd85dd11a25d3cbaf839e095ea56a768bc7cf7650bb815b7970c8acbda84451c2c7f040469465788c8c38d449f7823bff2999e089f719de44b3c98a001fc0f8147ecd51ee527c5d5fddf4ac85891128b3e0b0b97070ac062bbd5703a7cb8ab9a3c4106d04c639c2a1336797b0d5fef1f250ca36005b12a4b8c61", 0xda, 0x4, 0x0, 0x1, r8}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x1, r9, &(0x7f00000003c0), 0x0, 0x9}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f0000000440)="4c974be741c20743d7e54db4d55be126e7bad925f9f0cc101ee0c6a79a0721511af29a00c70ea286f25c8f431d5ccd335bffaf84aed89a5c1656692b8da9f1de6218a909e7c8e65ac521cfc0256daf1945168febfbcd6b5dc687171f187093eeaea5f3c074aa2b2ff57bc4495445ac9b9599bf186bf47d22cc4534cf72e49a6b22f6e37f215d3d28d017a033aed23430a4531b89359cb252c8e826d4d8fd0d7026061933a1149cb1dd4e4e5c886a28d2e12c39eb6b0bb30ef8d04517be65cb21d4800f7bbfa4a96cc100988270dbde8b7ad63e4f5613cc1fa9339d134a4d977c244a96d512389f66970935d726c5cba583c01a569694d03015", 0xf9, 0x3}]) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000b7a2052503000000140001800d0001007564703a73797a3000000000"], 0x28}}, 0x0) 1m36.691701967s ago: executing program 8 (id=1876): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000080ff0000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac1414aa000000000000000000000000fefffffffffffffffeffffffffffffff0000000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000000008400000000000000000000000000000000000000000000000000000000000feffffff0000000000000000020004032c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10c7fffffffffffffff00074f4c001400686d61632873686132353629"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 1m36.415612882s ago: executing program 8 (id=1879): bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x6572, 0x4) sendmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) close(0x4) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000700)={0x4b, "79d0b5a70b130c4da70a0680ca99618610b4a169c41523e4e14daaca07375c90c30fed3ab9621259cb3db49f161f9c5d2a8035dccb23856f0e06c2f4a80176bcff040a7ebeb2a42a9d896da99f15e4283fa1e79af1371dbaeb0dcd43642e13f1d0acc732b12ef16f49732eb1b0fd56990892d5653f8b461e12f0b0133cfa07d7"}) setsockopt$sock_timeval(r4, 0x1, 0x2f, &(0x7f0000abaff9), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], 0x0, 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800851778ef249b9033620000000000000000000004000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0xfffffcf9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r8, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x68, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES16=r6], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) unshare(0xa000400) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r11, 0x8004b706, 0x0) mq_open(&(0x7f0000000000)=']\'\x00', 0x1, 0x1c0, &(0x7f0000000100)={0x3, 0x4fa, 0x3, 0x1000}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="04001a80e2b9"], 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x0) 1m35.888537904s ago: executing program 8 (id=1882): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x2, 0x800) (async) timerfd_create(0x2, 0x800) io_submit(0x0, 0x0, &(0x7f00000009c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$inet6(0xa, 0xa0a339ba17f4994f, 0x1) (async) socket$inet6(0xa, 0xa0a339ba17f4994f, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nobh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x100) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x2000) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x2000) ioctl$RTC_AIE_ON(r0, 0x40187014) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) 1m35.806701668s ago: executing program 45 (id=1882): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x2, 0x800) (async) timerfd_create(0x2, 0x800) io_submit(0x0, 0x0, &(0x7f00000009c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$inet6(0xa, 0xa0a339ba17f4994f, 0x1) (async) socket$inet6(0xa, 0xa0a339ba17f4994f, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nobh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x100) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x2000) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x2000) ioctl$RTC_AIE_ON(r0, 0x40187014) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) 4.412476712s ago: executing program 2 (id=4340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x1, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x0, 0x20, 0x1, {0x2}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0xf4) 3.491045867s ago: executing program 2 (id=4383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.42149058s ago: executing program 2 (id=4385): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.394610282s ago: executing program 2 (id=4388): socket$kcm(0x10, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x200}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000611414000000000004000000000000009500000000000000ffcc06911fee1848f8b6a282ad68347fb626893d670cf2f2fe75cea7301ac19bd0f76bb58a6337ac934ee9ba726256eb2f0f8cdeba78cedcd0fa9affff5c17289c0cfedef634"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.525699001s ago: executing program 3 (id=4431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="378303076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.457154855s ago: executing program 3 (id=4432): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x24004080}, 0x2000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="46440000140081054e81f782db44b9040a", 0x2b}], 0x1, 0x0, 0x0, 0x7400}, 0x4000000) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 1.456872255s ago: executing program 1 (id=4433): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000050900020073797a320000000028000480140001800d00010073796e70726f78790000000010000180090001006d617371000000000900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.186340691s ago: executing program 3 (id=4434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.177661402s ago: executing program 6 (id=4435): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1ef, 0x0, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000380)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.134206544s ago: executing program 3 (id=4436): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x44000) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 1.099245526s ago: executing program 6 (id=4437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.018677691s ago: executing program 6 (id=4438): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 893.746788ms ago: executing program 1 (id=4439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x7, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0x8000a098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) 888.580108ms ago: executing program 6 (id=4440): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x100}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4) 824.098532ms ago: executing program 6 (id=4441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a320000000005000400000000001400078005001500000000000800114000000002050005000a000000050001000600000010000300686173683a69702c6d"], 0x5c}}, 0x84000) 823.810002ms ago: executing program 1 (id=4442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="378303076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 823.283452ms ago: executing program 6 (id=4444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x1, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x0, 0x20, 0x1, {0x2}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0xf4) 734.287408ms ago: executing program 1 (id=4446): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1ef, &(0x7f00000006c0)=ANY=[], 0x0) r2 = syz_io_uring_setup(0xbd9, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 733.828988ms ago: executing program 7 (id=4447): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 674.555491ms ago: executing program 1 (id=4448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x7, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, &(0x7f0000000000)=r1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 669.342381ms ago: executing program 7 (id=4449): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 437.968974ms ago: executing program 7 (id=4450): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'gretap0\x00', @random="000000001300"}) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 180.53212ms ago: executing program 3 (id=4451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 180.28373ms ago: executing program 1 (id=4452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fcffffff340000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 179.89458ms ago: executing program 2 (id=4392): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180d0000000000000000000000000000850000008d00000095000000000000a7"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x7, 0xffffffffffffffff, 0x41000, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffff4a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@cgroup, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, r0, 0xf81080519bdfdf4a, 0x1a, r1, @void, @value, @void, @void, r2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0xc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x0, 0x0, 0x4000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x6}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x27, 0xe, 0x0, &(0x7f0000000140)="e90204000000000000007f530800", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={0x0, r6, 0x4000, r7}, 0x18) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) 179.197779ms ago: executing program 7 (id=4453): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 147.285092ms ago: executing program 3 (id=4455): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x24004080}, 0x2000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="46440000140081054e81f782db44b9040a", 0x2b}], 0x1, 0x0, 0x0, 0x7400}, 0x4000000) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 73.830586ms ago: executing program 7 (id=4456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000f"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000009c0)="0ae6a9644be64ddc60c4805ab89b", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 25.694598ms ago: executing program 2 (id=4457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8c1}, 0x40000880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 7 (id=4458): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ted capacity change from 0 to 512 [ 183.542464][ T69] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.563314][T11949] EXT4-fs warning (device loop1): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 183.603998][T11965] syz_tun: entered allmulticast mode [ 183.612547][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1847'. [ 183.625256][T11964] syz_tun: left allmulticast mode [ 183.715760][ T69] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.812262][ T69] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.837204][T11988] lo: left promiscuous mode [ 183.837228][T11988] lo: left allmulticast mode [ 183.871401][T11986] loop6: detected capacity change from 0 to 512 [ 183.914059][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.921393][T11988] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.929561][T11986] ext4: Unknown parameter 'smackfsfloor' [ 184.216497][T11988] batadv_slave_0: left promiscuous mode [ 184.240644][T11988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.626094][T12000] loop8: detected capacity change from 0 to 256 [ 184.659408][T11980] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 184.669463][ T1345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.684282][T12000] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 184.694433][T12002] batadv_slave_0: entered promiscuous mode [ 184.713828][T11980] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 184.721229][ T1345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.743329][ T1345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.797881][ T1345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.842805][ T69] bridge_slave_1: left allmulticast mode [ 184.850959][ T69] bridge_slave_1: left promiscuous mode [ 184.853075][T12008] loop2: detected capacity change from 0 to 512 [ 184.856822][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.893927][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 184.893945][ T28] audit: type=1400 audit(1771126396.623:8889): avc: denied { bind } for pid=12009 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.922044][ T28] audit: type=1400 audit(1771126396.623:8890): avc: denied { ioctl } for pid=12009 comm="syz.1.1854" path="socket:[33841]" dev="sockfs" ino=33841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.949583][ T69] bridge_slave_0: left allmulticast mode [ 184.955283][ T69] bridge_slave_0: left promiscuous mode [ 184.964553][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.983169][T12008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.037934][T12015] loop1: detected capacity change from 0 to 1024 [ 185.044803][T12008] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.090170][T12015] EXT4-fs: Ignoring removed orlov option [ 185.132715][ T9197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.171487][T12015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.230584][ T8874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.341091][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.354191][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.363884][ T69] bond0 (unregistering): Released all slaves [ 185.376020][ T69] bond1 (unregistering): Released all slaves [ 185.401517][T12029] ipvlan0: entered promiscuous mode [ 185.407721][T12029] ipvlan0: left promiscuous mode [ 185.424859][ T69] hsr_slave_0: left promiscuous mode [ 185.430718][ T69] hsr_slave_1: left promiscuous mode [ 185.436445][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.444655][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.452437][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.462877][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.471964][ T69] batman_adv: batadv0: Removing interface: veth3 [ 185.484129][ T69] veth1_macvtap: left promiscuous mode [ 185.503519][ T69] veth0_macvtap: left promiscuous mode [ 185.510789][ T69] veth1_vlan: left allmulticast mode [ 185.521026][ T69] veth1_vlan: left promiscuous mode [ 185.526408][ T69] veth0_vlan: left promiscuous mode [ 185.538147][T12039] IPv6: Can't replace route, no match found [ 185.557819][T12043] loop1: detected capacity change from 0 to 512 [ 185.574547][T12039] IPv6: Can't replace route, no match found [ 185.579244][ T28] audit: type=1400 audit(1771126397.303:8891): avc: denied { write } for pid=12038 comm="syz.6.1864" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 185.613800][T12039] IPv6: Can't replace route, no match found [ 185.641036][T12039] IPv6: Can't replace route, no match found [ 185.643976][ T28] audit: type=1400 audit(1771126397.373:8892): avc: denied { create } for pid=12038 comm="syz.6.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 185.687421][T12043] EXT4-fs (loop1): too many log groups per flexible block group [ 185.723346][T12043] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 185.746257][ T69] team0 (unregistering): Port device macvlan1 removed [ 185.756241][T12043] EXT4-fs (loop1): mount failed [ 185.818633][ T69] team0 (unregistering): Port device team_slave_1 removed [ 185.840217][ T69] team0 (unregistering): Port device team_slave_0 removed [ 185.970685][T12053] ------------[ cut here ]------------ [ 185.976290][T12053] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 185.996225][T12053] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.6.1868/12053 [ 186.007292][T12053] Modules linked in: [ 186.011239][T12053] CPU: 0 UID: 0 PID: 12053 Comm: syz.6.1868 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.022301][T12053] Tainted: [W]=WARN [ 186.026130][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.036242][T12053] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 186.042590][T12053] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 186.062312][T12053] RSP: 0018:ffffc900039a3368 EFLAGS: 00010246 [ 186.068526][T12053] RAX: ffff888100b09af8 RBX: 00000000ffffffff RCX: 0000000000000000 [ 186.076551][T12053] RDX: ffffffff86812917 RSI: ffffffff86826d91 RDI: ffffffff871d3750 [ 186.084622][T12053] RBP: ffff88810e7f9840 R08: 0000007800000000 R09: 0000000000000000 [ 186.092792][T12053] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88810e7f9800 [ 186.100904][T12053] R13: 0000000000000000 R14: ffff88810e7f984c R15: ffff88810e7f9838 [ 186.109027][T12053] FS: 00007f9533f776c0(0000) GS:ffff8882ae8e4000(0000) knlGS:0000000000000000 [ 186.118005][T12053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.124667][T12053] CR2: 00002000000054c0 CR3: 000000011bc0e000 CR4: 00000000003506f0 [ 186.132724][T12053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.140768][T12053] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 186.148780][T12053] Call Trace: [ 186.152115][T12053] [ 186.155073][T12053] reg_set_min_max+0x1f2/0x260 [ 186.159960][T12053] check_cond_jmp_op+0x13b0/0x1ab0 [ 186.165178][T12053] do_check+0x4a9b/0x9860 [ 186.169606][T12053] do_check_common+0xd0b/0x1630 [ 186.174496][T12053] bpf_check+0x2f6d/0xcc10 [ 186.179071][T12053] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 186.185126][T12053] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 186.190838][T12053] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 186.196798][T12053] ? try_charge_memcg+0x215/0xa10 [ 186.201900][T12053] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 186.208167][T12053] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 186.214386][T12053] ? css_rstat_updated+0xbb/0x280 [ 186.219577][T12053] ? mod_memcg_state+0x182/0x270 [ 186.224583][T12053] ? __rcu_read_unlock+0x4e/0x70 [ 186.229634][T12053] ? avc_has_perm_noaudit+0xab/0x130 [ 186.234974][T12053] ? avc_has_perm+0x101/0x190 [ 186.239782][T12053] ? selinux_bpf_prog_load+0x197/0x1c0 [ 186.245402][T12053] ? security_bpf_prog_load+0x9e/0x140 [ 186.250962][T12053] bpf_prog_load+0xf76/0x1140 [ 186.255701][T12053] ? security_bpf+0x2b/0x90 [ 186.260294][T12053] __sys_bpf+0x505/0x7e0 [ 186.264675][T12053] __x64_sys_bpf+0x41/0x50 [ 186.269159][T12053] x64_sys_call+0x10cb/0x3020 [ 186.273925][T12053] do_syscall_64+0x12c/0x370 [ 186.278668][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.284677][T12053] RIP: 0033:0x7f953551bf79 [ 186.289147][T12053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.308823][T12053] RSP: 002b:00007f9533f77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.317369][T12053] RAX: ffffffffffffffda RBX: 00007f9535795fa0 RCX: 00007f953551bf79 [ 186.325468][T12053] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 186.333504][T12053] RBP: 00007f95355b27e0 R08: 0000000000000000 R09: 0000000000000000 [ 186.341552][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.349649][T12053] R13: 00007f9535796038 R14: 00007f9535795fa0 R15: 00007ffc00b9d618 [ 186.357693][T12053] [ 186.360767][T12053] ---[ end trace 0000000000000000 ]--- [ 186.430672][T11973] chnl_net:caif_netlink_parms(): no params data found [ 186.583142][T12095] loop1: detected capacity change from 0 to 128 [ 186.583367][T12089] __nla_validate_parse: 2 callbacks suppressed [ 186.583426][T12089] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1875'. [ 186.593603][T12093] loop8: detected capacity change from 0 to 1024 [ 186.612926][T12095] vfat: Unknown parameter '0x0000000000000004' [ 186.623408][T12093] EXT4-fs: Ignoring removed orlov option [ 186.649671][T11973] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.657941][ T28] audit: type=1400 audit(1771126398.363:8893): avc: denied { setattr } for pid=12094 comm="syz.1.1874" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 186.688153][T12097] loop1: detected capacity change from 0 to 128 [ 186.696973][T11973] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.704748][T11973] bridge_slave_0: entered allmulticast mode [ 186.718311][T11973] bridge_slave_0: entered promiscuous mode [ 186.726730][T12093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.727307][ T28] audit: type=1400 audit(1771126398.363:8894): avc: denied { map } for pid=12094 comm="syz.1.1874" path="socket:[32955]" dev="sockfs" ino=32955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 186.740298][T12097] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.780585][ T28] audit: type=1400 audit(1771126398.363:8895): avc: denied { write } for pid=12094 comm="syz.1.1874" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 186.814703][T11973] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.839048][T11973] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.846222][T11973] bridge_slave_1: entered allmulticast mode [ 186.852382][T12097] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.853020][T11973] bridge_slave_1: entered promiscuous mode [ 186.878824][T11973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.889517][T11973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.909805][T11973] team0: Port device team_slave_0 added [ 186.916589][T11973] team0: Port device team_slave_1 added [ 186.972575][T11973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.986809][T11973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.014074][T11973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.035841][T11973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.043021][T11973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.069699][T11973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.081338][ T8874] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.145552][T12114] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.157153][T12114] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.167223][T12114] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.189112][T12114] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 187.199376][T12114] EXT4-fs error (device loop1): __ext4_iget:5378: inode #16: block 127754: comm syz.1.1881: invalid block [ 187.214827][T11973] hsr_slave_0: entered promiscuous mode [ 187.220766][T12114] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 187.226379][T12114] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1881: couldn't read orphan inode 16 (err -117) [ 187.235624][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 187.235645][ C0] EXT4-fs (loop1): initial error at time 1771126398: __ext4_iget:5378: inode 16: block 127754 [ 187.235701][ C0] EXT4-fs (loop1): last error at time 1771126398: __ext4_iget:5378: inode 16: block 127754 [ 187.236165][T11973] hsr_slave_1: entered promiscuous mode [ 187.269255][T12114] loop1: lost filesystem error report for type 5 error -117 [ 187.287767][T12114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.350354][T12105] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.372628][ T8874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.470877][T12136] bridge0: entered promiscuous mode [ 187.477683][T12136] bridge0: port 3(macsec1) entered blocking state [ 187.506291][T12136] bridge0: port 3(macsec1) entered disabled state [ 187.513389][T12136] macsec1: entered allmulticast mode [ 187.518776][T12136] bridge0: entered allmulticast mode [ 187.534225][T12136] macsec1: left allmulticast mode [ 187.540691][T12136] bridge0: left allmulticast mode [ 187.546962][T12139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.559831][T12139] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.571386][T12136] bridge0: left promiscuous mode [ 187.598079][ T8874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.637079][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 187.656871][T12149] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1887'. [ 187.666958][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 187.682827][T12149] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1887'. [ 187.710091][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 187.977992][T12137] chnl_net:caif_netlink_parms(): no params data found [ 188.074653][T12194] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.090593][T12197] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.115024][T12194] EXT4-fs (loop2): 1 truncate cleaned up [ 188.124446][T11973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.143674][T11973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.174183][T11973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.197642][T12194] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.1895: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 188.221293][T12194] EXT4-fs error (device loop2) in ext4_delete_entry:2737: Corrupt filesystem [ 188.223994][T11973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.261918][T12204] syzkaller0: entered promiscuous mode [ 188.267560][T12204] syzkaller0: entered allmulticast mode [ 188.282664][T12204] 0: reclassify loop, rule prio 0, protocol 800 [ 188.359280][T12224] set_capacity_and_notify: 4 callbacks suppressed [ 188.359301][T12224] loop2: detected capacity change from 0 to 256 [ 188.419971][T12227] FAULT_INJECTION: forcing a failure. [ 188.419971][T12227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.437550][T12227] CPU: 1 UID: 0 PID: 12227 Comm: syz.6.1900 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.437637][T12227] Tainted: [W]=WARN [ 188.437645][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.437661][T12227] Call Trace: [ 188.437704][T12227] [ 188.437713][T12227] __dump_stack+0x1d/0x30 [ 188.437745][T12227] dump_stack_lvl+0x95/0xd0 [ 188.437773][T12227] dump_stack+0x15/0x1b [ 188.437829][T12227] should_fail_ex+0x263/0x280 [ 188.437852][T12227] should_fail_alloc_page+0xf2/0x100 [ 188.437890][T12227] __alloc_frozen_pages_noprof+0x108/0x360 [ 188.437951][T12227] alloc_pages_mpol+0xb3/0x260 [ 188.438041][T12227] ? css_rstat_updated+0xbb/0x280 [ 188.438143][T12227] vma_alloc_folio_noprof+0x1a9/0x300 [ 188.438183][T12227] handle_mm_fault+0x111f/0x3020 [ 188.438242][T12227] ? vma_start_read+0x1c7/0x2c0 [ 188.438274][T12227] do_user_addr_fault+0x62f/0x1050 [ 188.438313][T12227] ? ksys_mmap_pgoff+0xc1/0x310 [ 188.438335][T12227] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 188.438405][T12227] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 188.438501][T12227] ? trace_page_fault_user+0x1f/0xe0 [ 188.438567][T12227] exc_page_fault+0x62/0xa0 [ 188.438599][T12227] asm_exc_page_fault+0x26/0x30 [ 188.438689][T12227] RIP: 0033:0x7f95353d3898 [ 188.438705][T12227] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 188.438755][T12227] RSP: 002b:00007f9533f76470 EFLAGS: 00010202 [ 188.438781][T12227] RAX: 0000000000024000 RBX: 00007f9533f76530 RCX: 0000000000000009 [ 188.438796][T12227] RDX: 0000000000007fff RSI: 0000000000008000 RDI: 00007f9533f765d0 [ 188.438810][T12227] RBP: 000000000000000a R08: 00007f952bb57000 R09: 0000000000000073 [ 188.438826][T12227] R10: 0000200000001c42 R11: 0000000000000608 R12: 0000000000006001 [ 188.438842][T12227] R13: 00007f95355d1ea0 R14: 000000000000001d R15: 00007f9533f765d0 [ 188.438866][T12227] [ 188.440737][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.470866][T12227] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 188.499141][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.574794][T12227] loop6: detected capacity change from 0 to 1024 [ 188.589334][T12137] bridge_slave_0: entered allmulticast mode [ 188.633329][T12227] EXT4-fs (loop6): invalid inodes per group: 1 [ 188.633329][T12227] [ 188.637983][T12137] bridge_slave_0: entered promiscuous mode [ 188.696370][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1902'. [ 188.715630][T12137] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.723230][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.730671][T12137] bridge_slave_1: entered allmulticast mode [ 188.747100][T12137] bridge_slave_1: entered promiscuous mode [ 188.753156][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1903'. [ 188.804936][T12137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.825446][T12137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.881430][T12137] team0: Port device team_slave_0 added [ 188.899318][T12137] team0: Port device team_slave_1 added [ 188.909286][T12255] loop6: detected capacity change from 0 to 512 [ 188.922765][T12253] loop2: detected capacity change from 0 to 128 [ 188.937439][T11973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.950206][T12255] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 188.958058][T12253] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.969385][T12255] EXT4-fs (loop6): orphan cleanup on readonly fs [ 188.978175][T12255] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1909: corrupted inode contents [ 188.993656][T12137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.000680][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.026844][T12137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.028720][T12253] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.052954][T11973] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.060429][T12255] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.060523][T12137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.064653][T12255] EXT4-fs (loop6): Remounting filesystem read-only [ 189.069714][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 189.069733][ C0] EXT4-fs (loop6): initial error at time 1771126400: ext4_do_update_inode:5569: inode 16 [ 189.069761][ C0] EXT4-fs (loop6): last error at time 1771126400: ext4_do_update_inode:5569: inode 16 [ 189.069982][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.109389][T12255] EXT4-fs (loop6): 1 truncate cleaned up [ 189.135831][T12137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.170608][T12137] hsr_slave_0: entered promiscuous mode [ 189.176675][T12137] hsr_slave_1: entered promiscuous mode [ 189.182525][T12137] debugfs: 'hsr0' already exists in 'hsr' [ 189.212218][T12137] Cannot create hsr debugfs directory [ 189.234118][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.241236][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.266660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.273791][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.281481][ T314] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.292367][ T314] Quota error (device loop6): write_blk: dquota write failed [ 189.300179][ T314] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 189.357116][ T314] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.367716][ T314] Quota error (device loop6): write_blk: dquota write failed [ 189.375178][ T314] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 189.401367][T11973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.411871][T11973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.507709][T11973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.631275][T11973] veth0_vlan: entered promiscuous mode [ 189.642221][T11973] veth1_vlan: entered promiscuous mode [ 189.661480][T11973] veth0_macvtap: entered promiscuous mode [ 189.671122][T11973] veth1_macvtap: entered promiscuous mode [ 189.687815][T11973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.698629][T11973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.760065][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.809498][T12289] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 189.830891][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.849659][T12289] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.864115][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.883976][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.056723][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.064056][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.167280][T12309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.215789][T12309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.298061][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.307976][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.320261][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.338760][ T108] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.449874][T12343] loop3: detected capacity change from 0 to 1024 [ 190.464708][T12343] EXT4-fs: Ignoring removed orlov option [ 190.482919][T12137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 190.509996][T12137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 190.544916][T12137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 190.557694][T12137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 190.662132][T12370] loop1: detected capacity change from 0 to 512 [ 190.670492][T12370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.692387][T12137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.722620][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'. [ 190.739563][T12370] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.749309][T12137] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.777224][T12370] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.1921: inode #15: comm syz.1.1921: iget: illegal inode # [ 190.800426][T12370] loop1: lost filesystem error report for type 5 error -117 [ 190.802895][T12370] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1921: couldn't read orphan inode 15 (err -117) [ 190.810321][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 190.810341][ C0] EXT4-fs (loop1): initial error at time 1771126402: ext4_orphan_get:1391 [ 190.810365][ C0] EXT4-fs (loop1): last error at time 1771126402: ext4_orphan_get:1391 [ 190.846113][T12370] loop1: lost filesystem error report for type 5 error -117 [ 190.856548][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.871091][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.890172][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.897278][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.919523][T12354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 190.926112][T12385] syzkaller0: entered promiscuous mode [ 190.942479][T12385] syzkaller0: entered allmulticast mode [ 190.951790][T12385] TC_ACT_REPEAT abuse ? [ 190.965634][T12137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.976179][T12137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.070622][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 191.070640][ T28] audit: type=1400 audit(1771126402.793:8896): avc: denied { create } for pid=12396 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.171192][T12398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.178667][T12398] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 191.192932][T12398] bond0: (slave gre0): Error -95 calling set_mac_address [ 191.204284][T12398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12398 comm=syz.2.1926 [ 191.209484][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.291041][T12409] loop2: detected capacity change from 0 to 4096 [ 191.546775][T12432] loop2: detected capacity change from 0 to 4096 [ 191.550687][T12137] veth0_vlan: entered promiscuous mode [ 191.571875][T12137] veth1_vlan: entered promiscuous mode [ 191.597729][T12432] __nla_validate_parse: 2 callbacks suppressed [ 191.597748][T12432] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1928'. [ 191.614602][T12137] veth0_macvtap: entered promiscuous mode [ 191.624836][T12137] veth1_macvtap: entered promiscuous mode [ 191.639838][T12137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.649035][T12137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.664217][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'. [ 191.679667][ T108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.705083][ T108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.775161][ T108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.800309][ T108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.875155][ T28] audit: type=1400 audit(1771126403.593:8897): avc: denied { write } for pid=12448 comm="syz.1.1930" path="socket:[34868]" dev="sockfs" ino=34868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.931220][ T4230] hid_parser_main: 12 callbacks suppressed [ 191.931241][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 191.957339][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 191.977130][T12457] loop7: detected capacity change from 0 to 128 [ 191.984343][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.033914][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.160446][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.167957][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.175730][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.185750][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.193586][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.227796][ T4230] hid-generic 0103:0004:0000.0012: unknown main item tag 0x0 [ 192.267124][ T4230] hid-generic 0103:0004:0000.0012: hidraw0: HID v0.02 Device [syz0] on syz1 [ 192.321316][T12473] fido_id[12473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.403451][T12472] loop3: detected capacity change from 0 to 2048 [ 192.443367][T12487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.450661][T12487] IPv6: NLM_F_CREATE should be set when creating new route [ 192.456211][T12472] EXT4-fs: dax option not supported [ 192.457879][T12487] IPv6: NLM_F_CREATE should be set when creating new route [ 192.457892][T12487] IPv6: NLM_F_CREATE should be set when creating new route [ 192.573109][ T9197] EXT4-fs unmount: 13 callbacks suppressed [ 192.573125][ T9197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.700374][ T28] audit: type=1400 audit(1771126404.433:8898): avc: denied { ioctl } for pid=12508 comm="syz.2.1936" path="socket:[34920]" dev="sockfs" ino=34920 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.762028][T12510] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.806919][T12510] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.935674][T12137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.959474][T12525] syzkaller0: entered promiscuous mode [ 192.968600][T12525] syzkaller0: entered allmulticast mode [ 193.332949][ T10] IPVS: starting estimator thread 0... [ 193.425541][T12551] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (25446!=39978) [ 193.435232][T12551] EXT4-fs (loop7): group descriptors corrupted! [ 193.446820][T12552] IPVS: using max 2448 ests per chain, 122400 per kthread [ 193.632604][T12560] /dev/sg0: Can't lookup blockdev [ 193.661178][T12558] set_capacity_and_notify: 2 callbacks suppressed [ 193.661344][T12558] loop6: detected capacity change from 0 to 512 [ 193.706470][T12558] EXT4-fs: Ignoring removed oldalloc option [ 193.713173][T12558] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 193.747610][T12558] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1949: iget: bogus i_mode (4) [ 193.779890][T12558] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.788624][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 193.805081][ C0] EXT4-fs (loop6): initial error at time 1771126405: ext4_orphan_get:1391: inode 15 [ 193.810407][T12558] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1949: couldn't read orphan inode 15 (err -117) [ 193.815255][ C0] EXT4-fs (loop6): last error at time 1771126405: ext4_orphan_get:1391: inode 15 [ 193.851156][T12564] loop3: detected capacity change from 0 to 512 [ 193.868558][T12558] loop6: lost filesystem error report for type 5 error -117 [ 193.887727][T12569] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1951'. [ 193.904264][T12569] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1951'. [ 193.913454][T12569] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 193.960715][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 193.973068][T12558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.043727][T12564] FAT-fs (loop3): Directory bread(block 199916) failed [ 194.084525][T12564] FAT-fs (loop3): Directory bread(block 199917) failed [ 194.097965][ T9597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.122529][T12564] FAT-fs (loop3): Directory bread(block 199918) failed [ 194.130995][T12564] FAT-fs (loop3): Directory bread(block 199919) failed [ 194.177745][T12564] FAT-fs (loop3): Directory bread(block 199920) failed [ 194.194437][T12564] FAT-fs (loop3): Directory bread(block 199921) failed [ 194.205558][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 194.221551][T12599] loop6: detected capacity change from 0 to 512 [ 194.228676][T12564] FAT-fs (loop3): Directory bread(block 199922) failed [ 194.234399][T12592] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1956'. [ 194.247872][T12564] FAT-fs (loop3): Directory bread(block 199923) failed [ 194.256147][T12592] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1956'. [ 194.276313][T12605] syzkaller0: entered promiscuous mode [ 194.301489][T12592] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1956'. [ 194.312306][T12605] syzkaller0: entered allmulticast mode [ 194.355628][T12564] FAT-fs (loop3): Directory bread(block 199916) failed [ 194.400010][T12560] FAT-fs (loop3): FAT read failed (blocknr 128) [ 194.419825][T12621] loop6: detected capacity change from 0 to 128 [ 194.475091][T12628] loop2: detected capacity change from 0 to 1024 [ 194.508114][T12628] EXT4-fs: Ignoring removed bh option [ 194.553426][T12628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.593272][T12643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.653897][T12643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.715677][T12652] loop6: detected capacity change from 0 to 512 [ 194.725344][T12653] loop1: detected capacity change from 0 to 1024 [ 194.761063][T12652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.799377][ T9197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.817690][T12652] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.860690][T12653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.894923][ T28] audit: type=1400 audit(1771126406.623:8899): avc: denied { lock } for pid=12642 comm="syz.1.1967" path="/127/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 194.905309][T12673] netlink: 'syz.2.1969': attribute type 10 has an invalid length. [ 194.957230][ T9597] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.973074][T12673] macvlan1: entered allmulticast mode [ 195.009742][T12673] team0: Port device macvlan1 removed [ 195.101009][T12684] syzkaller0: entered promiscuous mode [ 195.106624][T12684] syzkaller0: entered allmulticast mode [ 195.178783][T12700] loop7: detected capacity change from 0 to 512 [ 195.188321][T12700] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1976: invalid indirect mapped block 256 (level 2) [ 195.212200][T12700] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 195.212463][T12700] EXT4-fs (loop7): 2 truncates cleaned up [ 195.221715][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 195.221765][ C0] EXT4-fs (loop7): initial error at time 1771126406: ext4_free_branches:1023: inode 11 [ 195.221809][ C0] EXT4-fs (loop7): last error at time 1771126406: ext4_free_branches:1023: inode 11 [ 195.253880][T12700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.298121][T12137] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.501503][T12720] bond_slave_0: entered promiscuous mode [ 195.506944][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1980'. [ 195.507193][T12720] bond_slave_1: entered promiscuous mode [ 195.529451][T12720] vlan2: entered promiscuous mode [ 195.546365][T12720] bond0: entered promiscuous mode [ 195.679804][ T8874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.876261][T12769] syzkaller0: entered promiscuous mode [ 195.888605][T12769] syzkaller0: entered allmulticast mode [ 195.917246][T12776] loop6: detected capacity change from 0 to 128 [ 196.167384][T12797] IPv6: sit1: Disabled Multicast RS [ 196.173487][T12797] sit1: entered allmulticast mode [ 196.673696][ T3401] hid-generic 0103:0004:0000.0013: hidraw0: HID v0.02 Device [syz0] on syz1 [ 196.691478][T12840] bridge2: entered promiscuous mode [ 196.704258][T12840] bridge2: entered allmulticast mode [ 196.771389][T12853] syzkaller0: entered promiscuous mode [ 196.776916][T12853] syzkaller0: entered allmulticast mode [ 196.803668][T12861] loop3: detected capacity change from 0 to 256 [ 196.859734][T12861] vfat: Unknown parameter '' [ 196.914574][T12861] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 196.933774][T12861] __nla_validate_parse: 1 callbacks suppressed [ 196.933795][T12861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2005'. [ 196.956099][T12861] dummy0: entered promiscuous mode [ 196.962049][T12861] dummy0: entered allmulticast mode [ 196.993741][T12861] bridge0: port 3(dummy0) entered blocking state [ 197.014872][T12861] bridge0: port 3(dummy0) entered disabled state [ 197.072758][T12884] netlink: 'syz.7.2011': attribute type 10 has an invalid length. [ 197.087871][ T28] audit: type=1400 audit(1771126408.814:8900): avc: denied { append } for pid=12889 comm="syz.6.2012" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 197.121157][T12884] macvlan1: entered allmulticast mode [ 197.137318][T12884] veth1_vlan: entered allmulticast mode [ 197.159110][T12884] team0: Port device macvlan1 added [ 197.270146][T12912] syzkaller0: entered promiscuous mode [ 197.275839][T12912] syzkaller0: entered allmulticast mode [ 197.336528][T12919] EXT4-fs: Ignoring removed oldalloc option [ 197.342753][ T28] audit: type=1400 audit(1771126409.064:8901): avc: denied { mounton } for pid=12914 comm="syz.6.2020" path="/file1" dev="ramfs" ino=36374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 197.399546][T12919] EXT4-fs (loop6): 1 truncate cleaned up [ 197.402124][T12919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.406591][T12919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.486211][T12928] IPv6: Can't replace route, no match found [ 197.991796][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.059895][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.428541][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.466015][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.031520][T13093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.055451][T13093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.265075][T13123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.313733][T13123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.326985][T13131] tipc: Started in network mode [ 199.341882][T13131] tipc: Node identity 9a0598f0b5a2, cluster identity 4711 [ 199.354927][T13131] tipc: Enabled bearer , priority 0 [ 199.369186][T13131] syzkaller0: entered promiscuous mode [ 199.380639][T13131] syzkaller0: entered allmulticast mode [ 199.407274][T13131] tipc: Resetting bearer [ 199.431838][T13130] tipc: Resetting bearer [ 199.453064][T13130] tipc: Disabling bearer [ 200.242232][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2083'. [ 200.251933][T13164] veth1_macvtap: left promiscuous mode [ 200.622223][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 200.631962][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 200.708203][ T28] audit: type=1400 audit(1771126412.434:8902): avc: denied { watch watch_reads } for pid=13185 comm="syz.1.2090" path="/142/file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.807147][T13193] program syz.1.2093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.126040][T13211] team0: entered allmulticast mode [ 201.131828][T13211] team_slave_0: entered allmulticast mode [ 201.137672][T13211] team_slave_1: entered allmulticast mode [ 201.144153][T13212] IPv6: Can't replace route, no match found [ 201.150181][T13212] IPv6: Can't replace route, no match found [ 201.175780][ T28] audit: type=1400 audit(1771126412.904:8903): avc: denied { accept } for pid=13213 comm="syz.6.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 201.201068][ T28] audit: type=1400 audit(1771126412.904:8904): avc: denied { ioctl } for pid=13213 comm="syz.6.2102" path="socket:[35588]" dev="sockfs" ino=35588 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 201.287721][T13223] syzkaller0: entered promiscuous mode [ 201.293478][T13223] syzkaller0: entered allmulticast mode [ 201.597166][T13260] syzkaller0: entered promiscuous mode [ 201.602947][T13260] syzkaller0: entered allmulticast mode [ 201.715814][T13268] bond1: Removing last arp target with arp_interval on [ 201.792296][T13289] netlink: 1104 bytes leftover after parsing attributes in process `syz.7.2130'. [ 201.818270][ T28] audit: type=1400 audit(1771126413.544:8905): avc: denied { create } for pid=13275 comm="syz.2.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 201.873129][T13289] netlink: 693 bytes leftover after parsing attributes in process `syz.7.2130'. [ 201.895837][T13294] random: crng reseeded on system resumption [ 201.918907][ T28] audit: type=1400 audit(1771126413.624:8906): avc: denied { read } for pid=13275 comm="syz.2.2127" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 202.026406][ T28] audit: type=1400 audit(1771126413.624:8907): avc: denied { ioctl } for pid=13275 comm="syz.2.2127" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 202.089873][ T28] audit: type=1400 audit(1771126413.754:8908): avc: denied { getopt } for pid=13305 comm="syz.1.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.121781][T13312] syzkaller0: entered promiscuous mode [ 202.137131][T13312] syzkaller0: entered allmulticast mode [ 202.166885][T13312] tipc: Started in network mode [ 202.177467][T13312] tipc: Node identity 329624e6ba4e, cluster identity 4711 [ 202.193443][T13312] tipc: Enabled bearer , priority 0 [ 202.228103][T13307] tipc: Resetting bearer [ 202.274933][T13307] tipc: Disabling bearer [ 202.364336][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2137'. [ 202.623692][ T28] audit: type=1400 audit(1771126414.344:8909): avc: denied { append } for pid=13355 comm="syz.3.2147" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 202.889583][ T28] audit: type=1326 audit(1771126414.594:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.2.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 202.939514][ T28] audit: type=1326 audit(1771126414.594:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.2.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 202.966831][T13369] program syz.7.2151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.053141][ T28] audit: type=1400 audit(1771126414.784:8912): avc: denied { name_connect } for pid=13380 comm="syz.3.2157" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 203.098032][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2156'. [ 203.108666][T13384] veth1_vlan: left promiscuous mode [ 203.188193][ T28] audit: type=1400 audit(1771126414.914:8913): avc: denied { watch watch_reads } for pid=13393 comm="syz.7.2159" path="/" dev="ramfs" ino=35813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 203.267689][T13405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.320179][ T28] audit: type=1400 audit(1771126415.054:8914): avc: denied { setopt } for pid=13406 comm="syz.6.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.362436][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2165'. [ 203.476728][T13420] syzkaller0: entered promiscuous mode [ 203.655499][T13446] syzkaller1: entered promiscuous mode [ 203.668484][T13446] syzkaller1: entered allmulticast mode [ 203.840281][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2188'. [ 203.859442][T13464] netlink: 'syz.7.2182': attribute type 1 has an invalid length. [ 203.960882][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.994852][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.107382][T13464] bond2: (slave gretap1): making interface the new active one [ 204.125445][T13464] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 204.895642][T13497] syzkaller0: entered promiscuous mode [ 204.920385][T13498] xt_hashlimit: size too large, truncated to 1048576 [ 205.049083][T13505] netlink: 'syz.2.2203': attribute type 4 has an invalid length. [ 205.169583][ T28] audit: type=1400 audit(1771126416.904:8915): avc: denied { read } for pid=13518 comm="syz.2.2210" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 205.200587][ T28] audit: type=1400 audit(1771126416.904:8916): avc: denied { open } for pid=13518 comm="syz.2.2210" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 205.235937][ T28] audit: type=1400 audit(1771126416.924:8917): avc: denied { ioctl } for pid=13518 comm="syz.2.2210" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 205.344814][ T4253] hid_parser_main: 12 callbacks suppressed [ 205.344864][ T4253] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 205.369739][ T4253] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.566768][T13562] syzkaller0: entered promiscuous mode [ 205.572483][T13562] syzkaller0: entered allmulticast mode [ 205.666599][T13565] tipc: Enabling of bearer rejected, failed to enable media [ 205.735534][T13570] syzkaller0: entered promiscuous mode [ 205.744280][T13570] syzkaller0: entered allmulticast mode [ 205.751660][T13572] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2230'. [ 205.767438][T13572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.919130][T13584] syzkaller0: entered promiscuous mode [ 205.926140][T13584] syzkaller0: entered allmulticast mode [ 205.943516][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.952115][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.361114][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2239'. [ 206.370331][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2239'. [ 206.379587][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2239'. [ 206.837946][T13617] tipc: Enabled bearer , priority 0 [ 206.844987][T13617] syzkaller0: entered promiscuous mode [ 206.869451][T13617] syzkaller0: entered allmulticast mode [ 206.891290][T13617] tipc: Resetting bearer [ 206.981574][T13616] tipc: Resetting bearer [ 207.018562][T13616] tipc: Disabling bearer [ 207.758071][T13669] netlink: 'syz.1.2267': attribute type 21 has an invalid length. [ 207.766511][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 207.819161][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 207.819180][ T28] audit: type=1400 audit(1771126419.544:8920): avc: denied { ioctl } for pid=13672 comm="syz.1.2270" path="socket:[37638]" dev="sockfs" ino=37638 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 207.953582][T13685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13685 comm=syz.1.2270 [ 208.104620][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'. [ 208.355380][T13701] syzkaller0: entered promiscuous mode [ 208.360921][T13701] syzkaller0: entered allmulticast mode [ 208.531170][T13708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.546864][T13708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.629249][T13711] syzkaller0: entered promiscuous mode [ 208.639118][T13711] syzkaller0: entered allmulticast mode [ 208.688216][ T28] audit: type=1400 audit(1771126420.424:8921): avc: denied { connect } for pid=13712 comm="syz.2.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.727046][T13711] tipc: Enabled bearer , priority 0 [ 208.734973][T13710] tipc: Resetting bearer [ 208.764661][T13710] tipc: Disabling bearer [ 208.908273][T13729] tipc: Enabled bearer , priority 0 [ 208.915651][T13729] syzkaller0: entered promiscuous mode [ 208.923245][T13729] syzkaller0: entered allmulticast mode [ 208.941364][T13729] tipc: Resetting bearer [ 208.954702][T13728] tipc: Resetting bearer [ 209.074051][T13728] tipc: Disabling bearer [ 209.215532][T13753] program syz.3.2303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.475986][T13779] tipc: Enabled bearer , priority 0 [ 209.493227][T13779] syzkaller0: entered promiscuous mode [ 209.502922][T13779] syzkaller0: entered allmulticast mode [ 209.553442][T13779] tipc: Resetting bearer [ 209.583646][T13778] tipc: Resetting bearer [ 209.629707][T13778] tipc: Disabling bearer [ 209.899828][T13808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.918829][T13808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.428891][T13867] syzkaller0: entered promiscuous mode [ 210.434594][T13867] syzkaller0: entered allmulticast mode [ 210.508035][T13874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.517336][T13874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.598846][T13884] tipc: Started in network mode [ 210.603864][T13884] tipc: Node identity b2cd0af0639c, cluster identity 4711 [ 210.611360][T13884] tipc: Enabled bearer , priority 0 [ 210.618604][T13884] syzkaller0: entered promiscuous mode [ 210.624240][T13884] syzkaller0: entered allmulticast mode [ 210.635309][T13884] tipc: Resetting bearer [ 210.643127][T13882] tipc: Resetting bearer [ 210.658535][T13882] tipc: Disabling bearer [ 210.817115][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2350'. [ 211.925619][T14041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.937522][T14041] batadv_slave_0: entered promiscuous mode [ 211.945557][T14041] batadv_slave_0: entered allmulticast mode [ 211.969485][T14041] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 212.236788][ T28] audit: type=1400 audit(1771126423.964:8922): avc: denied { name_bind } for pid=14080 comm="syz.1.2385" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 212.535381][T14125] tipc: Enabled bearer , priority 0 [ 212.544969][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 212.561456][T14125] syzkaller0: entered promiscuous mode [ 212.585566][T14125] syzkaller0: entered allmulticast mode [ 212.605867][T14125] tipc: Resetting bearer [ 212.615373][T14124] tipc: Resetting bearer [ 212.645034][ T28] audit: type=1400 audit(1771126424.374:8923): avc: denied { getopt } for pid=14137 comm="syz.7.2409" lport=51164 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 212.678836][T14124] tipc: Disabling bearer [ 212.775610][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2415'. [ 212.811427][T14152] batadv1: entered promiscuous mode [ 212.832614][T14152] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 213.035800][T14172] tipc: Enabled bearer , priority 0 [ 213.043473][T14172] syzkaller0: entered promiscuous mode [ 213.051316][T14172] syzkaller0: entered allmulticast mode [ 213.060970][T14172] tipc: Resetting bearer [ 213.067444][T14171] tipc: Resetting bearer [ 213.075072][T14171] tipc: Disabling bearer [ 213.325252][ T4253] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 213.336181][ T4253] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 213.351198][T14208] tipc: Started in network mode [ 213.351938][ T4253] hid-generic 0003:0004:0000.0015: unknown main item tag 0x0 [ 213.362185][T14208] tipc: Node identity 02c1c652977, cluster identity 4711 [ 213.379274][ T4253] hid-generic 0003:0004:0000.0015: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 213.381763][T14208] tipc: Enabled bearer , priority 0 [ 213.411970][T14211] syzkaller0: entered promiscuous mode [ 213.417865][T14211] syzkaller0: entered allmulticast mode [ 213.427109][T14208] tipc: Resetting bearer [ 213.446567][T14210] fido_id[14210]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.461280][T14207] tipc: Resetting bearer [ 213.491823][T14207] tipc: Disabling bearer [ 213.517871][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2444'. [ 213.595317][T14222] syzkaller0: entered promiscuous mode [ 213.603526][T14222] syzkaller0: entered allmulticast mode [ 213.932647][T14244] syzkaller0: entered promiscuous mode [ 213.956144][T14244] syzkaller0: entered allmulticast mode [ 214.076186][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.085767][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.208329][T14262] syzkaller0: entered promiscuous mode [ 214.213936][T14262] syzkaller0: entered allmulticast mode [ 214.355498][T14275] syzkaller0: entered promiscuous mode [ 214.362539][T14275] syzkaller0: entered allmulticast mode [ 214.652675][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.663320][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.702810][T14318] syzkaller0: entered promiscuous mode [ 214.708421][T14318] syzkaller0: entered allmulticast mode [ 214.822600][T14338] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 214.830091][T14338] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 214.838381][T14338] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 214.990421][T14356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.999201][T14356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.063049][ T28] audit: type=1400 audit(1771126426.795:8924): avc: denied { connect } for pid=14349 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.214637][T14360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.224029][T14360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.433304][T14360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.443398][T14360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.644833][T14378] tipc: Enabled bearer , priority 0 [ 215.664218][T14378] syzkaller0: entered promiscuous mode [ 215.677345][T14378] syzkaller0: entered allmulticast mode [ 215.692908][T14377] tipc: Resetting bearer [ 215.700014][T14377] tipc: Disabling bearer [ 215.865587][T14386] syzkaller0: entered promiscuous mode [ 215.877261][T14386] syzkaller0: entered allmulticast mode [ 215.885163][T14386] tipc: Enabled bearer , priority 0 [ 215.903167][T14385] tipc: Resetting bearer [ 215.928158][T14385] tipc: Disabling bearer [ 216.003719][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2526'. [ 216.077988][T14400] syzkaller0: entered promiscuous mode [ 216.100376][T14400] syzkaller0: entered allmulticast mode [ 216.113360][T14405] tipc: Started in network mode [ 216.127091][T14405] tipc: Node identity 8ebee6243365, cluster identity 4711 [ 216.147296][T14405] tipc: Enabled bearer , priority 0 [ 216.165979][T14405] syzkaller0: entered promiscuous mode [ 216.180887][T14405] syzkaller0: entered allmulticast mode [ 216.198008][T14403] tipc: Resetting bearer [ 216.221851][T14403] tipc: Disabling bearer [ 216.469794][ T28] audit: type=1400 audit(1771126428.185:8925): avc: denied { create } for pid=14434 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.660992][T14443] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.056200][T14458] tipc: Enabled bearer , priority 0 [ 217.063352][T14458] syzkaller0: entered promiscuous mode [ 217.069356][T14458] syzkaller0: entered allmulticast mode [ 217.082045][T14457] tipc: Resetting bearer [ 217.091240][T14457] tipc: Disabling bearer [ 217.170848][T14462] xt_hashlimit: size too large, truncated to 1048576 [ 217.390041][T14468] netlink: 'syz.2.2556': attribute type 10 has an invalid length. [ 217.427038][T14468] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.438756][T14468] bond0: (slave team0): Enslaving as an active interface with an up link [ 217.679888][T14477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.688403][T14477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.783479][T14480] program syz.6.2561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.880708][T14486] tipc: Enabled bearer , priority 0 [ 217.902669][T14486] syzkaller0: entered promiscuous mode [ 217.917313][T14486] syzkaller0: entered allmulticast mode [ 217.934474][T14485] tipc: Resetting bearer [ 217.948468][T14485] tipc: Disabling bearer [ 218.606345][T14502] syzkaller0: entered promiscuous mode [ 218.631516][T14502] syzkaller0: entered allmulticast mode [ 218.663336][T14501] syzkaller0: entered promiscuous mode [ 218.677222][T14501] syzkaller0: entered allmulticast mode [ 218.844133][T14515] tipc: Enabled bearer , priority 0 [ 218.855764][T14515] tipc: Resetting bearer [ 218.863048][T14514] tipc: Disabling bearer [ 219.049701][ T28] audit: type=1400 audit(1771126430.785:8926): avc: denied { connect } for pid=14531 comm="syz.6.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.092854][ T28] audit: type=1400 audit(1771126430.805:8927): avc: denied { write } for pid=14531 comm="syz.6.2584" path="socket:[41094]" dev="sockfs" ino=41094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.293685][T14547] tipc: Enabled bearer , priority 0 [ 219.330551][T14546] tipc: Disabling bearer [ 219.560351][T14557] syzkaller0: entered promiscuous mode [ 219.565940][T14557] syzkaller0: entered allmulticast mode [ 219.573550][T14557] tipc: Enabled bearer , priority 0 [ 219.593575][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.602171][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.612677][T14559] program syz.6.2595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.623635][T14556] tipc: Resetting bearer [ 219.630580][T14556] tipc: Disabling bearer [ 219.779745][T14568] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 219.795909][T14568] netlink: 'syz.2.2599': attribute type 2 has an invalid length. [ 219.894171][T14576] tipc: Enabled bearer , priority 0 [ 219.903325][T14575] tipc: Disabling bearer [ 220.011404][T14591] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 220.028397][ T28] audit: type=1400 audit(1771126431.765:8928): avc: denied { getopt } for pid=14592 comm="syz.1.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.206543][T14615] tipc: Enabled bearer , priority 0 [ 220.222109][T14612] tipc: Disabling bearer [ 220.883012][T14683] syzkaller0: entered promiscuous mode [ 220.896065][T14683] syzkaller0: entered allmulticast mode [ 221.441983][T14716] syzkaller0: entered promiscuous mode [ 221.447637][T14716] syzkaller0: entered allmulticast mode [ 221.455463][T14716] tipc: Enabled bearer , priority 0 [ 221.482654][T14715] tipc: Resetting bearer [ 221.516506][T14715] tipc: Disabling bearer [ 222.126431][T14745] syzkaller0: entered promiscuous mode [ 222.142280][T14745] syzkaller0: entered allmulticast mode [ 222.156482][T14745] tipc: Enabled bearer , priority 0 [ 222.198090][T14744] tipc: Resetting bearer [ 222.214835][T14744] tipc: Disabling bearer [ 222.431894][T14771] syzkaller0: entered promiscuous mode [ 222.439142][T14771] syzkaller0: entered allmulticast mode [ 222.452452][T14771] tipc: Enabled bearer , priority 0 [ 222.471864][T14769] tipc: Resetting bearer [ 222.504687][T14769] tipc: Disabling bearer [ 223.330687][T14810] syzkaller0: entered promiscuous mode [ 223.336207][T14810] syzkaller0: entered allmulticast mode [ 223.371107][T14810] tipc: Enabled bearer , priority 0 [ 223.378530][T14820] syzkaller1: entered promiscuous mode [ 223.384024][T14820] syzkaller1: entered allmulticast mode [ 223.390836][T14808] tipc: Resetting bearer [ 223.407678][T14808] tipc: Disabling bearer [ 223.545428][T14836] macvtap1: entered promiscuous mode [ 223.561331][T14836] bridge0: entered promiscuous mode [ 223.574853][T14836] macvtap1: entered allmulticast mode [ 223.624001][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.639422][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.648611][T14836] bridge0: entered allmulticast mode [ 223.655409][T14836] bridge0: port 4(macvtap1) entered blocking state [ 223.669973][T14836] bridge0: port 4(macvtap1) entered disabled state [ 223.677877][T14836] bridge0: left allmulticast mode [ 223.695608][T14836] bridge0: left promiscuous mode [ 223.783315][T14856] syzkaller0: entered promiscuous mode [ 223.789310][T14856] syzkaller0: entered allmulticast mode [ 223.796682][T14856] tipc: Enabled bearer , priority 0 [ 223.805693][T14855] tipc: Resetting bearer [ 223.820426][T14855] tipc: Disabling bearer [ 223.843911][T14860] syzkaller1: entered promiscuous mode [ 223.850237][T14860] syzkaller1: entered allmulticast mode [ 224.233853][T14881] syzkaller0: entered promiscuous mode [ 224.239485][T14881] syzkaller0: entered allmulticast mode [ 224.249873][T14885] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 225.161979][ T4230] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 225.205964][ T4230] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.261774][T14956] x_tables: duplicate underflow at hook 3 [ 225.353324][T14967] syzkaller0: entered promiscuous mode [ 225.361958][T14967] syzkaller0: entered allmulticast mode [ 226.038064][ T4230] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 226.047787][ T4230] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.675100][T15028] syzkaller0: entered promiscuous mode [ 226.708017][T15028] syzkaller0: entered allmulticast mode [ 226.788769][T15028] tipc: Enabled bearer , priority 0 [ 226.808433][T15027] tipc: Resetting bearer [ 226.826682][T15027] tipc: Disabling bearer [ 227.169322][T15052] netlink: 'syz.2.2802': attribute type 1 has an invalid length. [ 227.204907][T15052] netlink: 'syz.2.2802': attribute type 2 has an invalid length. [ 227.244591][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.301559][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.363310][T15063] syzkaller0: entered promiscuous mode [ 227.371486][T15063] syzkaller0: entered allmulticast mode [ 227.378506][T15061] syzkaller0: entered promiscuous mode [ 227.384028][T15061] syzkaller0: entered allmulticast mode [ 227.391957][T15061] tipc: Enabled bearer , priority 0 [ 227.399113][T15060] tipc: Resetting bearer [ 227.410278][T15060] tipc: Disabling bearer [ 227.427370][T15072] syzkaller0: entered promiscuous mode [ 227.432928][T15072] syzkaller0: entered allmulticast mode [ 227.587436][T15082] syzkaller0: entered promiscuous mode [ 227.600216][T15082] syzkaller0: entered allmulticast mode [ 227.712819][T15090] syzkaller0: entered promiscuous mode [ 227.721925][T15090] syzkaller0: entered allmulticast mode [ 227.745702][ T28] audit: type=1400 audit(1771126439.465:8929): avc: denied { setopt } for pid=15091 comm="syz.6.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 227.768120][T15090] tipc: Enabled bearer , priority 0 [ 227.776241][T15090] tipc: Resetting bearer [ 227.782414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.790540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.806797][T15089] tipc: Resetting bearer [ 227.813363][T15089] tipc: Disabling bearer [ 228.085616][ T28] audit: type=1400 audit(1771126439.815:8930): avc: denied { write } for pid=15115 comm="syz.7.2831" lport=52772 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 229.037575][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2846'. [ 229.144792][T15166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.183719][T15166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.240947][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 229.276814][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 229.296956][T15166] binfmt_misc: register: failed to install interpreter file ./file0 [ 229.314268][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.333849][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.393942][T15178] syzkaller0: entered promiscuous mode [ 229.399517][T15178] syzkaller0: entered allmulticast mode [ 229.570424][ T28] audit: type=1326 audit(1771126441.305:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 229.596682][ T28] audit: type=1326 audit(1771126441.335:8932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 229.597484][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2862'. [ 229.620663][ T28] audit: type=1326 audit(1771126441.335:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 229.653864][ T28] audit: type=1326 audit(1771126441.335:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 229.702965][ T28] audit: type=1326 audit(1771126441.335:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 229.727061][ T28] audit: type=1326 audit(1771126441.335:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 229.751014][ T28] audit: type=1326 audit(1771126441.335:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 229.775407][ T28] audit: type=1326 audit(1771126441.335:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953551bf79 code=0x7ffc0000 [ 230.008976][T15218] program syz.6.2874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.021336][T15209] syzkaller0: entered promiscuous mode [ 230.027153][T15209] syzkaller0: entered allmulticast mode [ 230.037101][T15219] tipc: Enabled bearer , priority 0 [ 230.050687][T15215] tipc: Resetting bearer [ 230.057922][T15214] tipc: Disabling bearer [ 230.080533][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2875'. [ 230.658011][T15255] tipc: Enabled bearer , priority 0 [ 230.686996][T15255] tipc: Resetting bearer [ 230.694765][T15257] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2889'. [ 230.748869][T15254] tipc: Disabling bearer [ 230.882455][T15270] syzkaller0: entered promiscuous mode [ 230.888048][T15270] syzkaller0: entered allmulticast mode [ 231.038147][T15288] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2904'. [ 231.082989][T15285] syzkaller0: entered promiscuous mode [ 231.093316][T15285] syzkaller0: entered allmulticast mode [ 231.260877][T15309] syzkaller0: entered promiscuous mode [ 231.266574][T15309] syzkaller0: entered allmulticast mode [ 231.454187][T15318] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2917'. [ 232.085154][T15348] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 232.133206][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2927'. [ 232.291397][T15352] syzkaller0: entered promiscuous mode [ 232.309727][T15352] syzkaller0: entered allmulticast mode [ 232.336249][T15363] tipc: Enabled bearer , priority 0 [ 232.347616][T15363] tipc: Resetting bearer [ 232.368927][T15359] tipc: Disabling bearer [ 232.632423][T15384] netlink: 'syz.3.2940': attribute type 27 has an invalid length. [ 232.637529][T15376] syzkaller0: entered promiscuous mode [ 232.645871][T15376] syzkaller0: entered allmulticast mode [ 232.676591][T15384] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 232.684661][T15384] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 232.967057][T15399] syzkaller0: entered promiscuous mode [ 232.982826][T15399] syzkaller0: entered allmulticast mode [ 233.180256][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 233.180392][ T28] audit: type=1326 audit(1771126444.916:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.1.2951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893d47bf79 code=0x0 [ 233.487495][T15439] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2962'. [ 233.713670][T15454] tipc: Enabling of bearer rejected, failed to enable media [ 234.146889][T15489] tipc: Enabling of bearer rejected, failed to enable media [ 234.384739][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.423839][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.482224][T15484] syz_tun: entered allmulticast mode [ 234.496282][T15529] netlink: 'syz.3.2994': attribute type 1 has an invalid length. [ 234.507537][T15529] netlink: 'syz.3.2994': attribute type 2 has an invalid length. [ 234.748166][T15543] syzkaller0: entered promiscuous mode [ 234.759347][T15543] syzkaller0: entered allmulticast mode [ 235.394715][T15602] syzkaller0: entered promiscuous mode [ 235.406516][T15602] syzkaller0: entered allmulticast mode [ 235.509029][T15615] tipc: Cannot configure node identity twice [ 235.538533][T15618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.586370][T15618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.691270][T15627] syzkaller1: entered promiscuous mode [ 235.726270][T15627] syzkaller1: entered allmulticast mode [ 235.868791][T15642] syzkaller0: entered promiscuous mode [ 235.874436][T15642] syzkaller0: entered allmulticast mode [ 236.104714][T15667] __nla_validate_parse: 3 callbacks suppressed [ 236.104734][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3048'. [ 236.226827][T15676] syzkaller1: entered promiscuous mode [ 236.241025][T15676] syzkaller1: entered allmulticast mode [ 236.558153][T15680] syzkaller0: entered promiscuous mode [ 236.563664][T15680] syzkaller0: entered allmulticast mode [ 236.688788][T15705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.719841][T15705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.736481][T15707] syzkaller0: entered promiscuous mode [ 236.982648][ T28] audit: type=1400 audit(1771126448.716:8950): avc: denied { map } for pid=15721 comm="syz.6.3071" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 237.098832][T15729] syzkaller0: entered promiscuous mode [ 237.104518][T15729] syzkaller0: entered allmulticast mode [ 237.115290][T15729] tipc: Enabled bearer , priority 0 [ 237.127571][T15728] tipc: Resetting bearer [ 237.153260][T15728] tipc: Disabling bearer [ 237.191210][T15731] syzkaller0: entered promiscuous mode [ 237.192387][T15740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.196935][T15731] syzkaller0: entered allmulticast mode [ 237.207499][T15740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.646700][T15760] tipc: Enabled bearer , priority 0 [ 237.673939][T15759] tipc: Disabling bearer [ 237.817820][T15770] syzkaller0: entered promiscuous mode [ 237.830647][T15770] syzkaller0: entered allmulticast mode [ 237.849281][T15770] tipc: Enabled bearer , priority 0 [ 237.971565][T15769] tipc: Resetting bearer [ 237.996476][T15769] tipc: Disabling bearer [ 238.013933][T15775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.022959][T15775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.232744][T15791] tipc: Enabling of bearer rejected, failed to enable media [ 238.616056][ T28] audit: type=1326 audit(1771126450.346:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 238.665248][ T28] audit: type=1326 audit(1771126450.346:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 238.748205][ T28] audit: type=1326 audit(1771126450.356:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 238.799218][ T28] audit: type=1326 audit(1771126450.356:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 238.850922][T15826] tipc: Enabling of bearer rejected, failed to enable media [ 238.862242][ T28] audit: type=1326 audit(1771126450.356:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 238.925967][ T28] audit: type=1326 audit(1771126450.356:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 238.976784][ T28] audit: type=1326 audit(1771126450.356:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 239.000802][ T28] audit: type=1326 audit(1771126450.356:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 239.052846][ T28] audit: type=1326 audit(1771126450.356:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.2.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa62286bf79 code=0x7ffc0000 [ 239.099302][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.109017][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.560241][T15862] tipc: Enabling of bearer rejected, failed to enable media [ 239.867817][T15886] syzkaller1: entered promiscuous mode [ 239.882071][T15886] syzkaller1: entered allmulticast mode [ 240.249040][T15901] tipc: Enabling of bearer rejected, failed to enable media [ 240.564750][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3151'. [ 240.574226][T15938] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 240.627823][T15946] xt_hashlimit: size too large, truncated to 1048576 [ 240.928120][T15972] syzkaller0: entered promiscuous mode [ 240.933686][T15972] syzkaller0: entered allmulticast mode [ 240.941564][T15972] tipc: Enabled bearer , priority 0 [ 240.976043][T15971] tipc: Resetting bearer [ 240.983589][T15971] tipc: Disabling bearer [ 241.959103][T16072] syzkaller0: entered promiscuous mode [ 241.975487][T16072] syzkaller0: entered allmulticast mode [ 243.008017][T16142] program syz.3.3211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.580522][T16188] syzkaller0: entered promiscuous mode [ 243.586666][T16188] syzkaller0: entered allmulticast mode [ 243.698170][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.707183][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.923379][T16215] syzkaller0: entered promiscuous mode [ 243.929337][T16215] syzkaller0: entered allmulticast mode [ 244.379023][T16230] tipc: Enabled bearer , priority 0 [ 244.408468][T16230] tipc: Resetting bearer [ 244.436532][T16229] tipc: Disabling bearer [ 244.569526][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.580127][T16253] tipc: Enabling of bearer rejected, failed to enable media [ 244.597344][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.145524][T16289] tipc: Enabling of bearer rejected, failed to enable media [ 245.578229][T16330] tipc: Enabling of bearer rejected, failed to enable media [ 245.854727][T16368] syzkaller0: entered promiscuous mode [ 245.864158][T16368] syzkaller0: entered allmulticast mode [ 246.157303][T16408] sctp: [Deprecated]: syz.1.3320 (pid 16408) Use of int in max_burst socket option. [ 246.157303][T16408] Use struct sctp_assoc_value instead [ 246.230143][T16412] syzkaller0: entered promiscuous mode [ 246.239598][T16412] syzkaller0: entered allmulticast mode [ 246.370426][T16426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3330'. [ 246.564567][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3336'. [ 246.614822][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.624860][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.658449][T16447] syzkaller0: entered promiscuous mode [ 246.664232][T16447] syzkaller0: entered allmulticast mode [ 246.944280][T16457] program syz.2.3344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.061482][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3348'. [ 247.126085][T16473] syzkaller0: entered promiscuous mode [ 247.131732][T16473] syzkaller0: entered allmulticast mode [ 247.243926][T16479] syzkaller0: entered promiscuous mode [ 247.263855][T16479] syzkaller0: entered allmulticast mode [ 247.319776][T16490] SET target dimension over the limit! [ 247.428864][T16506] syzkaller0: entered promiscuous mode [ 247.439439][T16506] syzkaller0: entered allmulticast mode [ 247.768122][T16533] syzkaller0: entered promiscuous mode [ 247.783903][T16533] syzkaller0: entered allmulticast mode [ 247.970666][T16556] syzkaller0: entered promiscuous mode [ 247.976460][T16556] syzkaller0: entered allmulticast mode [ 248.111849][T16574] syzkaller0: entered promiscuous mode [ 248.123931][T16574] syzkaller0: entered allmulticast mode [ 248.291196][T16597] tipc: Enabled bearer , priority 0 [ 248.326326][T16596] tipc: Disabling bearer [ 248.418668][T16613] syzkaller0: entered promiscuous mode [ 248.434631][T16613] syzkaller0: entered allmulticast mode [ 248.744223][T16649] tipc: Enabled bearer , priority 0 [ 248.827219][T16644] tipc: Disabling bearer [ 249.175089][T16660] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3425'. [ 249.647993][T16717] syzkaller0: entered promiscuous mode [ 249.653597][T16717] syzkaller0: entered allmulticast mode [ 249.993652][T16750] syzkaller0: entered promiscuous mode [ 249.999569][T16750] syzkaller0: entered allmulticast mode [ 250.006969][T16752] syzkaller0: entered promiscuous mode [ 250.013513][T16752] syzkaller0: entered allmulticast mode [ 250.266000][T16782] netlink: 'syz.7.3479': attribute type 1 has an invalid length. [ 250.274139][T16782] netlink: 'syz.7.3479': attribute type 2 has an invalid length. [ 250.283812][T16784] tipc: Enabled bearer , priority 0 [ 250.293478][T16783] tipc: Disabling bearer [ 250.434617][T16800] syzkaller0: entered promiscuous mode [ 250.453719][T16800] syzkaller0: entered allmulticast mode [ 250.719507][T16823] syzkaller0: entered promiscuous mode [ 250.725100][T16823] syzkaller0: entered allmulticast mode [ 250.748672][T16820] tipc: Enabled bearer , priority 0 [ 250.794499][T16817] tipc: Disabling bearer [ 251.080168][T16847] syzkaller0: entered promiscuous mode [ 251.086048][T16847] syzkaller0: entered allmulticast mode [ 251.219269][T16859] tipc: Enabled bearer , priority 0 [ 251.260370][T16858] tipc: Disabling bearer [ 251.272889][T16871] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.795755][T16940] netlink: 'syz.7.3544': attribute type 4 has an invalid length. [ 254.103311][T17080] tipc: Enabling of bearer rejected, failed to enable media [ 254.604937][T17128] tipc: Enabling of bearer rejected, failed to enable media [ 254.663262][T17144] syzkaller0: entered promiscuous mode [ 254.668858][T17144] syzkaller0: entered allmulticast mode [ 254.676722][T17144] tipc: Enabled bearer , priority 0 [ 254.683844][T17143] tipc: Resetting bearer [ 254.691724][T17143] tipc: Disabling bearer [ 254.968414][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3635'. [ 254.990844][T17179] syzkaller0: entered promiscuous mode [ 254.996443][T17179] syzkaller0: entered allmulticast mode [ 255.006255][T17179] tipc: Enabled bearer , priority 0 [ 255.023024][T17178] tipc: Resetting bearer [ 255.031282][T17178] tipc: Disabling bearer [ 255.084074][T17192] syzkaller0: entered promiscuous mode [ 255.089886][T17192] syzkaller0: entered allmulticast mode [ 255.357368][T17207] netlink: 'syz.7.3646': attribute type 27 has an invalid length. [ 255.460047][T17211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3648'. [ 255.813269][T17219] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3651'. [ 255.939069][T17240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.955475][T17240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.008852][T17252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3661'. [ 256.098921][T17264] tipc: Enabled bearer , priority 0 [ 256.108460][T17262] tipc: Disabling bearer [ 256.376449][T17317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3672'. [ 256.727186][T17395] syzkaller0: entered promiscuous mode [ 256.732814][T17395] syzkaller0: entered allmulticast mode [ 256.741544][T17396] syzkaller0: entered promiscuous mode [ 256.748951][T17396] syzkaller0: entered allmulticast mode [ 256.789112][T17399] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 257.070433][T17428] syzkaller0: entered promiscuous mode [ 257.076857][T17428] syzkaller0: entered allmulticast mode [ 257.086505][T17437] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3704'. [ 257.119387][T17445] syzkaller0: entered promiscuous mode [ 257.125381][T17445] syzkaller0: entered allmulticast mode [ 257.291272][T17468] tipc: Enabled bearer , priority 0 [ 257.308322][T17466] tipc: Disabling bearer [ 257.339407][T17475] syzkaller0: entered promiscuous mode [ 257.345296][T17475] syzkaller0: entered allmulticast mode [ 257.555341][T17499] tipc: Enabled bearer , priority 0 [ 257.566064][T17497] tipc: Disabling bearer [ 257.580533][T17502] syzkaller0: entered promiscuous mode [ 257.586299][T17502] syzkaller0: entered allmulticast mode [ 257.723664][T17516] syzkaller0: entered promiscuous mode [ 257.730749][T17516] syzkaller0: entered allmulticast mode [ 257.839915][T17532] tipc: Enabled bearer , priority 0 [ 257.847631][T17531] tipc: Disabling bearer [ 257.879341][T17538] syzkaller0: entered promiscuous mode [ 257.884992][T17538] syzkaller0: entered allmulticast mode [ 257.976475][T17548] syzkaller0: entered promiscuous mode [ 257.981981][T17548] syzkaller0: entered allmulticast mode [ 258.132061][T17572] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3764'. [ 258.201253][T17579] tipc: Enabled bearer , priority 0 [ 258.226116][T17578] tipc: Disabling bearer [ 258.305240][T17589] syzkaller0: entered promiscuous mode [ 258.310801][T17589] syzkaller0: entered allmulticast mode [ 258.371446][T17594] syzkaller0: entered promiscuous mode [ 258.377341][T17594] syzkaller0: entered allmulticast mode [ 258.748050][T17614] netlink: 'syz.7.3780': attribute type 9 has an invalid length. [ 258.905725][T17625] tipc: Enabled bearer , priority 0 [ 258.913356][T17624] tipc: Disabling bearer [ 259.910966][T17649] netlink: 'syz.1.3796': attribute type 1 has an invalid length. [ 259.919306][T17649] netlink: 'syz.1.3796': attribute type 2 has an invalid length. [ 259.965695][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3800'. [ 260.079004][T17670] syzkaller0: entered promiscuous mode [ 260.097434][T17670] syzkaller0: entered allmulticast mode [ 260.107234][T17670] tipc: Enabled bearer , priority 0 [ 260.115839][T17669] tipc: Resetting bearer [ 260.126144][T17669] tipc: Disabling bearer [ 260.151782][ T28] audit: type=1400 audit(1771126471.887:8960): avc: denied { ioctl } for pid=17673 comm="syz.3.3808" path="socket:[50734]" dev="sockfs" ino=50734 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.237661][T17681] netlink: 17362 bytes leftover after parsing attributes in process `syz.6.3811'. [ 260.261452][T17683] syzkaller0: entered promiscuous mode [ 260.267385][T17683] syzkaller0: entered allmulticast mode [ 260.353516][T17695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.372362][T17695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.469177][T17701] syzkaller0: entered promiscuous mode [ 260.475668][T17701] syzkaller0: entered allmulticast mode [ 260.485407][T17701] tipc: Enabled bearer , priority 0 [ 260.498088][T17700] tipc: Resetting bearer [ 260.499222][T17705] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3823'. [ 260.517839][T17700] tipc: Disabling bearer [ 260.556833][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3825'. [ 260.566237][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3825'. [ 260.641181][T17715] tipc: Enabled bearer , priority 0 [ 260.650458][T17712] tipc: Disabling bearer [ 261.068918][T17760] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3849'. [ 261.221001][T17765] IPv6: pim6reg1: Disabled Multicast RS [ 261.304148][T17781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.324394][T17781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.546291][T17805] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3870'. [ 261.580322][T17810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.601363][T17810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.861507][T17855] netlink: 'syz.6.3879': attribute type 4 has an invalid length. [ 261.876772][T17855] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3879'. [ 262.090473][T17895] syzkaller0: entered promiscuous mode [ 262.096246][T17895] syzkaller0: entered allmulticast mode [ 262.278619][T17927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.287864][T17927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.481885][T17967] tipc: Enabling of bearer rejected, failed to enable media [ 262.564203][T17978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3895'. [ 262.595461][T17991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.625994][T17991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.657269][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3899'. [ 262.674786][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3899'. [ 262.867320][T18028] openvswitch: netlink: Flow key attr not present in new flow. [ 262.881132][T18022] tipc: Enabling of bearer rejected, failed to enable media [ 262.904221][T18031] syzkaller0: entered promiscuous mode [ 262.910762][T18031] syzkaller0: entered allmulticast mode [ 262.955419][T18031] tipc: Enabled bearer , priority 0 [ 262.962746][T18037] syzkaller0: entered promiscuous mode [ 262.968457][T18037] syzkaller0: entered allmulticast mode [ 262.976998][T18030] tipc: Resetting bearer [ 262.991130][T18030] tipc: Disabling bearer [ 263.081181][T18056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.090098][T18056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.119558][T18058] syzkaller0: entered promiscuous mode [ 263.125200][T18058] syzkaller0: entered allmulticast mode [ 263.258603][T18060] tipc: Enabling of bearer rejected, failed to enable media [ 263.273695][T18076] syzkaller0: entered promiscuous mode [ 263.279573][T18076] syzkaller0: entered allmulticast mode [ 263.288155][T18076] tipc: Enabled bearer , priority 0 [ 263.303503][T18075] tipc: Resetting bearer [ 263.311287][T18075] tipc: Disabling bearer [ 263.320687][T18078] syzkaller0: entered promiscuous mode [ 263.326377][T18078] syzkaller0: entered allmulticast mode [ 263.447672][T18090] syzkaller0: entered promiscuous mode [ 263.453248][T18090] syzkaller0: entered allmulticast mode [ 263.505715][T18099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.513487][T18099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.622501][T18105] syzkaller0: entered promiscuous mode [ 263.628140][T18105] syzkaller0: entered allmulticast mode [ 263.635463][T18105] tipc: Enabled bearer , priority 0 [ 263.645728][T18104] tipc: Resetting bearer [ 263.653755][T18104] tipc: Disabling bearer [ 263.709972][T18115] syzkaller0: entered promiscuous mode [ 263.719712][T18115] syzkaller0: entered allmulticast mode [ 263.780660][T18126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.787720][T18123] tipc: Enabling of bearer rejected, failed to enable media [ 263.791402][T18126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.808888][T18123] syzkaller0: entered promiscuous mode [ 263.814496][T18123] syzkaller0: entered allmulticast mode [ 263.900859][T18134] syzkaller0: entered promiscuous mode [ 263.906827][T18136] netlink: 'syz.3.3960': attribute type 1 has an invalid length. [ 263.908268][T18134] syzkaller0: entered allmulticast mode [ 263.932133][T18136] netlink: 'syz.3.3960': attribute type 2 has an invalid length. [ 263.940772][T18134] tipc: Enabled bearer , priority 0 [ 263.948574][T18131] tipc: Resetting bearer [ 263.981857][T18131] tipc: Disabling bearer [ 264.019350][T18143] syzkaller0: entered promiscuous mode [ 264.025758][T18143] syzkaller0: entered allmulticast mode [ 264.032752][T18149] syzkaller0: entered promiscuous mode [ 264.039359][T18149] syzkaller0: entered allmulticast mode [ 264.056408][T18143] tipc: Enabled bearer , priority 0 [ 264.072276][T18142] tipc: Resetting bearer [ 264.080953][T18142] tipc: Disabling bearer [ 264.224976][T18174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.234753][T18174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.407297][T18207] syzkaller0: entered promiscuous mode [ 264.413000][T18207] syzkaller0: entered allmulticast mode [ 264.421178][T18207] tipc: Enabled bearer , priority 0 [ 264.436664][T18206] tipc: Resetting bearer [ 264.459528][T18206] tipc: Disabling bearer [ 264.470341][T18214] syzkaller0: entered promiscuous mode [ 264.476296][T18214] syzkaller0: entered allmulticast mode [ 264.675517][T18250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.689968][T18250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.160756][T18327] tipc: Enabling of bearer rejected, failed to enable media [ 265.308169][T18367] tipc: Enabled bearer , priority 0 [ 265.316570][T18366] tipc: Disabling bearer [ 265.521560][T18402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.539886][T18402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.104829][T18427] __nla_validate_parse: 8 callbacks suppressed [ 266.104849][T18427] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4031'. [ 266.280773][T18449] syzkaller0: entered promiscuous mode [ 266.286648][T18449] syzkaller0: entered allmulticast mode [ 266.295542][T18449] tipc: Enabled bearer , priority 0 [ 266.457544][T18448] tipc: Resetting bearer [ 266.482008][T18448] tipc: Disabling bearer [ 266.552213][T18460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.565424][T18460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.032232][ T28] audit: type=1400 audit(1771126478.767:8961): avc: denied { write } for pid=18517 comm="syz.7.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.199835][T18533] netlink: 'syz.6.4067': attribute type 2 has an invalid length. [ 267.226265][T18533] netlink: 'syz.6.4067': attribute type 1 has an invalid length. [ 267.235383][T18533] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4067'. [ 267.376898][T18544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.387242][T18544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.411445][T18546] geneve0 speed is unknown, defaulting to 1000 [ 267.436286][T18546] geneve0 speed is unknown, defaulting to 1000 [ 267.443907][T18546] geneve0 speed is unknown, defaulting to 1000 [ 267.530073][T18546] infiniband syz2: set active [ 267.535064][ T4240] geneve0 speed is unknown, defaulting to 1000 [ 267.541351][T18546] infiniband syz2: added geneve0 [ 267.557865][T18546] RDS/IB: syz2: added [ 267.563381][T18546] smc: adding ib device syz2 with port count 1 [ 267.569724][T18546] smc: ib device syz2 port 1 has no pnetid [ 267.575904][ T4240] geneve0 speed is unknown, defaulting to 1000 [ 267.582428][T18546] geneve0 speed is unknown, defaulting to 1000 [ 267.705808][T18546] geneve0 speed is unknown, defaulting to 1000 [ 267.794595][T18546] geneve0 speed is unknown, defaulting to 1000 [ 267.856647][T18559] geneve0 speed is unknown, defaulting to 1000 [ 267.895279][T18546] geneve0 speed is unknown, defaulting to 1000 [ 267.981877][T17962] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.994166][T18546] geneve0 speed is unknown, defaulting to 1000 [ 268.060693][T17962] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.087871][T18596] netlink: 'syz.3.4092': attribute type 10 has an invalid length. [ 268.089803][T18546] geneve0 speed is unknown, defaulting to 1000 [ 268.102311][T18559] chnl_net:caif_netlink_parms(): no params data found [ 268.142602][T18601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.151979][T18601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.163296][T17962] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.200962][T18559] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.216651][T18559] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.223865][T18559] bridge_slave_0: entered allmulticast mode [ 268.230929][T18559] bridge_slave_0: entered promiscuous mode [ 268.239833][T17962] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.251217][T18559] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.258548][T18559] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.267449][T18559] bridge_slave_1: entered allmulticast mode [ 268.277605][T18559] bridge_slave_1: entered promiscuous mode [ 268.309727][T18559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.320504][T18559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.346183][T18559] team0: Port device team_slave_0 added [ 268.353038][T18559] team0: Port device team_slave_1 added [ 268.380690][T18559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.387793][T18559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.413969][T18559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.436296][T18559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.443324][T18559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.469680][T18559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.505064][T17962] bridge_slave_1: left allmulticast mode [ 268.511247][T17962] bridge_slave_1: left promiscuous mode [ 268.517224][T17962] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.525992][T17962] bridge_slave_0: left allmulticast mode [ 268.531784][T17962] bridge_slave_0: left promiscuous mode [ 268.537978][T17962] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.787086][T17962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.795857][T17962] bond_slave_0: left promiscuous mode [ 268.802625][T17962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.811850][T17962] bond_slave_1: left promiscuous mode [ 268.818449][T17962] bond0 (unregistering): Released all slaves [ 268.826467][T17962] bond1 (unregistering): Released all slaves [ 268.835413][T17962] bond2 (unregistering): Released all slaves [ 268.850848][T18559] hsr_slave_0: entered promiscuous mode [ 268.857050][T18559] hsr_slave_1: entered promiscuous mode [ 268.862968][T18559] debugfs: 'hsr0' already exists in 'hsr' [ 268.868931][T18559] Cannot create hsr debugfs directory [ 268.911316][T17962] tipc: Left network mode [ 268.958502][T17962] hsr_slave_0: left promiscuous mode [ 268.964140][T17962] hsr_slave_1: left promiscuous mode [ 268.977506][T17962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.004660][T17962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.020074][T17962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.067579][T18659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.077520][T17962] veth0_macvtap: left promiscuous mode [ 269.083187][T17962] veth0_vlan: left promiscuous mode [ 269.094466][T18659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.208043][T17962] team_slave_1 (unregistering): left allmulticast mode [ 269.215416][T17962] team0 (unregistering): Port device team_slave_1 removed [ 269.225556][T17962] team_slave_0 (unregistering): left allmulticast mode [ 269.232963][T17962] team0 (unregistering): Port device team_slave_0 removed [ 269.272602][T18674] lo speed is unknown, defaulting to 1000 [ 269.287564][T18674] lo speed is unknown, defaulting to 1000 [ 269.300165][T18674] lo speed is unknown, defaulting to 1000 [ 269.310435][T18674] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 269.320132][T18674] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.349723][T18674] lo speed is unknown, defaulting to 1000 [ 269.356687][T18674] lo speed is unknown, defaulting to 1000 [ 269.363321][T18674] lo speed is unknown, defaulting to 1000 [ 269.388445][T18674] lo speed is unknown, defaulting to 1000 [ 269.398789][T18685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4119'. [ 269.408391][T18674] lo speed is unknown, defaulting to 1000 [ 269.417657][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'. [ 269.431334][T18674] lo speed is unknown, defaulting to 1000 [ 269.507182][T18702] netlink: 'syz.1.4122': attribute type 2 has an invalid length. [ 269.515348][T18702] netlink: 'syz.1.4122': attribute type 1 has an invalid length. [ 269.523204][T18702] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4122'. [ 269.619104][T18714] syzkaller0: entered promiscuous mode [ 269.629992][T18714] syzkaller0: entered allmulticast mode [ 269.639525][T18714] tipc: Enabled bearer , priority 0 [ 269.680117][T18712] tipc: Resetting bearer [ 269.698985][T18712] tipc: Disabling bearer [ 269.744343][T18730] syzkaller0: entered promiscuous mode [ 269.749931][T18730] syzkaller0: entered allmulticast mode [ 269.776528][T18559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.786732][T18559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.816531][T18559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.836629][T18559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.916682][T18559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.939703][T18559] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.954379][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.961473][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.972795][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.979962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.059958][T18559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.132395][T18770] netlink: 17362 bytes leftover after parsing attributes in process `syz.7.4133'. [ 270.958180][T18782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.967213][T18782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.056687][T18793] syzkaller0: entered promiscuous mode [ 271.062217][T18793] syzkaller0: entered allmulticast mode [ 271.073263][T18559] veth0_vlan: entered promiscuous mode [ 271.083045][T18793] tipc: Enabled bearer , priority 0 [ 271.091144][T18559] veth1_vlan: entered promiscuous mode [ 271.098759][T18792] tipc: Resetting bearer [ 271.129996][T18792] tipc: Disabling bearer [ 271.154434][T18559] veth0_macvtap: entered promiscuous mode [ 271.162330][T18559] veth1_macvtap: entered promiscuous mode [ 271.184527][T18559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.198893][T18559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.212339][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.232978][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.249222][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.265016][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.372709][T18825] netlink: 17454 bytes leftover after parsing attributes in process `syz.6.4152'. [ 271.454350][T18833] syzkaller0: entered promiscuous mode [ 271.460037][T18833] syzkaller0: entered allmulticast mode [ 271.470952][T18833] tipc: Started in network mode [ 271.476008][T18833] tipc: Node identity 76495f53a898, cluster identity 4711 [ 271.483523][T18833] tipc: Enabled bearer , priority 0 [ 271.494671][T18832] tipc: Resetting bearer [ 271.506455][T18832] tipc: Disabling bearer [ 271.568302][T18845] syzkaller0: entered promiscuous mode [ 271.573896][T18845] syzkaller0: entered allmulticast mode [ 271.697574][T18859] netlink: 17454 bytes leftover after parsing attributes in process `syz.7.4168'. [ 271.711439][T18861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.720257][T18861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.934541][T18882] syzkaller0: entered promiscuous mode [ 271.940184][T18882] syzkaller0: entered allmulticast mode [ 272.002307][T18888] netlink: 17454 bytes leftover after parsing attributes in process `syz.1.4181'. [ 272.072345][T18890] syzkaller0: entered promiscuous mode [ 272.080746][T18890] syzkaller0: entered allmulticast mode [ 272.121913][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4183'. [ 272.364777][T18918] netlink: 17394 bytes leftover after parsing attributes in process `syz.7.4195'. [ 272.369717][T18912] syzkaller0: entered promiscuous mode [ 272.401065][T18912] syzkaller0: entered allmulticast mode [ 272.481379][T18923] syzkaller0: entered promiscuous mode [ 272.487427][T18923] syzkaller0: entered allmulticast mode [ 272.512225][T18929] syzkaller0: entered promiscuous mode [ 272.517812][T18929] syzkaller0: entered allmulticast mode [ 272.525965][T18929] tipc: Enabled bearer , priority 0 [ 272.533603][T18928] tipc: Resetting bearer [ 272.551583][T18928] tipc: Disabling bearer [ 272.624781][T18935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.668155][T18935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.743935][ T28] audit: type=1400 audit(1771126484.478:8962): avc: denied { write } for pid=18945 comm="syz.1.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.771621][T18946] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4206'. [ 272.833726][T18954] syzkaller0: entered promiscuous mode [ 272.839831][T18954] syzkaller0: entered allmulticast mode [ 272.892369][T18961] netlink: 17394 bytes leftover after parsing attributes in process `syz.7.4214'. [ 273.161410][T18981] tipc: Enabled bearer , priority 0 [ 273.175518][T18980] tipc: Disabling bearer [ 273.297550][T18997] syzkaller0: entered promiscuous mode [ 273.305429][T18997] syzkaller0: entered allmulticast mode [ 273.471020][T19013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.494152][T19013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.626319][T19019] syzkaller0: entered promiscuous mode [ 273.631975][T19019] syzkaller0: entered allmulticast mode [ 273.639834][T19019] tipc: Enabled bearer , priority 0 [ 273.647629][T19018] tipc: Resetting bearer [ 273.655028][T19018] tipc: Disabling bearer [ 273.784151][T19033] syzkaller0: entered promiscuous mode [ 273.789771][T19033] syzkaller0: entered allmulticast mode [ 273.828938][T19035] syzkaller0: entered promiscuous mode [ 273.834996][T19035] syzkaller0: entered allmulticast mode [ 273.893104][T19040] syzkaller0: entered promiscuous mode [ 273.898801][T19040] syzkaller0: entered allmulticast mode [ 274.496567][T19066] syzkaller0: entered promiscuous mode [ 274.508015][T19066] syzkaller0: entered allmulticast mode [ 275.627244][T19075] syzkaller0: entered promiscuous mode [ 275.636202][T19075] syzkaller0: entered allmulticast mode [ 275.702560][T19090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.725202][T19090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.736816][T19087] syzkaller0: entered promiscuous mode [ 275.742429][T19087] syzkaller0: entered allmulticast mode [ 275.853679][T19108] syzkaller0: entered promiscuous mode [ 275.859656][T19108] syzkaller0: entered allmulticast mode [ 275.866997][T19108] tipc: Enabled bearer , priority 0 [ 275.874165][T19106] tipc: Resetting bearer [ 275.881227][T19106] tipc: Disabling bearer [ 276.076716][T19124] syzkaller0: entered promiscuous mode [ 276.092175][T19124] syzkaller0: entered allmulticast mode [ 276.177781][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 276.294300][T19129] syzkaller0: entered promiscuous mode [ 276.299977][T19129] syzkaller0: entered allmulticast mode [ 276.421100][T19133] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4280'. [ 276.473002][T19138] syzkaller0: entered promiscuous mode [ 276.481648][T19138] syzkaller0: entered allmulticast mode [ 276.490566][T19138] tipc: Enabled bearer , priority 0 [ 276.498427][T19137] tipc: Resetting bearer [ 276.506274][T19137] tipc: Disabling bearer [ 276.583680][T19148] syzkaller0: entered promiscuous mode [ 276.595856][T19148] syzkaller0: entered allmulticast mode [ 276.605064][T19148] tipc: Enabled bearer , priority 0 [ 276.652051][T19154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.655651][T19147] tipc: Resetting bearer [ 276.662104][T19154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.679802][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4291'. [ 276.694331][T19147] tipc: Disabling bearer [ 276.737941][T19153] syzkaller0: entered promiscuous mode [ 276.743477][T19153] syzkaller0: entered allmulticast mode [ 276.778365][T19163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=19163 comm=syz.1.4294 [ 276.837857][T19160] syzkaller0: entered promiscuous mode [ 276.843449][T19160] syzkaller0: entered allmulticast mode [ 276.853327][T19163] sch_tbf: burst 43 is lower than device veth0_to_bridge mtu (1514) ! [ 277.007320][T19190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4306'. [ 277.016717][T19186] delete_channel: no stack [ 277.150117][ T28] audit: type=1400 audit(1771126488.888:8963): avc: denied { name_bind } for pid=19203 comm="syz.2.4312" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 277.328795][T19219] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4318'. [ 277.500796][T19233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.527206][T19233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.574381][T19237] netlink: 'syz.3.4328': attribute type 1 has an invalid length. [ 277.595491][T19237] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4328'. [ 278.295070][T19250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4334'. [ 278.740808][T19256] syzkaller0: entered promiscuous mode [ 278.751641][T19256] syzkaller0: entered allmulticast mode [ 278.777279][T19258] netlink: 17362 bytes leftover after parsing attributes in process `syz.7.4337'. [ 278.855220][T19266] tipc: Enabled bearer , priority 0 [ 278.875067][T19264] tipc: Disabling bearer [ 278.960527][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 279.131936][T19297] syzkaller0: entered promiscuous mode [ 279.137714][T19297] syzkaller0: entered allmulticast mode [ 279.140166][T19298] netlink: 17394 bytes leftover after parsing attributes in process `syz.7.4353'. [ 279.285552][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4361'. [ 279.323579][T19310] tipc: Enabled bearer , priority 0 [ 279.358679][T19309] tipc: Disabling bearer [ 279.708669][T19352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.719268][T19352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.739709][T19353] syzkaller0: entered promiscuous mode [ 279.751047][T19353] syzkaller0: entered allmulticast mode [ 280.174187][T19401] delete_channel: no stack [ 280.188823][T19381] geneve0 speed is unknown, defaulting to 1000 [ 280.201886][T19404] syzkaller0: entered promiscuous mode [ 280.223820][T19404] syzkaller0: entered allmulticast mode [ 280.281665][T19381] lo speed is unknown, defaulting to 1000 [ 280.542602][T19381] chnl_net:caif_netlink_parms(): no params data found [ 280.648414][T19432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.658641][T19432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.684137][T19381] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.691430][T19381] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.698978][T19381] bridge_slave_0: entered allmulticast mode [ 280.705921][T19381] bridge_slave_0: entered promiscuous mode [ 280.713868][T19381] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.721217][T19381] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.729075][T19381] bridge_slave_1: entered allmulticast mode [ 280.735921][T19381] bridge_slave_1: entered promiscuous mode [ 280.761358][T19381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.771808][T19381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.801628][T19381] team0: Port device team_slave_0 added [ 280.815378][T19381] team0: Port device team_slave_1 added [ 280.834683][T19381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.846274][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.872630][T19381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.885599][T19381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.893177][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.920767][T19381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.972597][T19381] hsr_slave_0: entered promiscuous mode [ 280.979384][T19381] hsr_slave_1: entered promiscuous mode [ 280.985490][T19381] debugfs: 'hsr0' already exists in 'hsr' [ 280.997596][T19381] Cannot create hsr debugfs directory [ 281.698197][T19483] netlink: 'syz.1.4430': attribute type 2 has an invalid length. [ 281.734478][T19483] netlink: 'syz.1.4430': attribute type 1 has an invalid length. [ 281.769902][T19381] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.800142][T19489] __nla_validate_parse: 11 callbacks suppressed [ 281.800157][T19489] netlink: 17394 bytes leftover after parsing attributes in process `syz.3.4432'. [ 281.823873][T19381] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.042852][T19381] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.342130][T19381] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.424689][T19525] netlink: 17394 bytes leftover after parsing attributes in process `syz.7.4443'. [ 282.453190][T19381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.465914][T19381] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.487154][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.494311][T17381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.532434][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.539550][T17381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.566277][T19537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4448'. [ 282.594372][T19381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.605275][T19381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.721724][T19381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.851635][T19381] veth0_vlan: entered promiscuous mode [ 282.862920][T19381] veth1_vlan: entered promiscuous mode [ 282.882415][T19381] veth0_macvtap: entered promiscuous mode [ 282.902852][T19381] veth1_macvtap: entered promiscuous mode [ 282.916405][T19381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.929129][T19381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.941425][T17962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.961192][T17962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.988046][T17962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.996814][T17962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.060128][T19564] netlink: 'syz.2.4392': attribute type 1 has an invalid length. [ 283.122627][T19572] netlink: 17394 bytes leftover after parsing attributes in process `syz.3.4455'. [ 283.201592][ T8874] syz_tun (unregistering): left allmulticast mode [ 283.213666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.256126][T17374] ================================================================== [ 283.264232][T17374] BUG: KCSAN: data-race in copy_process / free_pid [ 283.270750][T17374] [ 283.273089][T17374] read-write to 0xffffffff86c61f68 of 4 bytes by task 19381 on cpu 1: [ 283.281246][T17374] free_pid+0xb9/0x1d0 [ 283.285335][T17374] free_pids+0x54/0xb0 [ 283.289422][T17374] release_task+0x9a7/0xb60 [ 283.293944][T17374] wait_consider_task+0x1160/0x1670 [ 283.299180][T17374] __do_wait+0xf9/0x510 [ 283.303356][T17374] do_wait+0xb6/0x260 [ 283.307355][T17374] kernel_wait4+0x19f/0x210 [ 283.311885][T17374] __x64_sys_wait4+0x91/0x120 [ 283.316582][T17374] x64_sys_call+0x2aee/0x3020 [ 283.321281][T17374] do_syscall_64+0x12c/0x370 [ 283.325906][T17374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.331808][T17374] [ 283.334144][T17374] read to 0xffffffff86c61f68 of 4 bytes by task 17374 on cpu 0: [ 283.341869][T17374] copy_process+0x1895/0x20c0 [ 283.346565][T17374] kernel_clone+0x16b/0x5d0 [ 283.351089][T17374] user_mode_thread+0x9c/0xd0 [ 283.355791][T17374] call_usermodehelper_exec_work+0x7a/0x160 [ 283.361809][T17374] process_scheduled_works+0x4de/0x9e0 [ 283.367286][T17374] worker_thread+0x581/0x770 [ 283.371888][T17374] kthread+0x22a/0x280 [ 283.375966][T17374] ret_from_fork+0x150/0x360 [ 283.380581][T17374] ret_from_fork_asm+0x1a/0x30 [ 283.385358][T17374] [ 283.387685][T17374] value changed: 0x80000134 -> 0x80000132 [ 283.393404][T17374] [ 283.395733][T17374] Reported by Kernel Concurrency Sanitizer on: [ 283.401898][T17374] CPU: 0 UID: 0 PID: 17374 Comm: kworker/u8:11 Tainted: G W syzkaller #0 PREEMPT(full) [ 283.413211][T17374] Tainted: [W]=WARN [ 283.417016][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.427087][T17374] Workqueue: events_unbound call_usermodehelper_exec_work [ 283.434238][T17374] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 283.496901][ T28] audit: type=1400 audit(1771126495.238:8964): avc: denied { write } for pid=3302 comm="syz-executor" path="pipe:[2518]" dev="pipefs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 283.534338][T19576] syzkaller0: entered promiscuous mode [ 283.539934][T19576] syzkaller0: entered allmulticast mode [ 283.574362][T19576] tipc: Started in network mode [ 283.579325][T19576] tipc: Node identity 5af77f74793b, cluster identity 4711 [ 283.587279][T19576] tipc: Enabled bearer , priority 0 [ 283.603879][T19574] tipc: Resetting bearer [ 283.615785][T19574] tipc: Disabling bearer [ 283.853752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.866309][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.927004][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.996368][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.037224][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.093058][ T12] bridge_slave_1: left allmulticast mode [ 284.098817][ T12] bridge_slave_1: left promiscuous mode [ 284.104925][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.112573][ T12] bridge_slave_0: left allmulticast mode [ 284.118418][ T12] bridge_slave_0: left promiscuous mode [ 284.124313][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.215908][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.225857][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.235285][ T12] bond0 (unregistering): Released all slaves [ 284.284952][ T12] tipc: Left network mode [ 284.315181][ T12] hsr_slave_0: left promiscuous mode [ 284.320848][ T12] hsr_slave_1: left promiscuous mode [ 284.327072][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.335880][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.343544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.350952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.362269][ T12] veth1_macvtap: left promiscuous mode [ 284.367990][ T12] veth0_macvtap: left promiscuous mode [ 284.376075][ T12] veth1_vlan: left promiscuous mode [ 284.381401][ T12] veth0_vlan: left promiscuous mode [ 284.449748][ T12] team0 (unregistering): Port device team_slave_1 removed [ 284.460448][ T12] team0 (unregistering): Port device team_slave_0 removed [ 284.836976][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.886457][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.935935][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.996038][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.054920][ T12] bridge_slave_1: left allmulticast mode [ 285.060641][ T12] bridge_slave_1: left promiscuous mode [ 285.066881][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.074692][ T12] bridge_slave_0: left allmulticast mode [ 285.080498][ T12] bridge_slave_0: left promiscuous mode [ 285.086281][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.148717][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 285.164250][ T1345] smc: removing ib device syz2 [ 285.265511][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.274346][ T12] bond_slave_0: left promiscuous mode [ 285.281104][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.289928][ T12] bond_slave_1: left promiscuous mode [ 285.296392][ T12] bond0 (unregistering): Released all slaves [ 285.304353][ T12] bond1 (unregistering): Released all slaves [ 285.312585][ T12] bond2 (unregistering): Released all slaves [ 285.324046][ T3614] geneve0 speed is unknown, defaulting to 1000 [ 285.330343][ T3614] syz2: Port: 1 Link DOWN [ 285.330615][ T4240] geneve0 speed is unknown, defaulting to 1000 [ 285.493603][ T12] tipc: Left network mode [ 285.500962][ T12] hsr_slave_0: left promiscuous mode [ 285.506988][ T12] hsr_slave_1: left promiscuous mode [ 285.512794][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.520871][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.528398][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.541371][ T12] veth1_macvtap: left promiscuous mode [ 285.546939][ T12] veth0_macvtap: left promiscuous mode [ 285.552433][ T12] veth1_vlan: left allmulticast mode [ 285.557907][ T12] veth1_vlan: left promiscuous mode [ 285.563151][ T12] veth0_vlan: left promiscuous mode [ 285.611118][ T12] team0 (unregistering): Port device macvlan1 removed [ 285.642857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.653015][ T12] team0 (unregistering): Port device team_slave_0 removed [ 285.955907][ T12] IPVS: stop unused estimator thread 0... [ 286.807930][T17374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.867151][T17374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.896656][T17374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.956592][T17374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.038800][T17374] bridge_slave_1: left allmulticast mode [ 287.044686][T17374] bridge_slave_1: left promiscuous mode [ 287.050420][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.063962][T17374] bridge_slave_0: left allmulticast mode [ 287.069688][T17374] bridge_slave_0: left promiscuous mode [ 287.075655][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.166899][T17374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.177382][T17374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.187147][T17374] bond0 (unregistering): Released all slaves [ 287.224782][T17374] tipc: Left network mode [ 287.232721][T17374] hsr_slave_0: left promiscuous mode [ 287.239484][T17374] hsr_slave_1: left promiscuous mode [ 287.245408][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.252846][T17374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.261331][T17374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.268911][T17374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.281351][T17374] veth1_macvtap: left promiscuous mode [ 287.287000][T17374] veth0_macvtap: left promiscuous mode [ 287.292581][T17374] veth1_vlan: left promiscuous mode [ 287.298082][T17374] veth0_vlan: left promiscuous mode [ 287.374954][T17374] team0 (unregistering): Port device team_slave_1 removed [ 287.384381][T17374] team0 (unregistering): Port device team_slave_0 removed