last executing test programs: 3m16.345671183s ago: executing program 32 (id=731): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="28033e000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 2m20.580666811s ago: executing program 33 (id=1359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000020000000200000002000000002000000020029aa711168283a5465b13415b6500a00000000000c0200000000000000010000"], 0x0, 0x3a}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r2, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, @generic={0x1, "a4e853b4e3e8b798d53ccd2900b5"}, @isdn={0x22, 0x5, 0x7f, 0x7, 0xf3}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)='tunl0\x00', 0x4, 0x0, 0x9}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x6, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) close(r8) write(r6, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r9, 0x0) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r12 = socket$packet(0x11, 0x2, 0x300) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) 1m57.388085892s ago: executing program 34 (id=1782): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x8080) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000680), 0x0, 0x16, 0xfffffff9) recvfrom$inet(r2, 0x0, 0x0, 0x2042, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9feb010018000000000000003400"], 0x0, 0x4e, 0x0, 0x3}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000040)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000100000000000", @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES16=r1], 0x24, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0xff, 0xfffffffd, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8, 0x0, 0x1, 0x6}}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x10}, {0x4, 0x10}, {0xa, 0xc}}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x4008084) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000002c0)={0x7, r6, 'id1\x00'}) flock(0xffffffffffffffff, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf2505000000340001802c0002006261746164763000000000000000000014000200766574683100000000000000000000000800030000000000"], 0x48}, 0x1, 0x0, 0x0, 0x42}, 0x20000004) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 1m17.825028421s ago: executing program 35 (id=2046): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400005, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x20000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x59, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x24, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc5, 0x1, 0x1, 0x0, 0x0, 0x3, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(0x0, 0x0, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 56.622090219s ago: executing program 36 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000001640)=""/129, 0x81}, {0x0}], 0x5, 0x3, 0x8) recvmmsg(r3, &(0x7f00000027c0)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/19, 0x13}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/211, 0xd3}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000840)=""/165, 0xa5}, {&(0x7f0000000900)=""/118, 0x76}, {&(0x7f0000000a80)=""/107, 0x6b}], 0x5, &(0x7f0000001380)=""/195, 0xc3}, 0x1000}, {{&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/74, 0x4a}, {&(0x7f0000000c40)=""/123, 0x7b}, {&(0x7f0000000d00)=""/148, 0x94}], 0x3, &(0x7f0000000e00)=""/194, 0xc2}, 0x9}, {{&(0x7f0000000f00)=@nfc_llcp, 0x80, &(0x7f0000002700)=[{&(0x7f0000000f80)=""/223, 0xdf}, {&(0x7f0000001080)=""/202, 0xca}, {&(0x7f0000001180)=""/16, 0x10}, {&(0x7f00000011c0)=""/254, 0xfe}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x6, &(0x7f0000002780)=""/35, 0x23}, 0x1}], 0x4, 0x0, 0x0) 54.28740644s ago: executing program 37 (id=2264): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000, 0x0, 0x0, 0x7df3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000735500000a28000000000a0101000000005e4b000900010073797a300000000008150240000000032c000000030a01030000e6ff00000000020000000900010073797a3000003814a9c672be748e89d500000900030073797a3200000000140000001100010000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8080) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0xd) ptrace$pokeuser(0x6, r3, 0x358, 0x74ee) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5b, 0x40000003) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001"], 0x78}}, 0x0) 53.713001819s ago: executing program 38 (id=2266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x5c}}, 0x0) 42.88205251s ago: executing program 39 (id=2307): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 38.154670265s ago: executing program 2 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[], 0x20}}, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000200)=""/165, 0xa5}, {0x0}], 0x2) 38.022365892s ago: executing program 2 (id=2347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 38.015358953s ago: executing program 40 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x16, 0x3, 0x4, 0x3}]}}}]}}]}, 0x5c}}, 0x110) 37.970624155s ago: executing program 2 (id=2350): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/180, 0xb4}], 0x1}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000002, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4851}, 0x4000800) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 37.850828341s ago: executing program 2 (id=2352): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$eJzs3c9rHFUcAPDv7Cb9GZuotdraarSKwR9Jk/6wBw8qCoIKgh7qMSZprd020kRoS9AoUs8F7+JR8OjJmxdRD+IfoOBRCkWD0FQUIrM7k2R/Jdsm6TbJ5wPbfW/2zcx7M+9l37y3Mw1g0+pN/0kiuiLi14jorkSrE/RW3mZnpkZuzEyNJDE39+afSTnd9ZmpkTxpvt7OLNJXiCh8msTzSf1+Jy5eOjNcKo2dz+IDk2ffH5i4eOmZ02eHT42dGjs3dPz4kcODzx4bOlq1XoNN1dneYFlaruv7Phzfv/eVt6+8PnLiyjs/fp1ua8+ByudZOba0sPmIG3W5eDViui5Zb3rU/porq/3s8ZZ2tH7ctSicdLQxI9yUYkSkp6uz3P67oxgLJ687Xv6krZkD1lT63bS1+cfTc8AGlkS7cwC0R/5Fn17/5q/47zZ1Pu4A115YuOifnZkamZ0fz+iIQra8cw333xsRJ6b/+SJ9Rc14CgDAWij3bZ6u6f+VFWJP+b0y17Erm0PpiYi7I+KeiLg3InZHxH0R5bT3R8QDlZXnulvcf29NvL7/U7jaMM+rJO3/Pbeo7zc7M1U9HFaInmL5rTLH0ROdycnTpbFD2THpi86taXxwiX1891LzaaXF/b/0leahJgNXOyoL5jcyOjw5vFoH4drHEfs6qsqfHf9kfiYgrQF7I2LfzW16Vx44/eRX+5slalT+vC+8rFWYZ5r7MuKJyvmfjpry55Im85NpHT82dHRgW5TGDg3ktaLeT79cfqPZ/ldU/lWQnv8d1fW/JkX330llvrYzSqWx8xM3v4/Lv33W9Jpm+fLP1/95af3fkrxVnrP++d3KsgvDk5PnByO2JK+V41lj2Rbp8qGFdS9k8Tx9Wv6+g43qf6H8Ny6y8/9gRKSV+EDEroci4uEs749ExKMRcXCJ8v/w4mPvLVH+JJJo6/kfjcbtP9OTLJ6vv4VA8cz33zabt2/t/B8pz673ZUvKf/+W0WoGV3j4AAAAYF0oRERXJIX+Sri3KwqF/v7Kb/h3x45CaXxi8qmT4x+cG63cI9ATnYV8pKt70XjoYJL//r0SH8rGivPPD2fjxp8Xt5fj/SPjpdE2lx02u53V7T/y9p/6o9ju3AFrrvk82hK3BgAbQm37L7QpH8Dt18rvaFwLwMbUoP0veobGv9W3CtU/5wJYxzoahIDNoVGr/6gmXtf/b/SULWDdqW//vzd4ZB2wEen1w+al/cPmpf3DprSS+/pvPZDfLLBk4jyLDdNsa/kO/80SyB8Ps5b72h4LS6JQDnRF07V2tOto5GPVSybubmWDEfHNivNTXIVypS2meklxuQKuMNDqf4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZ/s/AAD//16M4Cg=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 36.599447765s ago: executing program 2 (id=2361): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 34.242929107s ago: executing program 2 (id=2370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 34.239437638s ago: executing program 41 (id=2370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 30.279312083s ago: executing program 7 (id=2404): openat$null(0xffffffffffffff9c, 0x0, 0x8280, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r1, 0x0, &(0x7f00000005c0)=""/104, 0x4}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000600000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r6, &(0x7f00000005c0)}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f0000000400)={r4, 0x0, 0x8, 0x0, 0x3, 0x8, [0x8, 0xfc, 0x0, 0x0, 0x5, 0x6]}) r8 = socket$netlink(0x10, 0x3, 0x9) r9 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0xa0002010}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x10000000) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000680)=@buf) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) fallocate(r10, 0x22, 0x6, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) keyctl$chown(0x4, r3, 0x0, 0x0) 29.284829134s ago: executing program 7 (id=2411): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 28.818628258s ago: executing program 7 (id=2417): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8081}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x24040884) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) writev(r6, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e", 0x1a}], 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r6, &(0x7f00000090c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000300)=""/124, 0x7c}], 0x2}, 0xc69}], 0x1, 0x20, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={0xfffffffffffffd8f, r1, 0x1, 0x14, 0x15, {{0x2}, {@void, @val={0x0, 0x99, {0x9, 0xa}}}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 27.957265083s ago: executing program 1 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000001100000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0xfd}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0xbfef, 0x5, {{0xf, 0x4, 0x0, 0x6, 0x3c, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @loopback, {[@end, @ssrr={0x89, 0x7, 0x5f, [@multicast1]}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x48, [@remote, @remote, @rand_addr=0x64010101, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r9, 0x0, 0x0, 0x1) fcntl$setpipe(r8, 0x407, 0x176) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c7b0bb44cc80c1ee91727b6d89b83903e65a51e6531f44c4e8baa34f958226c499d1df3a6eb8d8df9ad2f8beb744d18a6bb9dcf086849ebffde04f4d0f07fb", @ANYRES64=0x0], 0x20) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) socket$inet6_sctp(0xa, 0x1, 0x84) 27.943613724s ago: executing program 7 (id=2420): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r2, 0x86ffffffffffffff, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 27.259763989s ago: executing program 7 (id=2425): clock_gettime(0x6, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0x2, 0x2}]}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000090c000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x10000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) close(0xffffffffffffffff) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xf, 0x5, 0x9, 0x3, 0xb2, "3596d806006e242e5e6c31c267a000", 0xa, 0x200005}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) 27.131523666s ago: executing program 1 (id=2429): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f0000000540)="17000000020001004003be8c5e687a8a6a003200020100ecff3f00000003a96c6b06169da9c0f8d94d5bbb6a880a00243c5197b29f9368bdd6c8db933e7a2fdfff0a175e0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000003000000000000000080c457681f009cee4a0a003dff010000b7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfcc580000000000", 0xa8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2ec}}, 0x0) r6 = fsmount(r3, 0x0, 0x5) fchdir(r6) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) readv(r7, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/184, 0xb8}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0x2, 0x3}, {0xf, 0x2}, {0x10, 0x1}, {0xc, 0x3}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x30]}}, 0x0, 0x65, 0x0, 0x3}, 0x28) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x62f7, &(0x7f00000010c0)={0x0, 0x3e54, 0x4000, 0x0, 0x162}, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYRES8=r10, @ANYRES64=r8, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000302000000000000000000007ba32c0fdde4d4a1bc94a4e5323679495bf722e422684f2130c949c8a9c68722d3db359136980a1ec9ed"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) 26.687892969s ago: executing program 1 (id=2431): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 26.645826581s ago: executing program 1 (id=2432): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r2, 0x86ffffffffffffff, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 25.541510298s ago: executing program 7 (id=2440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 25.486298341s ago: executing program 42 (id=2440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 25.221783435s ago: executing program 1 (id=2442): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x40000) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000240)=""/239, 0xef, 0x2, 0x0, 0x0) 23.75832237s ago: executing program 1 (id=2461): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f, 0xfffffffe}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.718551412s ago: executing program 43 (id=2461): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f, 0xfffffffe}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.489199494s ago: executing program 9 (id=2552): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x7, 0x101}, 0x214, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000960010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 12.418592107s ago: executing program 8 (id=2556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r3, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 12.369619241s ago: executing program 9 (id=2557): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd7a, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)="59740f34ff", 0x5}], 0x1) r4 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20820, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r7, 0x0, 0x4000010) syz_clone(0x0, &(0x7f0000000540)="ea9f9fef7008be9caa4230658e0f0cccad32ec921e770d152cc2110df2169e3f25afb722e56fc5ec6da59dc0922b33d6e4618df4ad9f45e1e4c5a43742985c9ef6a05f0bd993f709f3bc337b874c1bcc63053bc96584e0f5d7ced9c410a50fa8648b5f96a943684c3ef11f33f0006b9cb80473a9e006c174b8963c5ba53d748df42a95a704fe0000000000000000", 0x8e, 0x0, 0x0, 0x0) r9 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r9, 0x4008240b, &(0x7f00000013c0)) r10 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$rds(r4, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 12.366702101s ago: executing program 8 (id=2558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100030008000100010000000c0004800500038880ff00000300020001000000040008"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 12.267682826s ago: executing program 8 (id=2560): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x20, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8002088f}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.267229046s ago: executing program 9 (id=2561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000001340000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c0004"], 0xec}}, 0x0) 12.1798401s ago: executing program 8 (id=2562): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 12.17855983s ago: executing program 9 (id=2564): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 10.029293821s ago: executing program 8 (id=2585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000ffe00fdffffff0700000f", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.963441485s ago: executing program 9 (id=2586): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@data_journal}, {@usrjquota}, {}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000002c0)=""/211, &(0x7f0000000400)=0xd3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001040000020000bb9f46183c009c6400000000000000", @ANYRES32=0x0, @ANYBLOB="03800000014002003000128009000100697069700000000020000280060012004e200000060011004e200000040013000800140000000000"], 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 9.045207183s ago: executing program 8 (id=2608): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0xe9, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207ff, 0x0, @perf_bp={0x0, 0x6}, 0x102020, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000002000000e}, 0x0, 0xffffffffffffffff, r3, 0x2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (async) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r6, 0x5452, 0x0) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0xfffffd}, 0x1c) 8.974314856s ago: executing program 44 (id=2608): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0xe9, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207ff, 0x0, @perf_bp={0x0, 0x6}, 0x102020, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000002000000e}, 0x0, 0xffffffffffffffff, r3, 0x2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (async) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r6, 0x5452, 0x0) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0xfffffd}, 0x1c) 8.968685796s ago: executing program 9 (id=2612): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 8.924978758s ago: executing program 45 (id=2612): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 2.33079627s ago: executing program 0 (id=2654): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$eJzs3c9rHFUcAPDv7Cb9GZuotdraarSKwR9Jk/6wBw8qCoIKgh7qMSZprd020kRoS9AoUs8F7+JR8OjJmxdRD+IfoOBRCkWD0FQUIrM7k2R/Jdsm6TbJ5wPbfW/2zcx7M+9l37y3Mw1g0+pN/0kiuiLi14jorkSrE/RW3mZnpkZuzEyNJDE39+afSTnd9ZmpkTxpvt7OLNJXiCh8msTzSf1+Jy5eOjNcKo2dz+IDk2ffH5i4eOmZ02eHT42dGjs3dPz4kcODzx4bOlq1XoNN1dneYFlaruv7Phzfv/eVt6+8PnLiyjs/fp1ua8+ByudZOba0sPmIG3W5eDViui5Zb3rU/porq/3s8ZZ2tH7ctSicdLQxI9yUYkSkp6uz3P67oxgLJ687Xv6krZkD1lT63bS1+cfTc8AGlkS7cwC0R/5Fn17/5q/47zZ1Pu4A115YuOifnZkamZ0fz+iIQra8cw333xsRJ6b/+SJ9Rc14CgDAWij3bZ6u6f+VFWJP+b0y17Erm0PpiYi7I+KeiLg3InZHxH0R5bT3R8QDlZXnulvcf29NvL7/U7jaMM+rJO3/Pbeo7zc7M1U9HFaInmL5rTLH0ROdycnTpbFD2THpi86taXxwiX1891LzaaXF/b/0leahJgNXOyoL5jcyOjw5vFoH4drHEfs6qsqfHf9kfiYgrQF7I2LfzW16Vx44/eRX+5slalT+vC+8rFWYZ5r7MuKJyvmfjpry55Im85NpHT82dHRgW5TGDg3ktaLeT79cfqPZ/ldU/lWQnv8d1fW/JkX330llvrYzSqWx8xM3v4/Lv33W9Jpm+fLP1/95af3fkrxVnrP++d3KsgvDk5PnByO2JK+V41lj2Rbp8qGFdS9k8Tx9Wv6+g43qf6H8Ny6y8/9gRKSV+EDEroci4uEs749ExKMRcXCJ8v/w4mPvLVH+JJJo6/kfjcbtP9OTLJ6vv4VA8cz33zabt2/t/B8pz673ZUvKf/+W0WoGV3j4AAAAYF0oRERXJIX+Sri3KwqF/v7Kb/h3x45CaXxi8qmT4x+cG63cI9ATnYV8pKt70XjoYJL//r0SH8rGivPPD2fjxp8Xt5fj/SPjpdE2lx02u53V7T/y9p/6o9ju3AFrrvk82hK3BgAbQm37L7QpH8Dt18rvaFwLwMbUoP0veobGv9W3CtU/5wJYxzoahIDNoVGr/6gmXtf/b/SULWDdqW//vzd4ZB2wEen1w+al/cPmpf3DprSS+/pvPZDfLLBk4jyLDdNsa/kO/80SyB8Ps5b72h4LS6JQDnRF07V2tOto5GPVSybubmWDEfHNivNTXIVypS2meklxuQKuMNDqf4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZ/s/AAD//16M4Cg=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 1.993446877s ago: executing program 0 (id=2660): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40000002, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4851}, 0x4000800) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.906502732s ago: executing program 6 (id=2662): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c3, &(0x7f00000005c0)="$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") 1.780346449s ago: executing program 6 (id=2665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.733598191s ago: executing program 0 (id=2667): io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x85, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080046"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.708920922s ago: executing program 6 (id=2669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x40, 0x20, 0xbfef, 0x5, {{0x8, 0x4, 0x0, 0x6, 0x20, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @loopback, {[@end, @ssrr={0x89, 0x7, 0x5f, [@multicast1]}, @end]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', r3, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r6, 0x407, 0x176) vmsplice(r7, 0x0, 0x0, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r4, r4, 0x2f, 0x8, 0x0, @void, @value=r4}, 0x20) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xaa99, @mcast1, 0x4}, 0x1c) 1.657707195s ago: executing program 0 (id=2670): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_pidfd_open(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r0, @ANYBLOB="8000f2040a000200aaaaaaaaaa1b"], 0x30}, 0x1, 0x1000000}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) listen(r2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x8) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={0x0, 0x700}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.314846813s ago: executing program 4 (id=2675): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x840000000002, 0x3, 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000030000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c000280080001"], 0xec}}, 0x4000004) 1.314594413s ago: executing program 5 (id=2676): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40000002, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4851}, 0x4000800) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.295166424s ago: executing program 0 (id=2677): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.268181405s ago: executing program 0 (id=2678): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x5, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x2, 0x4}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r0, 0x603, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) 1.249583126s ago: executing program 5 (id=2679): io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x85, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080046"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.235136627s ago: executing program 3 (id=2610): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x1, 0x1, 0x40) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000540)={0x7, 0x7, 0x4}, &(0x7f0000000600)=0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r2, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000500)=0x100000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe800000ffffffffffffff97000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 1.122938022s ago: executing program 5 (id=2680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0xf00}, 0x4000010) 1.122403942s ago: executing program 5 (id=2681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aac1", 0x2}], 0x1}, 0x4) 1.122245422s ago: executing program 3 (id=2682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000fc01000000000000000000000000000100000000000000000000ffffc4c723d30000ecdf000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000000000000000000000001f0000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0004002c0000000000000060000200636263286165732900"], 0x19c}}, 0x44050) 991.892299ms ago: executing program 6 (id=2684): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000005000000020000000700000001000000", @ANYRES32, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000819fd68b034d0000000000000000000000000200e4000000000000e3ff1600000000000000"], 0x50) 947.695042ms ago: executing program 6 (id=2685): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="12", 0x1}], 0x1, 0x0, 0x0, 0x4810}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002020000000000000002000005000000000000003201"], &(0x7f0000001f40)=""/4089, 0x4a, 0xff9, 0xa}, 0x28) 887.128545ms ago: executing program 6 (id=2686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4c22, 0x8, @loopback, 0x2}, r2}}, 0x30) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x1db2}, {&(0x7f0000001480)="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", 0x1001}], 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0x80000001) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x1f4a, &(0x7f0000000180)={0x0, 0x7d8a, 0x13290, 0x82, 0x3b3}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) io_uring_enter(r5, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 886.116265ms ago: executing program 5 (id=2687): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x200, 0x3}, 0x102802, 0x80003, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setfsuid(0xee00) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000015c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 818.573618ms ago: executing program 3 (id=2688): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 805.031788ms ago: executing program 3 (id=2689): r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000002c0)=""/1, &(0x7f0000002180)=0x1) 749.573582ms ago: executing program 3 (id=2690): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8081}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x24040884) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) writev(r6, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e", 0x1a}], 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r6, &(0x7f00000090c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000300)=""/124, 0x7c}], 0x2}, 0xc69}], 0x1, 0x20, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000140)={'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x98, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004}, 0x40c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 595.01141ms ago: executing program 4 (id=2691): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001200000300000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 594.5276ms ago: executing program 4 (id=2692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3000}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}]}]}, 0x1bc}}, 0x0) 581.37349ms ago: executing program 3 (id=2693): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xc5, &(0x7f0000000340)=""/197, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 488.243986ms ago: executing program 5 (id=2694): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mq_unlink(&(0x7f0000000080)='..\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x1, @perf_bp={0x0}, 0xd234, 0x2, 0x8, 0x7, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x480, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x24005, 0xb, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xb) ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x104}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/200, 0xc8, 0x1, &(0x7f00000005c0)=""/154, 0x9a}, &(0x7f00000006c0)=0x40) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x10003, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) 418.505759ms ago: executing program 4 (id=2695): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008000400010000fe", 0x24) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) socket$inet_tcp(0x2, 0x1, 0x0) 125.440604ms ago: executing program 4 (id=2696): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x800000, 0x53}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) r2 = syz_io_uring_setup(0x6893, &(0x7f00000004c0)={0x0, 0x751a, 0x800, 0x3, 0x13a}, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000003c0)={0x0, 0xc}, 0x1) getpriority(0x2, r1) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x6, 0x0) pipe(&(0x7f0000000040)) (async) r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x40007db, 0x5}, 0x0, 0xffff, 0x8, 0x8, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000180)={0x2, 0x0, 0x1}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003ec0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x60) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xfe, 0x51b, &(0x7f0000001000)="$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") r8 = inotify_init1(0x0) inotify_add_watch(r8, 0x0, 0xa4000021) close(r8) 0s ago: executing program 4 (id=2697): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async, rerun: 32) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async, rerun: 64) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x800, 0x2000) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x40) (async) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 32) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async, rerun: 32) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xe564, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) ppoll(&(0x7f00000001c0)=[{r0, 0x2500}, {r1}, {0xffffffffffffffff, 0x100}, {r3, 0x40c0}, {r4, 0x20}, {r5, 0x8000}, {r6, 0xf090}, {r7, 0x2080}], 0x8, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x8]}, 0x8) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x307298, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000001040)=ANY=[], 0x110) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async) sendto$inet6(r1, &(0x7f00000003c0)="58ecd327a8ae2501471592bf5345901a0eed4dd2c30b9414350284055bdb7bf2cf2350a048121556004e4bdb407964619c6bea015098fb00d8aa4cfd5a77c820769f0fbc29e99dcded6fbfab79ce8adc3f76a8b85b526f0784670d72041719f0676805f887ad504cf10010", 0x6b, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000029834ddc10000108feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b0000000000"], 0x28}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r9) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYRESOCT=r2], 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004800) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) kernel console output (not intermixed with test programs): tering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.680898][ T4658] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.707791][T11774] chnl_net:caif_netlink_parms(): no params data found [ 269.751428][ T4658] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.774737][ T4658] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.911760][T11773] netlink: 'syz.1.2263': attribute type 21 has an invalid length. [ 269.922046][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 270.016684][T11774] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.023967][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.032801][T11774] bridge_slave_0: entered allmulticast mode [ 270.041196][T11774] bridge_slave_0: entered promiscuous mode [ 270.049673][T11774] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.096785][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.107997][T11774] bridge_slave_1: entered allmulticast mode [ 270.124796][T11774] bridge_slave_1: entered promiscuous mode [ 270.145055][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.157314][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.179513][T11774] team0: Port device team_slave_0 added [ 270.187668][ T3048] 8021q: adding VLAN 0 to HW filter on device eth16 [ 270.202159][T11774] team0: Port device team_slave_1 added [ 270.230005][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.237802][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.264925][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.277520][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.284662][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.315285][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.346096][T11774] hsr_slave_0: entered promiscuous mode [ 270.352542][T11774] hsr_slave_1: entered promiscuous mode [ 270.358774][T11774] debugfs: 'hsr0' already exists in 'hsr' [ 270.364558][T11774] Cannot create hsr debugfs directory [ 270.451462][T11689] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 270.462016][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.487832][T11689] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 270.505063][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 270.533120][T11689] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 270.549478][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 270.562497][T11689] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 270.572414][T11689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.581682][T11797] chnl_net:caif_netlink_parms(): no params data found [ 270.665297][ T4658] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.761167][ T4658] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.784852][T11689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.800559][T11797] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.812241][T11797] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.827916][T11797] bridge_slave_0: entered allmulticast mode [ 270.844730][T11797] bridge_slave_0: entered promiscuous mode [ 270.874543][ T4658] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.901063][T11797] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.912554][T11797] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.928880][T11797] bridge_slave_1: entered allmulticast mode [ 270.940177][T11797] bridge_slave_1: entered promiscuous mode [ 270.963855][ T3048] 8021q: adding VLAN 0 to HW filter on device eth17 [ 270.978623][ T4658] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.000034][T11689] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.016965][T11797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.030508][T11797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.042972][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.050061][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.073801][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.080912][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.093850][T11797] team0: Port device team_slave_0 added [ 271.102672][T11797] team0: Port device team_slave_1 added [ 271.128201][T11689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.139862][T11689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.192499][T11797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.202285][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.230900][T11797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.249142][ T4658] bridge_slave_1: left allmulticast mode [ 271.257441][ T4658] bridge_slave_1: left promiscuous mode [ 271.267118][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.275749][ T4658] bridge_slave_0: left allmulticast mode [ 271.281748][ T4658] bridge_slave_0: left promiscuous mode [ 271.290508][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.328766][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2272'. [ 271.365123][T11886] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2272'. [ 271.380912][ T4658] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 271.390684][ T4658] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 271.399330][ T4658] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - d6:ff:0c:06:ab:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 271.517831][ T4658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.529198][ T4658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.539798][ T4658] bond0 (unregistering): Released all slaves [ 271.547914][ T4658] bond1 (unregistering): (slave veth3): Releasing backup interface [ 271.557104][ T4658] bond1 (unregistering): Released all slaves [ 271.638495][ T4658] bond0 (unregistering): Released all slaves [ 271.646404][T11797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.653546][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.680354][T11797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.724303][ T4658] hsr_slave_0: left promiscuous mode [ 271.734773][ T4658] hsr_slave_1: left promiscuous mode [ 271.740922][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.751594][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.761114][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.776340][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.786350][ T4658] hsr_slave_0: left promiscuous mode [ 271.792207][ T4658] hsr_slave_1: left promiscuous mode [ 271.816271][ T4658] veth1_macvtap: left promiscuous mode [ 271.821999][ T4658] veth0_macvtap: left promiscuous mode [ 271.824979][ T28] audit: type=1400 audit(527.793:1376): avc: denied { create } for pid=11892 comm="syz.0.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 271.828079][ T4658] veth1_vlan: left promiscuous mode [ 271.855687][ T4658] veth0_vlan: left promiscuous mode [ 271.861635][ T4658] veth1_macvtap: left promiscuous mode [ 271.867356][ T4658] veth0_macvtap: left promiscuous mode [ 271.872882][ T4658] veth1_vlan: left promiscuous mode [ 271.879562][ T4658] veth0_vlan: left promiscuous mode [ 272.013223][T11900] netlink: 'syz.1.2273': attribute type 21 has an invalid length. [ 272.021642][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 272.943270][ T4658] team0 (unregistering): Port device team_slave_1 removed [ 272.953390][ T4658] team0 (unregistering): Port device team_slave_0 removed [ 273.727843][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2276'. [ 273.831126][T11797] hsr_slave_0: entered promiscuous mode [ 273.837987][T11797] hsr_slave_1: entered promiscuous mode [ 273.844596][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 273.898535][ T28] audit: type=1326 audit(529.873:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.0.2277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbe568cdd9 code=0x0 [ 273.954857][ T28] audit: type=1400 audit(529.923:1378): avc: denied { setopt } for pid=11907 comm="syz.0.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.983562][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.113234][ T3048] 8021q: adding VLAN 0 to HW filter on device eth18 [ 274.257954][T11957] netlink: 'syz.1.2279': attribute type 21 has an invalid length. [ 274.267521][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'. [ 274.368429][T11689] veth0_vlan: entered promiscuous mode [ 274.398076][T11689] veth1_vlan: entered promiscuous mode [ 274.431214][T11689] veth0_macvtap: entered promiscuous mode [ 274.460444][T11689] veth1_macvtap: entered promiscuous mode [ 274.482770][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.500882][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.518341][ T2293] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.583534][ T2293] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.622286][ T2293] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.701583][ T2293] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.823950][T11797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.092524][T11970] loop9: detected capacity change from 0 to 2048 [ 275.137650][T11970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.159807][T11797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.200973][T11797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.350047][T11797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.358498][T11797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.374926][T11797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.414679][T11797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.434280][T11797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.764880][T11999] netlink: 'syz.0.2281': attribute type 21 has an invalid length. [ 275.773351][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 275.835824][T11774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.880749][T11774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.962322][T11774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.015361][T11774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.178171][T11774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.265451][T11774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.273308][T11774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.296946][T11774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.371574][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.395289][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.409452][T11689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.430992][T11774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.441690][T11774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.489220][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.554430][T11774] veth0_vlan: entered promiscuous mode [ 276.562254][T11774] veth1_vlan: entered promiscuous mode [ 276.575051][T11774] veth0_macvtap: entered promiscuous mode [ 276.582581][T11774] veth1_macvtap: entered promiscuous mode [ 276.593189][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.602063][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.721119][T11797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.740204][T12032] loop3: detected capacity change from 0 to 512 [ 276.755391][T11797] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.776207][T12032] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2285: inode has both inline data and extents flags [ 276.811003][T12032] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 276.811489][T12032] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2285: couldn't read orphan inode 15 (err -117) [ 276.820774][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 276.820800][ C0] EXT4-fs (loop3): initial error at time 532: ext4_orphan_get:1397: inode 15 [ 276.820832][ C0] EXT4-fs (loop3): last error at time 532: ext4_orphan_get:1397: inode 15 [ 276.862131][T11797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.873624][T11797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.906008][T12032] loop3: lost filesystem error report for type 5 error -117 [ 276.906565][T12032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.943428][T11797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.969943][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.977170][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.047170][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2284'. [ 277.058406][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.065483][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.207274][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.214460][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.223380][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.230689][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.252084][ T2293] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.266214][T12044] loop3: detected capacity change from 512 to 64 [ 277.271374][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2284'. [ 277.300432][ T2293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.333220][T11774] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 277.334390][ T2293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.388071][ T2293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.403756][ T2293] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.414247][ T2293] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.424286][ T2293] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.440192][ T2293] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.458983][T11774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.071060][T12071] VFS: Mount too revealing [ 278.698936][T11797] veth0_vlan: entered promiscuous mode [ 278.719091][T11797] veth1_vlan: entered promiscuous mode [ 278.755121][T11797] veth0_macvtap: entered promiscuous mode [ 278.770605][T11797] veth1_macvtap: entered promiscuous mode [ 278.795583][T11797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.817540][T11797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.841947][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.970067][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.996286][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.030097][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.134296][T12096] loop4: detected capacity change from 0 to 512 [ 279.160404][ T3048] 8021q: adding VLAN 0 to HW filter on device eth19 [ 279.182052][T12096] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2267: inode has both inline data and extents flags [ 279.263629][T12096] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 279.263792][T12096] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2267: couldn't read orphan inode 15 (err -117) [ 279.272995][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 279.273014][ C1] EXT4-fs (loop4): initial error at time 535: ext4_orphan_get:1397: inode 15 [ 279.273054][ C1] EXT4-fs (loop4): last error at time 535: ext4_orphan_get:1397: inode 15 [ 279.319488][T12096] loop4: lost filesystem error report for type 5 error -117 [ 279.326315][T12096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.496117][T12114] loop4: detected capacity change from 512 to 64 [ 279.502720][T12096] bio_check_eod: 26 callbacks suppressed [ 279.502736][T12096] syz.4.2267: attempt to access beyond end of device [ 279.502736][T12096] loop4: rw=2051, sector=432, nr_sectors = 2 limit=64 [ 279.530346][T12124] syz.4.2267: attempt to access beyond end of device [ 279.530346][T12124] loop4: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 279.548640][T12096] EXT4-fs (loop4): discard request in group:0 block:212 count:4 failed with -5 [ 279.563690][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'. [ 279.583726][T12124] buffer_io_error: 1 callbacks suppressed [ 279.583745][T12124] Buffer I/O error on dev loop4, logical block 36, lost sync page write [ 279.583823][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'. [ 279.601080][T12096] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: IO failure [ 279.625660][T12124] EXT4-fs error (device loop4): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.4.2267: IO error syncing itable block [ 279.647036][T12096] syz.4.2267: attempt to access beyond end of device [ 279.647036][T12096] loop4: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 279.662869][T12124] EXT4-fs error (device loop4) in add_dirent_to_buf:2155: IO failure [ 279.697422][T12124] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.2267: Error while async write back metadata [ 279.724040][ T2293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.726224][T12096] Buffer I/O error on dev loop4, logical block 37, lost sync page write [ 279.792804][T12096] EXT4-fs error (device loop4): ext4_free_data:978: inode #18: block 37: comm syz.4.2267: IO error syncing itable block [ 279.827288][T12096] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.2267: Error while async write back metadata [ 279.866779][ T3048] 8021q: adding VLAN 0 to HW filter on device eth4 [ 279.875700][T12096] syz.4.2267: attempt to access beyond end of device [ 279.875700][T12096] loop4: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 279.884159][T12144] 9p: Bad value for 'wfdno' [ 279.910067][T12096] Buffer I/O error on dev loop4, logical block 37, lost sync page write [ 279.926195][T12096] EXT4-fs error (device loop4): ext4_splice_branch:472: inode #18: block 37: comm syz.4.2267: IO error syncing itable block [ 279.956002][T12096] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.2267: Error while async write back metadata [ 280.012825][T12096] syz.4.2267: attempt to access beyond end of device [ 280.012825][T12096] loop4: rw=2051, sector=426, nr_sectors = 2 limit=64 [ 280.046322][T12096] EXT4-fs (loop4): discard request in group:0 block:212 count:1 failed with -5 [ 280.100019][T12096] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: IO failure [ 280.119876][T12096] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 18: block 213:freeing already freed block (bit 212); block bitmap corrupt. [ 280.135357][T12096] EXT4-fs (loop4): pa ffff8881075d5850: logic 92, phys. 213, len 19 [ 280.178301][T12096] syz.4.2267: attempt to access beyond end of device [ 280.178301][T12096] loop4: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 280.314853][T12096] Buffer I/O error on dev loop4, logical block 37, lost sync page write [ 280.354279][T12096] syz.4.2267: attempt to access beyond end of device [ 280.354279][T12096] loop4: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 280.368627][T12145] chnl_net:caif_netlink_parms(): no params data found [ 280.382935][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 280.395224][T12096] buffer_io_error: 78 callbacks suppressed [ 280.395237][T12096] Buffer I/O error on device loop4, logical block 41 [ 280.408165][T12096] Buffer I/O error on device loop4, logical block 42 [ 280.414840][T12096] Buffer I/O error on device loop4, logical block 43 [ 280.422015][T12096] Buffer I/O error on device loop4, logical block 44 [ 280.432540][T12096] syz.4.2267: attempt to access beyond end of device [ 280.432540][T12096] loop4: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 280.498295][T12185] netlink: 'syz.1.2312': attribute type 21 has an invalid length. [ 280.507205][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 280.839335][ T3048] 8021q: adding VLAN 0 to HW filter on device eth21 [ 280.928693][T12145] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.953077][T12145] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.978561][T12145] bridge_slave_0: entered allmulticast mode [ 281.003558][T12145] bridge_slave_0: entered promiscuous mode [ 281.028337][T12145] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.200934][T12145] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.213305][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2316'. [ 281.222832][T12145] bridge_slave_1: entered allmulticast mode [ 281.230458][T12145] bridge_slave_1: entered promiscuous mode [ 281.240321][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2316'. [ 281.289905][T12145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.401980][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 281.413396][T12096] Buffer I/O error on device loop4, logical block 49 [ 281.420301][T12096] Buffer I/O error on device loop4, logical block 50 [ 281.427118][T12096] Buffer I/O error on device loop4, logical block 51 [ 281.433991][T12096] Buffer I/O error on device loop4, logical block 52 [ 281.441553][T12096] syz.4.2267: attempt to access beyond end of device [ 281.441553][T12096] loop4: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 281.452750][T12145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.478354][T12145] team0: Port device team_slave_0 added [ 281.485048][T12145] team0: Port device team_slave_1 added [ 281.502357][T12145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.514618][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.550082][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 281.563891][T12145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.580836][T12096] Buffer I/O error on device loop4, logical block 57 [ 281.587634][T12096] Buffer I/O error on device loop4, logical block 58 [ 281.612939][T12145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.626651][T12096] syz.4.2267: attempt to access beyond end of device [ 281.626651][T12096] loop4: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 281.653440][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.696443][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 281.760503][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 281.792665][T12145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.827398][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 281.885755][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 281.960856][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 281.979772][T12145] hsr_slave_0: entered promiscuous mode [ 282.001545][T12145] hsr_slave_1: entered promiscuous mode [ 282.017593][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 282.029277][T12096] EXT4-fs warning (device loop4): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 282.049247][T12145] debugfs: 'hsr0' already exists in 'hsr' [ 282.055772][T11797] Buffer I/O error on dev loop4, logical block 36, lost sync page write [ 282.084232][T12145] Cannot create hsr debugfs directory [ 282.119093][ T3048] 8021q: adding VLAN 0 to HW filter on device eth22 [ 282.174070][T12220] bridge_slave_0: left allmulticast mode [ 282.180979][T12220] bridge_slave_0: left promiscuous mode [ 282.187622][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.199296][T12220] bridge_slave_1: left allmulticast mode [ 282.205211][T12220] bridge_slave_1: left promiscuous mode [ 282.211463][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.222017][T12220] bond0: (slave bond_slave_0): Releasing backup interface [ 282.235321][T12220] bond0: (slave bond_slave_1): Releasing backup interface [ 282.248493][T12220] team0: Port device team_slave_0 removed [ 282.259453][T12220] team0: Port device team_slave_1 removed [ 282.267349][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.274785][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.284038][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.293593][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.303588][T12220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.336902][T12224] team0: Mode changed to "loadbalance" [ 282.414422][ T28] audit: type=1400 audit(538.383:1379): avc: denied { setopt } for pid=12236 comm="syz.9.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.439547][T12145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.532417][T12145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.583253][ T3048] 8021q: adding VLAN 0 to HW filter on device eth20 [ 282.601294][T12145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.681660][T12145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.711366][T12261] loop9: detected capacity change from 0 to 256 [ 282.777705][T12145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.801943][T12145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.860438][T12145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.903243][T12145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.912378][T12145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.927460][T12145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.946704][T12145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.964583][T12145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.039606][T12290] netlink: 'syz.9.2337': attribute type 21 has an invalid length. [ 283.048164][T12290] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.057126][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2337'. [ 283.148488][ T3048] 8021q: adding VLAN 0 to HW filter on device eth23 [ 283.367928][T12145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.440180][T12145] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.499264][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.506431][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.613109][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.620351][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.895416][T12145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.133668][T12145] veth0_vlan: entered promiscuous mode [ 284.152688][T12145] veth1_vlan: entered promiscuous mode [ 284.191335][T12145] veth0_macvtap: entered promiscuous mode [ 284.208106][T12145] veth1_macvtap: entered promiscuous mode [ 284.234666][T12145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.257652][T12145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.279861][ T3613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.315144][ T3613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.348507][ T3613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.374998][ T3613] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.446936][ T2293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.553322][T11797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.613164][ T2293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.691761][ T2293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.785725][T12404] loop2: detected capacity change from 0 to 512 [ 284.837064][T12404] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2352: inode has both inline data and extents flags [ 284.910778][T12415] loop9: detected capacity change from 0 to 512 [ 284.938083][T12404] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 284.938328][T12404] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2352: couldn't read orphan inode 15 (err -117) [ 284.938357][T12404] loop2: lost filesystem error report for type 5 error -117 [ 284.939029][T12404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.987852][T12419] netlink: 'syz.1.2356': attribute type 29 has an invalid length. [ 285.014407][T12423] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2356'. [ 285.105431][ T2293] bridge_slave_1: left allmulticast mode [ 285.111293][T12424] loop2: detected capacity change from 512 to 64 [ 285.113039][T12426] bio_check_eod: 20 callbacks suppressed [ 285.113055][T12426] syz.2.2352: attempt to access beyond end of device [ 285.113055][T12426] loop2: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 285.121094][T12404] syz.2.2352: attempt to access beyond end of device [ 285.121094][T12404] loop2: rw=2051, sector=312, nr_sectors = 2 limit=64 [ 285.123807][T12426] Buffer I/O error on dev loop2, logical block 36, lost sync page write [ 285.152606][ T2293] bridge_slave_1: left promiscuous mode [ 285.167819][T12404] EXT4-fs (loop2): discard request in group:0 block:152 count:4 failed with -5 [ 285.186548][T12415] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 285.220900][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.222626][T12426] EXT4-fs error (device loop2): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.2.2352: IO error syncing itable block [ 285.243673][ T2293] bridge_slave_0: left allmulticast mode [ 285.249417][ T2293] bridge_slave_0: left promiscuous mode [ 285.255173][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.267251][T12404] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.2352: Error while async write back metadata [ 285.271963][T12426] EXT4-fs error (device loop2) in add_dirent_to_buf:2155: IO failure [ 285.303818][T12415] EXT4-fs (loop9): 1 truncate cleaned up [ 285.305885][T12404] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: IO failure [ 285.341823][T12404] syz.2.2352: attempt to access beyond end of device [ 285.341823][T12404] loop2: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 285.357662][T12415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.360115][T12404] Buffer I/O error on dev loop2, logical block 37, lost sync page write [ 285.384622][T12404] EXT4-fs error (device loop2): ext4_free_data:978: inode #18: block 37: comm syz.2.2352: IO error syncing itable block [ 285.397809][T12404] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.2352: Error while async write back metadata [ 285.433228][T12404] syz.2.2352: attempt to access beyond end of device [ 285.433228][T12404] loop2: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 285.448057][T12404] Buffer I/O error on dev loop2, logical block 37, lost sync page write [ 285.458064][T12404] EXT4-fs error (device loop2): ext4_splice_branch:472: inode #18: block 37: comm syz.2.2352: IO error syncing itable block [ 285.471705][T12404] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.2352: Error while async write back metadata [ 285.486124][T12404] syz.2.2352: attempt to access beyond end of device [ 285.486124][T12404] loop2: rw=2051, sector=306, nr_sectors = 2 limit=64 [ 285.504123][ T2293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.513336][T12404] EXT4-fs (loop2): discard request in group:0 block:152 count:1 failed with -5 [ 285.513385][T12404] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: IO failure [ 285.513718][T12404] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 18: block 153:freeing already freed block (bit 152); block bitmap corrupt. [ 285.545672][T12404] EXT4-fs (loop2): pa ffff8881075d5770: logic 32, phys. 129, len 32 [ 285.554218][T12404] syz.2.2352: attempt to access beyond end of device [ 285.554218][T12404] loop2: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 285.568821][T12404] Buffer I/O error on dev loop2, logical block 37, lost sync page write [ 285.569116][ T2293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.578386][T12404] syz.2.2352: attempt to access beyond end of device [ 285.578386][T12404] loop2: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 285.586529][T12438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.603547][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 285.606969][T12438] IPv6: NLM_F_CREATE should be set when creating new route [ 285.629544][ T2293] bond0 (unregistering): Released all slaves [ 285.635256][T12404] buffer_io_error: 82 callbacks suppressed [ 285.635273][T12404] Buffer I/O error on device loop2, logical block 41 [ 285.648403][T12404] Buffer I/O error on device loop2, logical block 42 [ 285.655078][T12404] Buffer I/O error on device loop2, logical block 43 [ 285.661772][T12404] Buffer I/O error on device loop2, logical block 44 [ 285.669862][T12404] syz.2.2352: attempt to access beyond end of device [ 285.669862][T12404] loop2: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 285.683537][T12422] netlink: 'syz.1.2356': attribute type 29 has an invalid length. [ 285.683632][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 285.705565][T12404] Buffer I/O error on device loop2, logical block 49 [ 285.712310][T12404] Buffer I/O error on device loop2, logical block 50 [ 285.719229][T12404] Buffer I/O error on device loop2, logical block 51 [ 285.726173][T12404] Buffer I/O error on device loop2, logical block 52 [ 285.735659][T12404] syz.2.2352: attempt to access beyond end of device [ 285.735659][T12404] loop2: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 285.772617][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 285.789142][ T2293] hsr_slave_0: left promiscuous mode [ 285.792306][T12404] Buffer I/O error on device loop2, logical block 57 [ 285.801836][T12404] Buffer I/O error on device loop2, logical block 58 [ 285.809465][ T2293] hsr_slave_1: left promiscuous mode [ 285.822679][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.832888][T12404] syz.2.2352: attempt to access beyond end of device [ 285.832888][T12404] loop2: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 285.835979][ T2293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.875561][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 285.888946][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.897896][T11689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.899584][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 285.911424][ T2293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.951750][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 285.965061][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 285.977941][ T2293] veth1_macvtap: left promiscuous mode [ 285.978251][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 285.983516][ T2293] veth0_macvtap: left promiscuous mode [ 285.983567][ T2293] veth1_vlan: left promiscuous mode [ 285.995328][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 286.012296][ T2293] veth0_vlan: left promiscuous mode [ 286.019284][T12404] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 286.044990][T12145] Buffer I/O error on dev loop2, logical block 36, lost sync page write [ 286.115096][ T2293] team0 (unregistering): Port device team_slave_1 removed [ 286.125679][ T2293] team0 (unregistering): Port device team_slave_0 removed [ 286.198225][T12447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.215757][T12452] team0: No ports can be present during mode change [ 286.391175][T12388] chnl_net:caif_netlink_parms(): no params data found [ 286.450713][T12388] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.458844][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.468814][T12388] bridge_slave_0: entered allmulticast mode [ 286.475800][T12388] bridge_slave_0: entered promiscuous mode [ 286.491205][T12388] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.499080][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.507043][T12388] bridge_slave_1: entered allmulticast mode [ 286.513638][T12388] bridge_slave_1: entered promiscuous mode [ 286.532303][T12388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.548062][T12388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.575739][T12388] team0: Port device team_slave_0 added [ 286.589574][T12388] team0: Port device team_slave_1 added [ 286.644967][T12388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.665121][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.720620][T12388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.839118][T12388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.851114][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.876247][T12145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.880664][T12388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.570724][T12519] VFS: Mount too revealing [ 287.869057][T12388] hsr_slave_0: entered promiscuous mode [ 287.875307][T12388] hsr_slave_1: entered promiscuous mode [ 287.881445][T12388] debugfs: 'hsr0' already exists in 'hsr' [ 287.887347][T12388] Cannot create hsr debugfs directory [ 288.598247][ T2293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.933467][T12557] netlink: 'syz.9.2377': attribute type 21 has an invalid length. [ 288.946320][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2377'. [ 289.079089][T12526] chnl_net:caif_netlink_parms(): no params data found [ 289.175452][T12526] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.185869][T12526] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.198761][T12526] bridge_slave_0: entered allmulticast mode [ 289.205724][T12526] bridge_slave_0: entered promiscuous mode [ 289.226306][T12526] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.234005][T12526] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.242134][T12526] bridge_slave_1: entered allmulticast mode [ 289.250427][T12526] bridge_slave_1: entered promiscuous mode [ 289.261622][T12388] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 289.275285][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.287290][T12388] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 289.298012][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.320238][T12388] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 289.336478][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.344668][T12388] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 289.360495][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.370497][T12599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'. [ 289.391417][ T2293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.414142][T12526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.438075][T12526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.450485][ T2293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.480818][T12526] team0: Port device team_slave_0 added [ 289.489118][T12526] team0: Port device team_slave_1 added [ 289.537520][ T2293] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.568338][T12526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.577564][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.658486][T12526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.676501][T12526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.685235][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.712404][T12526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.817342][T12526] hsr_slave_0: entered promiscuous mode [ 289.831400][T12526] hsr_slave_1: entered promiscuous mode [ 289.846369][T12526] debugfs: 'hsr0' already exists in 'hsr' [ 289.853739][T12526] Cannot create hsr debugfs directory [ 289.934056][ T2293] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.995739][T12388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.024472][ T2293] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.071366][T12388] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.090003][ T2293] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.106826][T12626] loop1: detected capacity change from 0 to 512 [ 290.129306][T12626] EXT4-fs: inline encryption not supported [ 290.147754][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.154933][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.178032][T12626] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.2390: corrupted in-inode xattr: e_value size too large [ 290.197958][ T2293] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.218499][T12626] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.224438][T12626] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2390: couldn't read orphan inode 15 (err -117) [ 290.231521][T12621] loop9: detected capacity change from 0 to 512 [ 290.233666][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 290.233684][ C0] EXT4-fs (loop1): initial error at time 546: ext4_iget_extra_inode:5128: inode 15 [ 290.233714][ C0] EXT4-fs (loop1): last error at time 546: ext4_iget_extra_inode:5128: inode 15 [ 290.250700][T12626] loop1: lost filesystem error report for type 5 error -117 [ 290.261235][T12388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.261334][T12388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.371965][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.377295][T12626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.379208][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.445547][T12626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2390'. [ 290.461459][T12621] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 290.484675][T12388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.503857][T12621] EXT4-fs error (device loop9): ext4_get_journal_inode:5896: inode #32: comm syz.9.2388: iget: special inode unallocated [ 290.527530][T12621] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 290.534888][ T2293] bridge_slave_1: left allmulticast mode [ 290.535966][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 290.544549][ T2293] bridge_slave_1: left promiscuous mode [ 290.549678][ C1] EXT4-fs (loop9): initial error at time 546: ext4_get_journal_inode:5896 [ 290.556688][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.561713][ C1] : inode 32 [ 290.561726][ C1] EXT4-fs (loop9): last error at time 546: ext4_get_journal_inode:5896 [ 290.578915][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.580478][ C1] : inode 32 [ 290.604108][ T2293] bridge_slave_0: left allmulticast mode [ 290.612323][T12621] EXT4-fs (loop9): no journal found [ 290.618164][ T2293] bridge_slave_0: left promiscuous mode [ 290.618331][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.628349][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'. [ 290.651620][ T2293] bridge_slave_1: left allmulticast mode [ 290.654636][T12621] EXT4-fs (loop9): can't get journal size [ 290.657399][ T2293] bridge_slave_1: left promiscuous mode [ 290.657543][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.690611][ T2293] bridge_slave_0: left allmulticast mode [ 290.696450][ T2293] bridge_slave_0: left promiscuous mode [ 290.702253][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.702824][T12621] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 290.734853][T12621] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.2388: iget: special inode unallocated [ 290.754629][T12621] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 290.755462][T12621] EXT4-fs (loop9): failed to initialize system zone (-117) [ 290.785768][T12621] EXT4-fs (loop9): mount failed [ 290.871491][T12621] Cannot find set identified by id 0 to match [ 290.959899][ T2293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.976657][ T2293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.986828][ T2293] bond0 (unregistering): Released all slaves [ 291.088501][ T2293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.098987][ T2293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.109160][ T2293] bond0 (unregistering): Released all slaves [ 291.141571][T12641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 291.409230][T12388] veth0_vlan: entered promiscuous mode [ 291.422975][T12388] veth1_vlan: entered promiscuous mode [ 291.455272][T12388] veth0_macvtap: entered promiscuous mode [ 291.465473][T12388] veth1_macvtap: entered promiscuous mode [ 291.483557][T12388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.504601][T12388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.519176][ T4658] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.602293][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2397'. [ 291.664374][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2397'. [ 291.730697][ T4658] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.783673][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2397'. [ 291.795121][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2397'. [ 291.843303][ T4658] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.915334][ T4658] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.981799][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2399'. [ 291.997173][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2400'. [ 292.029823][ T4658] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.067446][ T4658] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.118432][ T4658] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.170165][ T2293] hsr_slave_0: left promiscuous mode [ 292.209643][ T2293] hsr_slave_1: left promiscuous mode [ 292.234894][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.263811][ T2293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.292517][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.329018][ T2293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.363067][ T2293] hsr_slave_0: left promiscuous mode [ 292.395745][ T2293] hsr_slave_1: left promiscuous mode [ 292.434649][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.479364][ T2293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.529992][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.564283][ T2293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.647699][ T2293] veth1_macvtap: left promiscuous mode [ 292.661548][ T2293] veth0_macvtap: left promiscuous mode [ 292.699370][ T2293] veth1_vlan: left promiscuous mode [ 292.714576][ T2293] veth0_vlan: left promiscuous mode [ 292.751490][ T2293] veth1_macvtap: left promiscuous mode [ 292.766027][ T2293] veth0_macvtap: left promiscuous mode [ 292.778442][ T2293] veth1_vlan: left promiscuous mode [ 292.796110][ T2293] veth0_vlan: left promiscuous mode [ 292.937353][T12680] loop9: detected capacity change from 0 to 512 [ 292.953419][T12680] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 292.966949][T12680] EXT4-fs error (device loop9): ext4_get_journal_inode:5896: inode #32: comm syz.9.2401: iget: special inode unallocated [ 292.988069][T12680] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 292.988281][T12680] EXT4-fs (loop9): no journal found [ 293.002804][T12680] EXT4-fs (loop9): can't get journal size [ 293.008971][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 293.009041][ C0] EXT4-fs (loop9): initial error at time 548: ext4_get_journal_inode:5896: inode 32 [ 293.009120][ C0] EXT4-fs (loop9): last error at time 548: ext4_get_journal_inode:5896: inode 32 [ 293.074982][T12680] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 293.088504][ T2293] team0 (unregistering): Port device team_slave_1 removed [ 293.103980][ T2293] team0 (unregistering): Port device team_slave_0 removed [ 293.113429][T12680] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.2401: iget: special inode unallocated [ 293.133492][T12680] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 293.135154][T12680] EXT4-fs (loop9): failed to initialize system zone (-117) [ 293.165078][T12680] EXT4-fs (loop9): mount failed [ 293.228289][T12680] Cannot find set identified by id 0 to match [ 293.241077][ T2293] team0 (unregistering): Port device team_slave_1 removed [ 293.269444][ T2293] team0 (unregistering): Port device team_slave_0 removed [ 293.302039][ T4658] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.312834][T12734] netlink: 'syz.1.2408': attribute type 11 has an invalid length. [ 293.345890][T12734] netlink: 'syz.1.2408': attribute type 11 has an invalid length. [ 293.405624][T12744] syzkaller0: entered promiscuous mode [ 293.411352][T12744] syzkaller0: entered allmulticast mode [ 293.622673][T12526] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 293.650113][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.628667][T12526] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 294.638966][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.648564][T12526] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 294.659816][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.668343][T12526] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 294.754794][T12795] loop7: detected capacity change from 0 to 512 [ 294.808011][T12795] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.2420: inode has both inline data and extents flags [ 294.836896][T12795] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.837039][T12795] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.2420: couldn't read orphan inode 15 (err -117) [ 294.846247][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 294.846264][ C1] EXT4-fs (loop7): initial error at time 550: ext4_orphan_get:1397: inode 15 [ 294.846311][ C1] EXT4-fs (loop7): last error at time 550: ext4_orphan_get:1397: inode 15 [ 294.989228][T12795] loop7: lost filesystem error report for type 5 error -117 [ 294.989649][T12795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.305588][T12526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.336701][T12805] loop7: detected capacity change from 512 to 64 [ 295.355258][T12526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.375252][T12388] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 295.393851][T12526] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.421354][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.428537][ T4671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.455191][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.462428][ T4671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.472973][T12388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.504410][T12827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.561191][T12827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.713242][T12526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.022020][T12883] loop1: detected capacity change from 0 to 512 [ 296.047183][T12883] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2432: inode has both inline data and extents flags [ 296.081622][T12883] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 296.081949][T12883] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2432: couldn't read orphan inode 15 (err -117) [ 296.091223][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 296.091238][ C1] EXT4-fs (loop1): initial error at time 552: ext4_orphan_get:1397: inode 15 [ 296.091263][ C1] EXT4-fs (loop1): last error at time 552: ext4_orphan_get:1397: inode 15 [ 296.135587][T12883] loop1: lost filesystem error report for type 5 error -117 [ 296.152474][T12883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.163738][T12526] veth0_vlan: entered promiscuous mode [ 296.270111][T12526] veth1_vlan: entered promiscuous mode [ 296.306260][T12896] loop1: detected capacity change from 512 to 64 [ 296.312936][T12883] bio_check_eod: 11 callbacks suppressed [ 296.312956][T12883] syz.1.2432: attempt to access beyond end of device [ 296.312956][T12883] loop1: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 296.337612][T12896] syz.1.2432: attempt to access beyond end of device [ 296.337612][T12896] loop1: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 296.354875][T12526] veth0_macvtap: entered promiscuous mode [ 296.360934][T12883] Buffer I/O error on dev loop1, logical block 37, lost sync page write [ 296.381311][T12526] veth1_macvtap: entered promiscuous mode [ 296.390443][T12896] Buffer I/O error on dev loop1, logical block 36, lost sync page write [ 296.391318][T12883] EXT4-fs error (device loop1): ext4_splice_branch:472: inode #18: block 37: comm syz.1.2432: IO error syncing itable block [ 296.419621][T12526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.427749][T12896] EXT4-fs error (device loop1): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.1.2432: IO error syncing itable block [ 296.452681][T12526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.471745][T12896] EXT4-fs error (device loop1) in add_dirent_to_buf:2155: IO failure [ 296.484132][T12883] EXT4-fs error (device loop1): ext4_check_bdev_write_error:227: comm syz.1.2432: Error while async write back metadata [ 296.490023][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.514283][T12900] syz.1.2432: attempt to access beyond end of device [ 296.514283][T12900] loop1: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 296.533989][T12883] syz.1.2432: attempt to access beyond end of device [ 296.533989][T12883] loop1: rw=2051, sector=416, nr_sectors = 2 limit=64 [ 296.542167][T12900] Buffer I/O error on dev loop1, logical block 36, lost sync page write [ 296.558932][T12883] EXT4-fs (loop1): discard request in group:0 block:207 count:1 failed with -5 [ 296.570993][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.575328][T12883] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: IO failure [ 296.589466][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.600808][T12900] EXT4-fs error (device loop1): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.1.2432: IO error syncing itable block [ 296.615751][T12883] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 18: block 208:freeing already freed block (bit 207); block bitmap corrupt. [ 296.631738][T12883] EXT4-fs (loop1): pa ffff8881075d5770: logic 64, phys. 205, len 27 [ 296.633220][T12900] EXT4-fs error (device loop1) in add_dirent_to_buf:2155: IO failure [ 296.640405][T12883] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5459: group 0, free 24, pa_free 23 [ 296.650028][T12900] EXT4-fs error (device loop1): ext4_check_bdev_write_error:227: comm syz.1.2432: Error while async write back metadata [ 296.671328][T12883] syz.1.2432: attempt to access beyond end of device [ 296.671328][T12883] loop1: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 296.685103][T12883] Buffer I/O error on dev loop1, logical block 37, lost sync page write [ 296.696429][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.703591][T12883] syz.1.2432: attempt to access beyond end of device [ 296.703591][T12883] loop1: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 296.722068][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 296.734445][T12883] buffer_io_error: 46 callbacks suppressed [ 296.734458][T12883] Buffer I/O error on device loop1, logical block 41 [ 296.747308][T12883] Buffer I/O error on device loop1, logical block 42 [ 296.754033][T12883] Buffer I/O error on device loop1, logical block 43 [ 296.760893][T12883] Buffer I/O error on device loop1, logical block 44 [ 296.768148][T12922] loop9: detected capacity change from 0 to 512 [ 296.795242][T12883] syz.1.2432: attempt to access beyond end of device [ 296.795242][T12883] loop1: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 296.815106][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 296.827913][T12922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.856176][T12883] Buffer I/O error on device loop1, logical block 49 [ 296.863104][T12883] Buffer I/O error on device loop1, logical block 50 [ 296.869869][T12883] Buffer I/O error on device loop1, logical block 51 [ 296.876539][T12883] Buffer I/O error on device loop1, logical block 52 [ 296.920507][T11689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.930243][T12883] syz.1.2432: attempt to access beyond end of device [ 296.930243][T12883] loop1: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 296.976133][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 297.000949][T12883] Buffer I/O error on device loop1, logical block 57 [ 297.007693][T12883] Buffer I/O error on device loop1, logical block 58 [ 297.034755][T12883] syz.1.2432: attempt to access beyond end of device [ 297.034755][T12883] loop1: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 297.074511][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 297.115479][ T4671] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.136243][T12883] syz.1.2432: attempt to access beyond end of device [ 297.136243][T12883] loop1: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 297.150229][ T4671] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.160775][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 297.172162][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 297.236041][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 297.271236][ T4671] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.282239][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 297.302948][ T4671] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.315858][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 297.339901][T12883] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 297.380639][ T4671] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.418766][ T3320] Buffer I/O error on dev loop1, logical block 36, lost sync page write [ 297.446320][ T4671] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.530342][T10083] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.640875][ T4671] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.673698][ T4671] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.872371][T13001] __nla_validate_parse: 3 callbacks suppressed [ 297.872386][T13001] netlink: 480 bytes leftover after parsing attributes in process `syz.8.2446'. [ 298.047669][ T4671] bridge_slave_1: left allmulticast mode [ 298.061467][ T4671] bridge_slave_1: left promiscuous mode [ 298.093862][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.135850][ T4671] bridge_slave_0: left allmulticast mode [ 298.157497][ T4671] bridge_slave_0: left promiscuous mode [ 298.184358][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.322249][ T28] audit: type=1326 audit(554.293:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.381177][ T28] audit: type=1326 audit(554.293:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.431248][ T4671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.476957][ T28] audit: type=1326 audit(554.293:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.507299][ T4671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.517372][ T28] audit: type=1326 audit(554.293:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.547049][ T4671] bond0 (unregistering): Released all slaves [ 298.615442][ T28] audit: type=1326 audit(554.293:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.657985][T12950] chnl_net:caif_netlink_parms(): no params data found [ 298.707323][ T4671] hsr_slave_0: left promiscuous mode [ 298.718109][ T28] audit: type=1326 audit(554.293:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.744932][ T4671] hsr_slave_1: left promiscuous mode [ 298.758727][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.775202][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.785227][ T28] audit: type=1326 audit(554.293:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.810434][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.822042][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2460'. [ 298.823051][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.856074][ T28] audit: type=1326 audit(554.293:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 298.897604][ T4671] veth1_macvtap: left promiscuous mode [ 298.906289][ T4671] veth0_macvtap: left promiscuous mode [ 298.913969][ T4671] veth1_vlan: left promiscuous mode [ 298.927671][ T4671] veth0_vlan: left promiscuous mode [ 298.933404][ T28] audit: type=1326 audit(554.293:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 299.067729][ T28] audit: type=1326 audit(554.293:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcbe568cdd9 code=0x7ffc0000 [ 300.427201][T13087] VFS: Mount too revealing [ 301.255024][T13096] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2469'. [ 301.267947][ T4671] team0 (unregistering): Port device team_slave_1 removed [ 301.293103][ T4671] team0 (unregistering): Port device team_slave_0 removed [ 301.354565][T13103] loop9: detected capacity change from 0 to 512 [ 301.463920][T13103] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2472: inode has both inline data and extents flags [ 301.495988][T13103] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 301.496664][T13103] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2472: couldn't read orphan inode 15 (err -117) [ 301.506227][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 301.506259][ C0] EXT4-fs (loop9): initial error at time 557: ext4_orphan_get:1397: inode 15 [ 301.506290][ C0] EXT4-fs (loop9): last error at time 557: ext4_orphan_get:1397: inode 15 [ 301.583716][T13103] loop9: lost filesystem error report for type 5 error -117 [ 301.611019][T13103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.038255][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.045522][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.054787][T11689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.066761][T12950] bridge_slave_0: entered allmulticast mode [ 302.079597][T12950] bridge_slave_0: entered promiscuous mode [ 302.087074][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.094221][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.102063][T12950] bridge_slave_1: entered allmulticast mode [ 302.108988][T12950] bridge_slave_1: entered promiscuous mode [ 302.159860][T12950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.233538][T12950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.291774][T12950] team0: Port device team_slave_0 added [ 302.315883][T12950] team0: Port device team_slave_1 added [ 302.353936][T12950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.374290][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.417845][T12950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.440930][T12950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.448319][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.477487][T12950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.622125][T13191] loop8: detected capacity change from 0 to 512 [ 302.631705][T13191] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.646089][T12950] hsr_slave_0: entered promiscuous mode [ 302.652185][T13183] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 302.665323][T12950] hsr_slave_1: entered promiscuous mode [ 302.671521][T13184] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 302.688869][ T3600] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.161897][T13197] netlink: 'syz.0.2488': attribute type 21 has an invalid length. [ 303.187733][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 303.270927][ T3600] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.522604][ T3600] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.646351][ T3600] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.743655][T13077] chnl_net:caif_netlink_parms(): no params data found [ 303.867988][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.875322][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.883891][T13077] bridge_slave_0: entered allmulticast mode [ 303.890644][T13077] bridge_slave_0: entered promiscuous mode [ 303.900579][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.908796][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.916955][T13077] bridge_slave_1: entered allmulticast mode [ 303.923423][T13077] bridge_slave_1: entered promiscuous mode [ 303.944039][T13077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.954696][T13077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.005282][T13077] team0: Port device team_slave_0 added [ 304.023477][T13077] team0: Port device team_slave_1 added [ 304.064373][T13077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.080905][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.125835][T13077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.156791][T13077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.177776][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.225904][T13077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.289715][T13077] hsr_slave_0: entered promiscuous mode [ 304.304713][T13077] hsr_slave_1: entered promiscuous mode [ 304.317635][T13077] debugfs: 'hsr0' already exists in 'hsr' [ 304.328252][T13077] Cannot create hsr debugfs directory [ 304.533339][T13280] loop8: detected capacity change from 0 to 256 [ 304.558765][T13280] FAT-fs (loop8): Directory bread(block 64) failed [ 304.575658][T13280] FAT-fs (loop8): Directory bread(block 65) failed [ 304.591224][T13280] FAT-fs (loop8): Directory bread(block 66) failed [ 304.606206][T13280] FAT-fs (loop8): Directory bread(block 67) failed [ 304.627178][T13280] FAT-fs (loop8): Directory bread(block 68) failed [ 304.640540][T13280] FAT-fs (loop8): Directory bread(block 69) failed [ 304.648887][T13280] FAT-fs (loop8): Directory bread(block 70) failed [ 304.662972][T13280] FAT-fs (loop8): Directory bread(block 71) failed [ 304.670298][T13280] FAT-fs (loop8): Directory bread(block 72) failed [ 304.681737][T13280] FAT-fs (loop8): Directory bread(block 73) failed [ 304.832821][ T3600] bond0 (unregistering): Released all slaves [ 304.882680][ T3600] tipc: Disabling bearer [ 304.896326][ T3600] tipc: Disabling bearer [ 304.937398][ T3600] tipc: Left network mode [ 304.952447][ T3600] IPVS: stopping master sync thread 3737 ... [ 304.973240][ T3600] hsr_slave_0: left promiscuous mode [ 304.993787][ T3600] hsr_slave_1: left promiscuous mode [ 305.015436][ T3600] veth1_macvtap: left promiscuous mode [ 305.046700][ T3600] veth0_macvtap: left promiscuous mode [ 305.056206][ T3600] veth1_vlan: left promiscuous mode [ 305.064913][ T3600] veth0_vlan: left promiscuous mode [ 305.071080][T13321] netlink: 'syz.9.2505': attribute type 1 has an invalid length. [ 305.183429][T13321] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 305.349373][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2510'. [ 305.478670][T12950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.494905][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.523229][T12950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.541071][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.563793][T12950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.587757][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.602371][ T3600] IPVS: stop unused estimator thread 0... [ 305.616188][T13077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.635336][T13077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.657555][T12950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.678100][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.685808][T13369] netlink: 'syz.9.2514': attribute type 21 has an invalid length. [ 305.694453][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2514'. [ 305.733223][T13077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.787229][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 305.787242][ T28] audit: type=1400 audit(561.763:1409): avc: granted { setsecparam } for pid=13372 comm="syz.8.2518" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 305.821521][T13077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.858638][T13077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.898260][T13077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.927149][T13077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.047736][T13077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.480665][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 306.494886][T12950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.511561][T13077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.525196][T12950] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.539457][T13077] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.557960][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.565188][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.584409][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.591788][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.621838][ T3048] 8021q: adding VLAN 0 to HW filter on device eth1 [ 306.639588][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.647811][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.681373][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.688636][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.732427][T13077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.743965][T13077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.756904][T12950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.772591][T12950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.979667][T12950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.003002][T13077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.092889][T13433] loop9: detected capacity change from 0 to 512 [ 307.134865][T13433] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2529: inode has both inline data and extents flags [ 307.156374][T13433] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.157919][T13433] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2529: couldn't read orphan inode 15 (err -117) [ 307.167326][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 307.167344][ C0] EXT4-fs (loop9): initial error at time 563: ext4_orphan_get:1397: inode 15 [ 307.167393][ C0] EXT4-fs (loop9): last error at time 563: ext4_orphan_get:1397: inode 15 [ 307.204925][T13433] loop9: lost filesystem error report for type 5 error -117 [ 307.205833][T13433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.283829][ T28] audit: type=1400 audit(563.253:1410): avc: denied { connect } for pid=13452 comm="syz.8.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.320730][T13456] loop8: detected capacity change from 0 to 512 [ 307.339926][ T28] audit: type=1400 audit(563.253:1411): avc: denied { read } for pid=13452 comm="syz.8.2532" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.360343][T13456] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 307.377762][ T3048] 8021q: adding VLAN 0 to HW filter on device eth2 [ 307.399209][T13456] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 307.431693][T13456] Quota error (device loop8): write_blk: dquota write failed [ 307.432024][T12950] veth0_vlan: entered promiscuous mode [ 307.439187][T13456] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 307.452249][T12950] veth1_vlan: entered promiscuous mode [ 307.468151][T12950] veth0_macvtap: entered promiscuous mode [ 307.470655][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 307.475866][T12950] veth1_macvtap: entered promiscuous mode [ 307.480547][ C0] EXT4-fs (loop8): initial error at time 563: ext4_mb_generate_buddy:1317 [ 307.492479][T12950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.494817][ C0] EXT4-fs (loop8): last error at time 563: ext4_mb_generate_buddy:1317 [ 307.503928][T12950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.519877][T13456] Quota error (device loop8): write_blk: dquota write failed [ 307.530818][T13456] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 307.544273][ T3986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.545330][T13456] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2532: Failed to acquire dquot type 1 [ 307.554516][ T3986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.554563][ T3986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.571872][T13077] veth0_vlan: entered promiscuous mode [ 307.574270][T13077] veth1_vlan: entered promiscuous mode [ 307.582333][T13077] veth0_macvtap: entered promiscuous mode [ 307.626736][T13456] loop8: lost filesystem error report for type 5 error -28 [ 307.628866][T13456] EXT4-fs (loop8): 1 truncate cleaned up [ 307.649881][T13456] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.663394][ T3986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.686969][T13077] veth1_macvtap: entered promiscuous mode [ 307.693605][T13455] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 307.714686][T13077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.745234][T13077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.758725][ T3630] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.768563][T12526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.770227][ T3630] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.778367][T11689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.792142][ T3630] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.823262][ T3630] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.899543][T13490] loop9: detected capacity change from 0 to 1024 [ 307.955192][ T3048] 8021q: adding VLAN 0 to HW filter on device eth3 [ 307.999182][T13490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.067686][T13504] netlink: 'syz.5.2441': attribute type 21 has an invalid length. [ 308.075921][T13504] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.083871][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2441'. [ 308.709591][T13526] loop6: detected capacity change from 0 to 512 [ 308.768291][T13530] xt_hashlimit: size too large, truncated to 1048576 [ 308.981152][T13526] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.2543: missing EA_INODE flag [ 309.070378][ T28] audit: type=1326 audit(565.043:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.8.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa738cacdd9 code=0x7ffc0000 [ 309.094687][T13526] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 309.094819][T13526] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2543: error while reading EA inode 12 err=-117 [ 309.104193][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 309.104219][ C1] EXT4-fs (loop6): initial error at time 565: ext4_xattr_inode_iget:441: inode 12 [ 309.104264][ C1] EXT4-fs (loop6): last error at time 565: ext4_xattr_inode_iget:441: inode 12 [ 309.187161][T11689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.259433][ T28] audit: type=1326 audit(565.043:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.8.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa738cacdd9 code=0x7ffc0000 [ 309.378526][ T28] audit: type=1326 audit(565.073:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.8.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa738cacdd9 code=0x7ffc0000 [ 309.421031][T13526] loop6: lost filesystem error report for type 5 error -117 [ 309.421200][T13526] EXT4-fs (loop6): 1 orphan inode deleted [ 309.494702][T13526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.677312][T13561] loop5: detected capacity change from 0 to 512 [ 309.705462][T13077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.718645][T13561] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2547: missing EA_INODE flag [ 309.735580][T13561] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 309.736227][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 309.751846][ C1] EXT4-fs (loop5): initial error at time 565: ext4_xattr_inode_iget:441: inode 12 [ 309.761495][ C1] EXT4-fs (loop5): last error at time 565: ext4_xattr_inode_iget:441: inode 12 [ 309.770864][T13561] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2547: error while reading EA inode 12 err=-117 [ 309.783703][T13558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.820343][T13561] loop5: lost filesystem error report for type 5 error -117 [ 309.820583][T13561] EXT4-fs (loop5): 1 orphan inode deleted [ 309.862267][T13561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.914497][T13568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.957357][T12950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.009414][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 310.149877][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2552'. [ 310.190790][T13596] syz.6.2554 (13596): attempted to duplicate a private mapping with mremap. This is not supported. [ 310.240979][T13596] 9p: Bad value for 'rfdno' [ 310.307250][T13607] netlink: 492 bytes leftover after parsing attributes in process `syz.8.2558'. [ 310.464577][T13629] loop8: detected capacity change from 0 to 512 [ 310.482271][T13628] loop9: detected capacity change from 0 to 512 [ 310.489213][T13629] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2562: inode has both inline data and extents flags [ 310.519988][T13629] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.520636][T13629] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2562: couldn't read orphan inode 15 (err -117) [ 310.530040][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 310.530062][ C0] EXT4-fs (loop8): initial error at time 566: ext4_orphan_get:1397: inode 15 [ 310.530088][ C0] EXT4-fs (loop8): last error at time 566: ext4_orphan_get:1397: inode 15 [ 310.566878][T13629] loop8: lost filesystem error report for type 5 error -117 [ 310.572960][T13629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.617120][T13628] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2564: inode has both inline data and extents flags [ 310.662025][T13637] loop6: detected capacity change from 0 to 4096 [ 310.674348][T13628] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.674738][T13628] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2564: couldn't read orphan inode 15 (err -117) [ 310.675664][T13637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.684063][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 310.715164][ C1] EXT4-fs (loop9): initial error at time 566: ext4_orphan_get:1397: inode 15 [ 310.724004][ C1] EXT4-fs (loop9): last error at time 566: ext4_orphan_get:1397: inode 15 [ 310.734484][T13628] loop9: lost filesystem error report for type 5 error -117 [ 310.787878][T13628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.839843][ T3048] 8021q: adding VLAN 0 to HW filter on device eth5 [ 310.896177][T13647] loop8: detected capacity change from 512 to 64 [ 310.902781][T13629] bio_check_eod: 12 callbacks suppressed [ 310.902796][T13629] syz.8.2562: attempt to access beyond end of device [ 310.902796][T13629] loop8: rw=2051, sector=264, nr_sectors = 2 limit=64 [ 310.903165][T13653] syz.8.2562: attempt to access beyond end of device [ 310.903165][T13653] loop8: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 310.925390][T13629] EXT4-fs (loop8): discard request in group:0 block:128 count:4 failed with -5 [ 310.956933][T13652] loop9: detected capacity change from 512 to 64 [ 310.964115][T13654] syz.9.2564: attempt to access beyond end of device [ 310.964115][T13654] loop9: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 310.978081][T13653] Buffer I/O error on dev loop8, logical block 36, lost sync page write [ 310.978104][T13653] EXT4-fs error (device loop8): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.8.2562: IO error syncing itable block [ 311.001148][T13628] syz.9.2564: attempt to access beyond end of device [ 311.001148][T13628] loop9: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 311.021936][T13077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.032918][T13653] EXT4-fs error (device loop8) in add_dirent_to_buf:2155: IO failure [ 311.042932][T13628] Buffer I/O error on dev loop9, logical block 37, lost sync page write [ 311.058107][T13653] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.2562: Error while async write back metadata [ 311.060949][T13628] EXT4-fs error (device loop9): ext4_splice_branch:472: inode #18: block 37: comm syz.9.2564: IO error syncing itable block [ 311.073706][T13629] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: IO failure [ 311.092943][T13654] Buffer I/O error on dev loop9, logical block 36, lost sync page write [ 311.102666][T13629] syz.8.2562: attempt to access beyond end of device [ 311.102666][T13629] loop8: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 311.111321][T13661] netlink: 'syz.0.2571': attribute type 29 has an invalid length. [ 311.116232][T13654] EXT4-fs error (device loop9): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.9.2564: IO error syncing itable block [ 311.138303][T13629] Buffer I/O error on dev loop8, logical block 37, lost sync page write [ 311.146952][T13629] EXT4-fs error (device loop8): ext4_free_data:978: inode #18: block 37: comm syz.8.2562: IO error syncing itable block [ 311.160278][T13654] EXT4-fs error (device loop9) in add_dirent_to_buf:2155: IO failure [ 311.175987][T13664] netlink: 'syz.0.2571': attribute type 29 has an invalid length. [ 311.190382][T13629] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.2562: Error while async write back metadata [ 311.204302][T13628] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.2564: Error while async write back metadata [ 311.218348][T13661] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2571'. [ 311.229847][T13629] syz.8.2562: attempt to access beyond end of device [ 311.229847][T13629] loop8: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 311.247379][T13629] Buffer I/O error on dev loop8, logical block 37, lost sync page write [ 311.271098][T13629] EXT4-fs error (device loop8): ext4_splice_branch:472: inode #18: block 37: comm syz.8.2562: IO error syncing itable block [ 311.309418][T13628] syz.9.2564: attempt to access beyond end of device [ 311.309418][T13628] loop9: rw=2051, sector=426, nr_sectors = 2 limit=64 [ 311.367627][T13628] EXT4-fs (loop9): discard request in group:0 block:212 count:1 failed with -5 [ 311.408199][T13629] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.2562: Error while async write back metadata [ 311.425376][T13628] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: IO failure [ 311.433573][T13629] syz.8.2562: attempt to access beyond end of device [ 311.433573][T13629] loop8: rw=2051, sector=410, nr_sectors = 2 limit=64 [ 311.452343][T13629] EXT4-fs (loop8): discard request in group:0 block:204 count:1 failed with -5 [ 311.456436][T13628] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 18: block 213:freeing already freed block (bit 212); block bitmap corrupt. [ 311.476365][T13628] EXT4-fs (loop9): pa ffff8881075d5690: logic 92, phys. 213, len 19 [ 311.484365][T13628] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5459: group 0, free 19, pa_free 18 [ 311.489845][T13629] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: IO failure [ 311.510368][T13629] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 18: block 205:freeing already freed block (bit 204); block bitmap corrupt. [ 311.525768][T13629] EXT4-fs (loop8): pa ffff8881075d5700: logic 64, phys. 205, len 27 [ 311.535801][T13629] syz.8.2562: attempt to access beyond end of device [ 311.535801][T13629] loop8: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 311.562455][T13629] Buffer I/O error on dev loop8, logical block 37, lost sync page write [ 311.571811][T13629] syz.8.2562: attempt to access beyond end of device [ 311.571811][T13629] loop8: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 311.807366][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 311.933544][T13628] Buffer I/O error on dev loop9, logical block 37, lost sync page write [ 311.937121][T13692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=13692 comm=syz.5.2577 [ 311.942109][T13628] EXT4-fs error (device loop9): ext4_free_data:978: inode #18: block 37: comm syz.9.2564: IO error syncing itable block [ 311.942282][T13629] buffer_io_error: 54 callbacks suppressed [ 311.942294][T13629] Buffer I/O error on device loop8, logical block 41 [ 311.966089][T13628] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.2564: Error while async write back metadata [ 311.967378][T13629] Buffer I/O error on device loop8, logical block 42 [ 311.967393][T13629] Buffer I/O error on device loop8, logical block 43 [ 311.977135][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 311.979931][T13629] Buffer I/O error on device loop8, logical block 44 [ 312.001496][ T3048] 8021q: adding VLAN 0 to HW filter on device eth6 [ 312.040067][T13628] Buffer I/O error on device loop9, logical block 41 [ 312.046771][T13628] Buffer I/O error on device loop9, logical block 42 [ 312.053540][T13628] Buffer I/O error on device loop9, logical block 43 [ 312.053676][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 312.060348][T13628] Buffer I/O error on device loop9, logical block 44 [ 312.093083][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 312.117370][T13629] Buffer I/O error on device loop8, logical block 49 [ 312.124102][T13629] Buffer I/O error on device loop8, logical block 50 [ 312.147840][T13699] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2580'. [ 312.147969][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 312.174015][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 312.196085][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 312.217380][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 312.249899][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 312.273619][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 312.273634][ T28] audit: type=1400 audit(568.243:1507): avc: denied { mount } for pid=13705 comm="syz.5.2582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 312.280631][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 312.335201][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 312.377279][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 312.388722][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 312.421595][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 312.433953][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 312.472125][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 312.484516][ T28] audit: type=1400 audit(568.293:1508): avc: denied { search } for pid=13705 comm="syz.5.2582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 312.508571][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 312.526727][T13629] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 312.539446][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 312.551803][ T3431] IPVS: starting estimator thread 0... [ 312.554449][ T28] audit: type=1400 audit(568.293:1509): avc: denied { search } for pid=13705 comm="syz.5.2582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 312.589246][T13628] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 312.610260][T12526] Buffer I/O error on dev loop8, logical block 36, lost sync page write [ 312.643370][ T28] audit: type=1400 audit(568.293:1510): avc: denied { read open } for pid=13705 comm="syz.5.2582" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 312.670000][T13720] IPVS: using max 2448 ests per chain, 122400 per kthread [ 312.673548][T11689] Buffer I/O error on dev loop9, logical block 36, lost sync page write [ 312.690353][T11689] EXT4-fs error (device loop9): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 312.708410][ T28] audit: type=1400 audit(568.293:1511): avc: denied { search } for pid=13705 comm="syz.5.2582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 312.709917][ T3048] 8021q: adding VLAN 0 to HW filter on device eth7 [ 312.744962][ T28] audit: type=1400 audit(568.293:1512): avc: denied { search } for pid=13705 comm="syz.5.2582" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 312.774637][T13724] loop5: detected capacity change from 0 to 512 [ 312.788561][T13724] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 312.798531][T13724] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 312.848556][T12151] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.903767][T13724] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -6 [ 312.963027][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2587'. [ 313.031047][ T28] audit: type=1400 audit(569.003:1513): avc: denied { map } for pid=13744 comm="syz.6.2592" path="socket:[42968]" dev="sockfs" ino=42968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 313.035017][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2587'. [ 313.098689][ T3986] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.112207][ T28] audit: type=1400 audit(569.003:1514): avc: denied { read } for pid=13744 comm="syz.6.2592" path="socket:[42968]" dev="sockfs" ino=42968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 313.234858][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2587'. [ 313.243246][ T3048] 8021q: adding VLAN 0 to HW filter on device eth8 [ 313.283873][ T3986] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.323234][ T28] audit: type=1400 audit(569.293:1515): avc: denied { ioctl } for pid=13771 comm="syz.5.2599" path="socket:[44046]" dev="sockfs" ino=44046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.422018][ T3986] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.463777][ T28] audit: type=1400 audit(569.433:1516): avc: denied { append } for pid=13784 comm="syz.0.2604" name="pfkey" dev="proc" ino=4026532923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 313.486993][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'. [ 313.500765][ T3986] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.587326][T12526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.635714][ T3986] bridge_slave_1: left allmulticast mode [ 313.653504][ T3986] bridge_slave_1: left promiscuous mode [ 313.668074][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.678969][ T3986] bridge_slave_0: left allmulticast mode [ 313.693706][ T3986] bridge_slave_0: left promiscuous mode [ 313.702777][T13809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=13809 comm=syz.0.2611 [ 313.706236][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.752252][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2611'. [ 313.828439][ T3986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.839151][ T3986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.849331][ T3986] bond0 (unregistering): Released all slaves [ 313.857810][ T3048] 8021q: adding VLAN 0 to HW filter on device eth9 [ 313.914346][ T3986] hsr_slave_0: left promiscuous mode [ 313.933122][ T3986] hsr_slave_1: left promiscuous mode [ 313.946736][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.956721][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.964785][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.973188][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.986863][ T3986] veth1_macvtap: left promiscuous mode [ 313.993113][ T3986] veth0_macvtap: left promiscuous mode [ 313.999661][ T3986] veth1_vlan: left promiscuous mode [ 314.004966][ T3986] veth0_vlan: left promiscuous mode [ 314.114506][ T3986] team0 (unregistering): Port device team_slave_1 removed [ 314.125036][ T3986] team0 (unregistering): Port device team_slave_0 removed [ 314.163963][ T3048] 8021q: adding VLAN 0 to HW filter on device eth10 [ 314.354922][T13862] netlink: 'syz.0.2615': attribute type 21 has an invalid length. [ 315.104451][T13815] chnl_net:caif_netlink_parms(): no params data found [ 315.313162][T13812] chnl_net:caif_netlink_parms(): no params data found [ 315.354329][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.380478][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.402961][T13815] bridge_slave_0: entered allmulticast mode [ 315.420774][T13815] bridge_slave_0: entered promiscuous mode [ 315.463403][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.482021][T13892] loop5: detected capacity change from 0 to 1024 [ 315.489921][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.517069][T13892] EXT4-fs: test_dummy_encryption option not supported [ 315.526257][T13815] bridge_slave_1: entered allmulticast mode [ 315.549389][T13815] bridge_slave_1: entered promiscuous mode [ 315.570708][T13892] loop5: detected capacity change from 0 to 512 [ 315.587609][T13892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.665135][T13815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.690068][T13815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.745602][T13815] team0: Port device team_slave_0 added [ 315.782555][T13815] team0: Port device team_slave_1 added [ 315.794282][T13812] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.807923][T13812] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.824250][T13812] bridge_slave_0: entered allmulticast mode [ 315.840261][T13812] bridge_slave_0: entered promiscuous mode [ 315.875812][T13815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.891404][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.936736][T13815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.972397][T13812] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.999442][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.013075][T13812] bridge_slave_1: entered allmulticast mode [ 316.019933][T13812] bridge_slave_1: entered promiscuous mode [ 316.033155][T13815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.040952][T13815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.088652][T13815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.149412][T13812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.166819][T13815] hsr_slave_0: entered promiscuous mode [ 316.173049][T13815] hsr_slave_1: entered promiscuous mode [ 316.180969][T13815] debugfs: 'hsr0' already exists in 'hsr' [ 316.187440][T13815] Cannot create hsr debugfs directory [ 316.188666][T12950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.214731][T13812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.287135][T13812] team0: Port device team_slave_0 added [ 316.304400][T13950] loop6: detected capacity change from 0 to 512 [ 316.310006][T13812] team0: Port device team_slave_1 added [ 316.316166][T13950] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2628: inode has both inline data and extents flags [ 316.331567][T13950] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 316.335961][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 316.337253][T13950] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2628: couldn't read orphan inode 15 (err -117) [ 316.345121][ C1] EXT4-fs (loop6): initial error at time 572: ext4_orphan_get:1397: inode 15 [ 316.345149][ C1] EXT4-fs (loop6): last error at time 572: ext4_orphan_get:1397: inode 15 [ 316.375852][T13950] loop6: lost filesystem error report for type 5 error -117 [ 316.382685][T13950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.404475][ T3986] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.421116][ T3986] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.441153][T13812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.453733][T13812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.481474][T13812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.513717][ T3986] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.524342][ T3986] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.567824][T13812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.575163][T13812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.602818][T13812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.636576][T13972] netlink: 'syz.0.2630': attribute type 21 has an invalid length. [ 316.644613][T13972] __nla_validate_parse: 1 callbacks suppressed [ 316.644627][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 316.648044][ T3048] 8021q: adding VLAN 0 to HW filter on device eth11 [ 316.670971][T13077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.714358][ T3986] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.732805][ T3986] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.749712][T13812] hsr_slave_0: entered promiscuous mode [ 316.756084][T13812] hsr_slave_1: entered promiscuous mode [ 316.764263][T13812] debugfs: 'hsr0' already exists in 'hsr' [ 316.775779][T13812] Cannot create hsr debugfs directory [ 316.847035][ T3986] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.876018][ T3986] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.895990][T13980] netlink: 'syz.6.2631': attribute type 21 has an invalid length. [ 316.904023][T13980] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.912532][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2631'. [ 317.251808][ T3986] bond0 (unregistering): Released all slaves [ 317.335995][ T3986] hsr_slave_0: left promiscuous mode [ 317.341693][ T3986] hsr_slave_1: left promiscuous mode [ 317.350132][ T3986] veth1_macvtap: left promiscuous mode [ 317.355823][ T3986] veth0_macvtap: left promiscuous mode [ 317.362202][ T3986] veth1_vlan: left promiscuous mode [ 317.368088][ T3986] veth0_vlan: left promiscuous mode [ 317.832292][T13815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.870883][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.878603][T13815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.888911][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.918055][T13815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.929336][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.938241][T13815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.097139][T13815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.318093][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.364869][T13815] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.378534][T14095] netlink: 'syz.5.2639': attribute type 21 has an invalid length. [ 318.387082][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2639'. [ 318.489194][T13815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.541224][T13815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.922653][T13815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.292019][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.299299][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.352895][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.361272][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.374712][T14119] loop6: detected capacity change from 0 to 512 [ 319.397020][T14119] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2645: inode has both inline data and extents flags [ 319.436612][T14119] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.436782][T14119] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2645: couldn't read orphan inode 15 (err -117) [ 319.446483][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 319.446505][ C1] EXT4-fs (loop6): initial error at time 575: ext4_orphan_get:1397: inode 15 [ 319.446541][ C1] EXT4-fs (loop6): last error at time 575: ext4_orphan_get:1397: inode 15 [ 319.550495][T14119] loop6: lost filesystem error report for type 5 error -117 [ 319.551200][T14119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.712028][T13812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.746925][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.775522][T13812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.837891][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.853670][T13077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.863669][T13812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.881836][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.891125][T13812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.911871][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.028326][T14151] bond5 (unregistering): Released all slaves [ 320.049227][T13815] veth0_vlan: entered promiscuous mode [ 320.097699][T13812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.108620][T13812] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.126514][T13812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.136984][T13812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.185394][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.192614][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.202888][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.210245][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.244492][ T3048] 8021q: adding VLAN 0 to HW filter on device eth13 [ 320.281320][T14171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.308184][T13815] veth1_vlan: entered promiscuous mode [ 320.370723][T14171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.410311][T13812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.486742][T13815] veth0_macvtap: entered promiscuous mode [ 320.524659][T13815] veth1_macvtap: entered promiscuous mode [ 320.565373][T13815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.592602][T13815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.622323][ T2293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.646436][T14205] netlink: 480 bytes leftover after parsing attributes in process `syz.5.2659'. [ 320.658526][ T2293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.678974][ T2293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.712093][ T2293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.754887][T14216] loop6: detected capacity change from 0 to 512 [ 320.784830][T13812] veth0_vlan: entered promiscuous mode [ 320.803365][T14216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.851307][ T3048] 8021q: adding VLAN 0 to HW filter on device eth14 [ 320.858475][T13077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.881937][T13812] veth1_vlan: entered promiscuous mode [ 320.942010][T13812] veth0_macvtap: entered promiscuous mode [ 321.002219][T13812] veth1_macvtap: entered promiscuous mode [ 321.025689][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 321.025705][ T28] audit: type=1400 audit(576.993:1518): avc: denied { lock } for pid=14238 comm="syz.6.2669" path="socket:[45132]" dev="sockfs" ino=45132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.044718][T13812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.128084][T13812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.174363][ T3986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.193095][ T3986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.223728][ T3986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.265927][T14265] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2674'. [ 321.284217][ T3986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.387915][ T3048] 8021q: adding VLAN 0 to HW filter on device eth15 [ 321.419988][ T28] audit: type=1400 audit(577.393:1519): avc: denied { write } for pid=14278 comm="syz.0.2678" lport=49007 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 321.463673][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2610'. [ 321.543068][T14295] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2682'. [ 321.622673][T14294] syzkaller0: entered promiscuous mode [ 321.639751][T14294] syzkaller0: entered allmulticast mode [ 321.830807][T14269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2675'. [ 322.235466][T14361] loop4: detected capacity change from 0 to 512 [ 322.245040][T14361] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 322.266490][ T3048] 8021q: adding VLAN 0 to HW filter on device eth24 [ 322.267302][T14361] EXT4-fs (loop4): 1 truncate cleaned up [ 322.273781][T14317] chnl_net:caif_netlink_parms(): no params data found [ 322.279672][T14361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.307970][ T28] audit: type=1400 audit(578.283:1520): avc: denied { getopt } for pid=14357 comm="syz.5.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.377636][T14375] netlink: 'syz.3.2693': attribute type 21 has an invalid length. [ 322.387832][T14361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.395431][T14361] IPv6: NLM_F_CREATE should be set when creating new route [ 322.434161][T14375] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.460371][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'. [ 322.481639][ T3600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.505642][ T3600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.524016][T13815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.534980][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.551000][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.568800][T14317] bridge_slave_0: entered allmulticast mode [ 322.575815][T14317] bridge_slave_0: entered promiscuous mode [ 322.587543][ T3600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.600207][ T3600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.614514][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.632041][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.660153][T14399] ================================================================== [ 322.660631][T14317] bridge_slave_1: entered allmulticast mode [ 322.668413][T14399] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 322.676990][T14317] bridge_slave_1: entered promiscuous mode [ 322.682612][T14399] [ 322.682621][T14399] write to 0xffff888109591a08 of 8 bytes by task 14397 on cpu 0: [ 322.698490][T14399] mas_wr_store_entry+0x3405/0x5ad0 [ 322.703781][T14399] mas_store_prealloc+0x43e/0x690 [ 322.709229][T14399] commit_merge+0x6a1/0x720 [ 322.713730][T14399] vma_expand+0x301/0x460 [ 322.718057][T14399] vma_merge_new_range+0x29c/0x320 [ 322.723164][T14399] mmap_region+0x10a5/0x20d0 [ 322.727749][T14399] do_mmap+0x9b2/0xbd0 [ 322.732337][T14399] vm_mmap_pgoff+0x183/0x2d0 [ 322.736915][T14399] ksys_mmap_pgoff+0xc1/0x310 [ 322.741602][T14399] x64_sys_call+0x14df/0x3020 [ 322.746294][T14399] do_syscall_64+0x12c/0x3b0 [ 322.751143][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.757030][T14399] [ 322.759353][T14399] read to 0xffff888109591a08 of 8 bytes by task 14399 on cpu 1: [ 322.767161][T14399] mtree_range_walk+0x1a6/0x490 [ 322.772023][T14399] mas_walk+0x1cc/0x370 [ 322.776171][T14399] lock_vma_under_rcu+0xc9/0x210 [ 322.781102][T14399] do_user_addr_fault+0x232/0x1050 [ 322.786557][T14399] exc_page_fault+0x62/0xa0 [ 322.791065][T14399] asm_exc_page_fault+0x26/0x30 [ 322.795909][T14399] [ 322.798225][T14399] value changed: 0x00007f44880d5fff -> 0x00007f44880b4fff [ 322.805908][T14399] [ 322.808232][T14399] Reported by Kernel Concurrency Sanitizer on: [ 322.814589][T14399] CPU: 1 UID: 0 PID: 14399 Comm: syz.4.2697 Not tainted syzkaller #0 PREEMPT(full) [ 322.823955][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.834007][T14399] ================================================================== [ 322.874164][ T3600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.893374][ T3600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.961745][ T3600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.977848][ T3600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.993836][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.010431][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.102738][T14317] team0: Port device team_slave_0 added [ 323.110122][T14317] team0: Port device team_slave_1 added [ 323.237806][ T3600] team0: Port device bridge1 removed [ 323.397673][ T3600] bond0 (unregistering): Released all slaves [ 323.405992][ T3600] bond1 (unregistering): Released all slaves [ 323.415027][ T3600] bond2 (unregistering): Released all slaves [ 323.423899][ T3600] bond3 (unregistering): Released all slaves [ 323.432764][ T3600] bond4 (unregistering): Released all slaves [ 323.463236][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.470359][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.506210][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.518649][ T3600] IPVS: stopping master sync thread 4921 ... [ 323.527573][ T3600] hsr_slave_0: left promiscuous mode [ 323.533240][ T3600] hsr_slave_1: left promiscuous mode [ 323.544739][ T3600] veth1_macvtap: left promiscuous mode [ 323.553496][ T3600] veth0_macvtap: left promiscuous mode [ 323.559421][ T3600] veth1_vlan: left promiscuous mode [ 323.564697][ T3600] veth0_vlan: left promiscuous mode [ 323.696557][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.704063][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.741207][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.791372][T14317] hsr_slave_0: entered promiscuous mode [ 323.799586][T14317] hsr_slave_1: entered promiscuous mode [ 323.805616][T14317] debugfs: 'hsr0' already exists in 'hsr' [ 323.811855][T14317] Cannot create hsr debugfs directory [ 323.998761][ T3048] 8021q: adding VLAN 0 to HW filter on device eth22 [ 324.118324][T14317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.129577][T14317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.146708][T14317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.165808][T14317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.185588][T14317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.203056][T14317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.213746][T14317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.227368][T14317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.300649][T14317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.325778][T14317] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.338117][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.345260][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.374105][T14317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.391037][T14317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.408541][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.415647][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.487428][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.563780][T14317] veth0_vlan: entered promiscuous mode [ 324.572910][T14317] veth1_vlan: entered promiscuous mode [ 324.598990][T14317] veth0_macvtap: entered promiscuous mode [ 324.607581][T14317] veth1_macvtap: entered promiscuous mode [ 324.619142][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.631392][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.643387][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.658229][ T3616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.674954][ T3616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.689268][ T3616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.701685][ T28] audit: type=1400 audit(580.673:1521): avc: denied { write } for pid=14317 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 324.730629][ T28] audit: type=1400 audit(580.673:1522): avc: denied { open } for pid=14317 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 324.961463][ T3048] 8021q: adding VLAN 0 to HW filter on device eth25 [ 325.140866][ T3048] 8021q: adding VLAN 0 to HW filter on device eth23 [ 325.301385][ T3048] 8021q: adding VLAN 0 to HW filter on device eth26 [ 325.941325][ T3048] 8021q: adding VLAN 0 to HW filter on device eth12 [ 326.026863][ T3048] 8021q: adding VLAN 0 to HW filter on device eth16 [ 326.449226][ T3048] 8021q: adding VLAN 0 to HW filter on device eth4 [ 326.537830][ T3048] 8021q: adding VLAN 0 to HW filter on device eth17 [ 326.631253][ T3048] 8021q: adding VLAN 0 to HW filter on device eth18 [ 326.723785][ T3048] 8021q: adding VLAN 0 to HW filter on device eth19 [ 327.032758][ T3048] 8021q: adding VLAN 0 to HW filter on device eth11 [ 327.191963][ T3048] 8021q: adding VLAN 0 to HW filter on device eth10