last executing test programs: 16m3.904547421s ago: executing program 32 (id=366): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$packet(0x2d, 0x3, 0x300) syz_emit_ethernet(0x2a, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = syz_genetlink_get_family_id$ipvs(0x0, r2) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xd4, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) 15m59.633686228s ago: executing program 33 (id=448): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 14m51.190673794s ago: executing program 34 (id=794): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noac']) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) listen(0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010829bd70000003000000000000b1b32638e81a8c48c74e5602668f82e15552d588ba293e3fde7175bf8b51028532d1f90059c59fb391c8e58f0c25991a4b0facb5ebaa736ed0f9760b5532edd8724c3ce4d001560f63d02f1d9937c7cbe4b3050b2d2459c529361c1c6750d5bab0e94aff00526525f532e6ff96cc9cc67ab5d59416b4a57e7924f4ea0cb503a9037e94d00ff9b5d18b7a44f1bd96e77db3590d5a5f8bfa5c41af7b42dc8a05bb24bd2748037ae0bba66f8c6a2b66caced6b90e9b196cf9abc3676823aa5c03473b6c32d03e93caa91878abfd8e29143188d2b8a1bee1e13010208268d6386927d2e2e35ea2197309aa2696eb", @ANYRES32=0x0, @ANYBLOB="000100000424040008000400cdff000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) syz_emit_ethernet(0x9e, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@llc={0x4, {@snap={0x0, 0xaa, "9e63", "01ca81", 0x9001, "b57552aa52af3c25eedfea7b17625501ca26e8c1ed7888aa2cfbaf77b1a25409550bae57e48876a5c07cc608448438a9f415e1a3fd0ef56282747a1eb958af5f0612e504b5775532c5a7888ecc431faa8953ffb82837b39bb10205c22dea143dbde013e0f7a172abdb82265e3b661885518048b5ea1a34ea326ae071608182187af91bbe126ee8"}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x9bd, 0xc3d, 0x6, 0x73e]}) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @random}, 0x0, {0x2, 0x0, @rand_addr=0x64010101}}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x2) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r10, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2f}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x1f}}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x40000c0) unlink(&(0x7f0000000200)='./file0\x00') r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000200000000000000075a10000850000005300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500"/32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 13m41.480242644s ago: executing program 35 (id=1226): msgget(0x2, 0x200) msgget(0x2, 0x1e) 13m17.363545245s ago: executing program 36 (id=1282): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r0, 0x2007ffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = getpid() setpriority(0x1, r2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r7, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x300090, &(0x7f00000008c0), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) keyctl$setperm(0x5, r1, 0x802) sendfile(r0, r0, 0x0, 0x800000009) 13m9.960755469s ago: executing program 37 (id=1402): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0xa, 0x4, 0x40000000, 0x0, @mcast1, @remote, 0x80, 0x10, 0xfffffffc, 0xdc67}}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000007000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x4000) syz_io_uring_setup(0x10d3, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 12m42.595735511s ago: executing program 38 (id=1652): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x1, 0x0) r1 = signalfd4(r0, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280068000000059078ac1414000a01010000000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="942945f326640ac5554e8fd927aada694df14d5711ba3f40e79c5fa3daff794b414b38578722ab8afc4c83d7f3f4cab0bc785d29f8872da4879021fb3fea0dc7dc83cad300679b200c5c10aec2e36487dd19ccdec1bb92066fd75814057da2a41f0bc2ff652b4087766c7d47f595bda85520971e6e09bc3d66e104014ed7f1439e515d574e9ac09733d36b"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="f3"], 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) syz_io_uring_setup(0x365d, &(0x7f0000000180)={0x0, 0x377f, 0x0, 0x3, 0x2c, 0x0, r7}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 12m35.797622116s ago: executing program 39 (id=1707): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="91102d000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000440)='./file1/file0\x00', 0x1000040, &(0x7f0000000340), 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f00000004c0)=""/4096, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x13}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x80000000}}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0xfa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfa, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x288, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x24044050) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000804}, 0x40013) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000f"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$packet(0x11, 0xa, 0x300) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 10m28.557815066s ago: executing program 40 (id=2582): r0 = socket$xdp(0x2c, 0x3, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r2 = syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000500)=@can, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f0000000800)=""/176, 0xb0}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f00000009c0)=""/226, 0xe2}], 0x6, &(0x7f0000000bc0)=""/187, 0xbb}, 0x8}, {{&(0x7f0000000c80)=@nfc_llcp, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/16, 0x10}, {&(0x7f0000000d00)=""/96, 0x60}], 0x2, &(0x7f0000000dc0)=""/20, 0x14}, 0xb}, {{&(0x7f0000000e40)=@xdp, 0x80, &(0x7f0000001200)=[{&(0x7f0000000ec0)=""/9, 0x9}, {&(0x7f0000000f00)=""/109, 0x6d}, {&(0x7f0000000f80)=""/47, 0x2f}, {&(0x7f0000000fc0)=""/46, 0x2e}, {&(0x7f0000001000)=""/234, 0xea}, {&(0x7f0000001100)=""/48, 0x30}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/101, 0x65}, {&(0x7f0000002c40)=""/4112, 0x1010}], 0x9, &(0x7f0000001340)=""/170, 0xaa}, 0x101}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001400)=""/159, 0x9f}, {&(0x7f00000012c0)=""/50, 0x32}, {&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/132, 0x84}], 0x4, &(0x7f0000001680)}, 0x6}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/29, 0x1d}], 0x1, &(0x7f0000005080)=""/4097, 0x1001}, 0x313}, {{&(0x7f0000001740)=@un=@abs, 0x80, &(0x7f0000001840), 0x0, &(0x7f0000001880)=""/159, 0x9f}, 0x7}, {{&(0x7f0000001940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004dc0)=[{&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/245, 0xf5}, {&(0x7f0000004c40)=""/135, 0x87}, {&(0x7f0000004d00)=""/157, 0x9d}, {&(0x7f0000001bc0)=""/41, 0x29}], 0x5, &(0x7f0000004e40)=""/104, 0x68}, 0x2}], 0x7, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x40000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000121400042abd7000fbdbdf2508000100020000000800030004000000a2f5a1382c2ffc2ab3089cbbda08000301000000000008006dd15d85a9437a966f3b6f67e8a6e32c316a7783f5f367d5d0d74a410138eac3794c4a1ff933f3a330693997187b09a912b912294574fe8f9993306d99f392c03afb2f55cf68e18b29d0581d2be6b80a3b96e071c5c2dd4a96703cfebcea5c2fc7db93d173ee8a66bc1411ca85dda5a81c88f88e0a97484e6963f4b16b417e19e0002521f41605bed678f06547b2596638f48c9fd4976f546543f63e3b5571a959fb0a0a6c9aa6c35b0cedf08aadbe30cae078bd20ce6b689c6be3118fc34aac33b26378ee67dfec7f4607b8da6d323ec594822e65df9923b5403194621a282a8da0"], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008010) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet(0x10, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x2000c080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40844}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8m4.012360415s ago: executing program 41 (id=3186): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r0, 0x2007ffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() setpriority(0x1, r1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x300090, &(0x7f00000008c0), 0x3, 0x566, &(0x7f00000015c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r0, 0x0, 0x800000009) 4m46.908792776s ago: executing program 42 (id=4860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000840), &(0x7f0000000940)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m44.768813711s ago: executing program 5 (id=4911): sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd700000dcdf250700000005fe018008000700"], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 4m44.704742633s ago: executing program 5 (id=4912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 4m44.665791925s ago: executing program 5 (id=4913): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6d, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x37, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, [], "af340000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 4m44.538996159s ago: executing program 5 (id=4914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000140)="b9e203076008008cb89e08f00800b176a62a3c94f7", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m44.52216839s ago: executing program 5 (id=4915): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 4m44.392219944s ago: executing program 5 (id=4921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 4m42.721044393s ago: executing program 43 (id=4979): r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ppoll(&(0x7f0000000300)=[{r0, 0x8000}], 0x1, &(0x7f0000000340), 0x0, 0x0) 4m41.956701109s ago: executing program 44 (id=4997): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 4m29.894696773s ago: executing program 45 (id=4907): signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m29.380149201s ago: executing program 46 (id=4921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 4m29.152581579s ago: executing program 4 (id=5304): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000900)=@sack_info={r5, 0xfffffff8, 0xb}, &(0x7f0000000940)=0xc) 4m29.098230821s ago: executing program 4 (id=5307): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="134e", 0x2, 0x20004050, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2, 0x0) 4m29.095146471s ago: executing program 4 (id=5308): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) 4m29.075846822s ago: executing program 4 (id=5309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 4m29.020992114s ago: executing program 4 (id=5311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fafffffb000000000300000085000000360000006700000007000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xbe1, &(0x7f0000001180)={@remote, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xd, 0x6, "a6d805", 0xbab, 0x21, 0x1, @private1, @loopback, {[@fragment={0x2b, 0x0, 0x62, 0x0, 0x0, 0x10, 0x67}, @hopopts={0x0, 0x157, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @generic={0x5, 0xaab, "a13220ecb3a4b219cfa31777c0ebdce472de37dfc2c0471a216f40e651e1e730975406e8500c4ef6c57c233ee78aa75019cb36d4297995b28d43f59dcd4b87538fd89dabc6b2999df730b9f3e42f4c5ca9d17c85ec5918ce1b57f85bb8f281caa5a3a687e71c6b4a64073cf02dd131bf163cb6c204c3ea093e29a44fc989de2672d5d6b6799cf0cb35ca7add609a29c39addbc4da77746ca74230378171f0e6d4461d701c34c8a16b4459663549d818cf60d9c36eb691087d27b172117ca0fbe2782e9a95182149deea1f1a7db1a7010e4ed089d64a98c329fdc57a9109201f209f0c48be6dbcba1e335e77a986673d81fbc65807a096fa727b69c3d766046059705361aaf68fa28c1dc635c976228d6fad1894e676c596d521d284ee32beab35906274f63ebe140670419bee67a9c8775f9d6c8db529b6913d65abe0dc714aa3203960f6df3bf2c7e3b45fe9a71b3068cd249f1afaf88d24b0bf229c17924e653d19a5a2d3e7932f51925b3209c99b258bd1af97b9202b500e68ed177ad2f548f5241b68b3884246ed9175f5e24edf0c514fa5c6f3d80abbba5234b2c1b0ef14b12ce2f49733ec8a7dc01e00312f17105d0e104899b9e455914077fc6f5a42884f81ff3d1f26e4a77c39e14c91564e46c23ce503d09fc0b90f140492f1d4a4f1a63218ab9209165d6846c936da910e7226d23ee3f2aebde75212497fe9a75782fe7aa2d5212d1c2cc13c77e9dea5b3cb69c2dddf3b48070f41960d56ba6e3375956efa65b33169182d7d2f7a60ee70bdc993cc089b5a16704031aac12cfa170bd7d6f3c4d7c54aa3076c3b3e6488d8c1f635af1eb1590d80cad55cffc76b55539acbffd9562c858756282b2159e5e97c48bb15c1a75589aa235ff779507cd31075fa56a06c989c7322424755c1efe4820c6266a3021eb11676476e4aae6777dc962c0c00e08da78dc7598087b7977b8c2c798bb896242591fa038bad284dc9715ac57c821f4e5024c95053450f7b4ba643bbb23b6bcfbac731b13679da83bd6b942d947ed2dd531d60acea1e359e1e42dd6b1c80200eb0588dafd84b37c165448f96fe73aca40a0240b85793580276c86cb1e9597629aa33ee335de48aca882bf9f467f6008526e12e5c13cefdbb6c72462f35450e865b66dda81e389a701f1fba125229c5457859dec7db31285a8c02d22feea45bc247b60ccb43a132c4d2491567e0959e53d51b5700aed31254db026c3fb266aefcf1b759eb066deff51b89eebda1548fbb5c09fbbf3e6f1328f422add2780bca1339c9d8de2323d70c9304bb7d5945def4d694dad6210565eec044f1353707096da2583cf9e5a81a05fcb895c21c5f902943773455458566c3635542fa5d35b23aae6e9da677ce27f4c440da6f1475c3ae06a868b7b718c8b9801ebb39e48856ed990d6f956fbbcf24a2cf6fc05fb3b40c992e28aba0097a5ee1c242afef882d90f99b52b8b4b6ed9a8ab64a5bff08806ad1167dcf7fff3ac9015a58df083895c14e260532ff1593a2ad12b45ecad75e14d3c3bda6eee8c998f235f1f8f654c8733cda7c2837c4d88fed7a8d85050fc167ff08f274b51246f6804c1bf3371beda56326b16457593155ca707166a575a808152f248955775c60b2e51daab64caea62b9c3b96805b692a34cc09a1974fd114c63136140c87acafce993a6a8c1a9edc85917a27c5f870cb426b00e10e9d238ef50870682b4f9e03724573bb93b3b529c376c73bcea5f249d3d94fa99ac9de5ebdc0a0e50c39be0c86c0a34102268484c48cefc70265804086264ab74ac515fe6b5066f02d17434aa0df48fb78f5d7e9ae8331b448d85733c03c87cf31fec68dc5b2fba5fdc4323940de620c976ac84b3202d7a4495a72f834a577fd5ddb05e8deaec2ff4124a3b1e58a7dd0defae60e7d616385f216ba2eed71cce06ca2f8d2757d82c3bb9fc75f484a3c66ee7b296babdd4c40693fdcdf228a4073e947a104969172c5235514adc8009fb6bba40bf37ef2d742b1ffe76b807cf77fd47b9226f00a6416c7a8b5e53d16fbe845e31218cac30c79b54f4c8ef8e3f11b002a6e73f7dc92290ae84d5bddae9ac357ad9a15464ef386c61b44b98d50f31500137f0123cf36059ad1cef67c81bbc7a564ed082896aec408d3464111424e0c86e11b5b299f5310dc78444085875b71be4432c856a85a5c98471d400346a1654b091f2b50e2d87739bfabba891326e4f4f43964ec6359636425c8f68a1b3d86726b08dee39aca8ecd02040306efdf6c85a4b8aee63e4422ab10594671554add8492f77f3ca60d139f6c659be13011ac688a43e27dd836478aa92a520592a62b6f6ee5fa82199cbc4fa408ee397b6948bc7f08ef2aabc461dac6f7c1c08c6f6a9e09c8dfc72ca9b63b7b98e9917265fdd4acfedef16c22abeba038935fca9c00e8175b0121cd47b18c0c35dccb14d73836eddfd19aa930f9823c3e07cc4f153048ffb5af446ad848fe227bf79eab0bb961bec99aad5f55b651040c03b2762343178679a3395eaaab5ba57314ea5bacda1725cd90fc93b719095d3396bb96785a1ed1d327c0c700759c264a9f8577023528f022e292181ea71d3c098f93d8bcc1aec342e7358d4865ad22224fc73d5c4fbcf6efcd5bd361dcf44d529a2941972a319ba323ff5d3e7149fe5afa25ca50b3c36c7ca6026e5a55fbe69035c878ff53ab2f0819a5697e240bbcd27b2077af3d9637aa180d59cde616b29c4d83b178b723c257e79dfd9b15967e78ed4c3e5d4e55741846312ab29bdce5aa865b6e52d2a0dd7f745c842fee3ba2ff80ed9c317a8c1182f6ee6e0da0f168eb68570b98c07fe7f276631d7e644e96ea06186bf5c0d444f334a21bad8a48e58e0c74961ad03503e5b9a501662d5f16e9491abe6e793629af346645c85ffa98347bf8db66bd048599c57d9eccc1f156a901454669d007b8f71976c45dd680d0dfd7f0789c1258980146a1c82db988ec2276015fa062268bcb6b7dd4514138e36333820539e330c852196caee44e45389dd81174c3557e7463f9cc59a9c6b8674e6e40c72f9bbce287cd88ead5940597a12948ff5df447d493f47d0eccd249c4a35c866e0e11a89f069da2d7e88ae81ab5a32d531dfe6bec614e25e2204625ffc4fa42871be1e15cf344fc4e4e41f832719bb67d1acb5cf4cfed4c82cbaa876605052383c790e9620c05108b2a5d450a4714d3c054453f88d72d12378f492b4658aa8287d683da9d24ba514bc1e905e1cf2f7eea93ff8d23d2d725c7ad41dd97aa3903b6bf5680913ad0f1be07546c3074ff80d003ad9ad467347eae884f0e2f6e75505a76a2cfcd683b844f0d5bf90cd87e730c320dd11232aea6078e8ebd84efe4fc2492b7f8902f04ca188facf6abf85d9f3eef5108fe694ead23b7fd9b88df497e89cee23751ac34b0dccf35fd02f6c3e542fc489befc529e5a781f2c01f17450205b10cb78abbc971b56469f47c147a89e2adbb18986c526114b4dcd83aa4eef4c48d5f9a0f10609b54536a4480f9eab4933adf4e5df2f5a346943a2898784a04a5d0b5ea650e6546baa6d76759d1358cc2c15dd8937a196ede61410fe147cac65c7788179760651aad4d25c7a433a4e8efc62c07e2e365e513e79eceb0682a9dd1bd34ccfc982f6b55a5e8f4dd1897d535314b680398194f0f5ef8bd4798dc0b299083858d4ada51ed02d6e5e82576e1462b4af7c2f20a5731d9563187095d049dec6701b6dbd7b01c34dd9596ce0a936aadd8d197d4954a92787a352b27f12905ebe3e6a2c3d6dd79e5b954448a148fd859d69b2e7b12f91ea34016dcdaf74c716554e0ad2666f213510ad"}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, "babee4", 0x8, "2b6b9b"}, "f1dff313bad6d381756d196b3499964b24442f772fa6224daa38f842833925bb6d760fc67a7952d2c5a31816cef369d7f48d091a1ef302fd263ad6b5f18033a1f80d4aa27421625c63e529f6b17e8ad93c070cefd92b55700a8660fabf843df1394383c19f4aa2ce36bdae0dd22536184bbb378aaf88ee2392a5beeeac87f65082b5e7b26c154d830815acec56e07362ea17dfee8c89d99e7dcf09953c17ab07e5815f611243f748a74e759b1593164ee90617f3674fedcef548b1bd6c24ef2a8956b5091eed517b94053a"}}}}}}, 0x0) 4m28.588942829s ago: executing program 4 (id=5313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387d9a57034b6eb3d5a", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m28.588861659s ago: executing program 47 (id=5313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387d9a57034b6eb3d5a", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m28.28384275s ago: executing program 1 (id=5316): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="134e", 0x2, 0x20004050, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2, 0x0) 4m28.176886924s ago: executing program 1 (id=5317): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) 4m28.176687394s ago: executing program 1 (id=5318): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 4m28.163967094s ago: executing program 1 (id=5319): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 4m28.126707195s ago: executing program 1 (id=5320): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 4m27.661695342s ago: executing program 1 (id=5321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m27.661589432s ago: executing program 48 (id=5321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m27.522874887s ago: executing program 2 (id=5324): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x57) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4m27.474451778s ago: executing program 2 (id=5325): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x3, 0x5) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'vlan1\x00', {}, 0xffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4m27.291596835s ago: executing program 2 (id=5326): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) 4m27.291259505s ago: executing program 2 (id=5327): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 4m27.242134626s ago: executing program 2 (id=5328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000040000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m26.652823587s ago: executing program 2 (id=5329): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffef1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f000027e000/0x1000)=nil) shmat(r1, &(0x7f00005f0000/0x1000)=nil, 0x1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x3, 0x8}, 0x100, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x2f4e, &(0x7f0000000380)={0x0, 0x9f8, 0x8, 0x1, 0x24d, 0x0, r0}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 4m26.652641457s ago: executing program 49 (id=5329): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffef1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f000027e000/0x1000)=nil) shmat(r1, &(0x7f00005f0000/0x1000)=nil, 0x1000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x3, 0x8}, 0x100, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x2f4e, &(0x7f0000000380)={0x0, 0x9f8, 0x8, 0x1, 0x24d, 0x0, r0}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 2m32.848874493s ago: executing program 0 (id=8404): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r2, &(0x7f0000000a00)}, 0x20) 2m32.848774283s ago: executing program 0 (id=8405): perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 2m32.194876396s ago: executing program 0 (id=8407): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mmap(&(0x7f0000c74000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001000000804861d468bef897b63108b2a095ff655af977fd"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x8, 0x1b, &(0x7f00000002c0)='Kvq\t\x00\x00\x00\x00', &(0x7f00000000c0)=""/27, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x1004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x102270, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) fgetxattr(r4, 0x0, &(0x7f0000000a00)=""/64, 0x40) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x58, &(0x7f00000004c0)=""/88, 0x41000, 0x12, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x231f5, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000680)=[{0x1, 0x2, 0xa, 0x7}], 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m30.233290685s ago: executing program 0 (id=8410): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m30.163752527s ago: executing program 0 (id=8412): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffffff, 0x6}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2m29.740865512s ago: executing program 0 (id=8418): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c48", 0x78}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x200, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m29.146957323s ago: executing program 50 (id=8418): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c48", 0x78}], 0x3}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x200, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.233696856s ago: executing program 8 (id=10175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0x0, 0xff000000, 0xff000000]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="98b1b368fac9"}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0xd}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x118, 0x1, [@m_vlan={0xe4, 0x2, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x40, 0xffff, 0x10000000, 0xed, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4d2}]}, {0x82, 0x6, "dfcbe56315373395564dd53dac806cb38e1f7fea5713ff518cdde6e8611a50e6682d3078bc3f3c3acd4e05285258f39f0396baca278ff66b4acdc2a9dbac14df80630c12cb17b37ef3b5d4e99fbe2d65ec4cd41ca6b1d7963ab5c0beb1d1ee078a959b754477f944a73c0e7696ba5710f06c234da2ba72d035002a758326"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4060884}, 0x4008010) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.142367679s ago: executing program 8 (id=10178): close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0) 3.052155093s ago: executing program 8 (id=10179): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x158200, 0x46, 0x20}, 0x18) r1 = openat2(r0, 0x0, &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mmap(&(0x7f0000c74000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001000000804861d468bef897b63108b2a095ff655af977fd"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x20, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYRES32=r8, @ANYRESHEX, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000008500000085000000b700000000000000950000000000000000000000000000000000daec690200b9ff715da568cb4654036727c965d4332116af391bfb35ece807f3c32bc9b178345c7e9caf5b895f363f7542d46b9a850208e0b5ac48bd367e29b7d2f3e514bd14a104f42b59c00522f98c731611e89fe3e1791bbbbf43d80b0f9eb814014bb705e2f23041d1c0"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x8, 0x1b, &(0x7f00000002c0)='Kvq\t\x00\x00\x00\x00', &(0x7f00000000c0)=""/27, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x1004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x102270, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x80) fgetxattr(r11, 0x0, &(0x7f0000000a00)=""/64, 0x40) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x0, 0x0, 0x4, 0xff, 0x1}, [@RTA_UID={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040d3}, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x58, &(0x7f00000004c0)=""/88, 0x41000, 0x12, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x231f5, r1, 0x1, &(0x7f0000000580)=[r3, r1, r1, r1, r1, r3], &(0x7f0000000680)=[{0x1, 0x2, 0xa, 0x7}], 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.036857183s ago: executing program 9 (id=10181): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x400, 0x6, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffe8c, 0x0}}], 0x34000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\x7f\fG\xa75\xd8aM!\xe6\xe3\x05\xed.\x90\xae~\x93#*\xcc\xa0aZ-\x16\x1fmO\xfe|\x94\x7f\xf5\x8a\xf4\x83\x16\xf2L\x8b\xc7m\xf3m\xaa[\x03\x00\x00\x00R\xafg\xff\xbc3\xcd\xde\xe9F\xc2&b\xfd\xee3j\xf8\x8a\xa2\xbf\f\xe2Rxn\xa7.BW\xb6\x1bC\x91\x1fW\xaa\xc8z\xc4(\x12\xbc\xaa\x97_\xb8\xa9\xc1\x19ba\xbb\xf2\xe5H\xae\xa4\x05\xb6', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='-\x00', &(0x7f0000000340)='.{/^%:\xf6[]\x00', 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) 2.880449418s ago: executing program 8 (id=10186): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="bcb0b6080bc2", 0x6}, {&(0x7f0000000340)="54d9b7a069fb02b4e96e12d872dd182e2becb6f1457b6e0aabe3427159015f4c4a57a21bc3f122b2f904000000cea665", 0x30}, {&(0x7f0000000380)="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", 0x591}], 0x3}}], 0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000e40)=""/4096, 0x1000, 0x40010120, 0x0, 0x0) 2.82421193s ago: executing program 8 (id=10188): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) 2.797744111s ago: executing program 9 (id=10190): close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0) 2.712628015s ago: executing program 8 (id=10191): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xba, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r5) ioctl$EVIOCRMFF(r5, 0x40095505, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020603000000000000000000070000000c000780080006404c0000000500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x74f, &(0x7f0000001040)="$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") openat(r8, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x80) 2.641989997s ago: executing program 9 (id=10193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103ac2, 0x32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.575531399s ago: executing program 9 (id=10196): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x400, 0x6, {{0x5, 0x4, 0x1, 0x16, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffe8c, 0x0}}], 0x34000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 584.203349ms ago: executing program 6 (id=10213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x9, 0x1, [0x1]}, 0xa) 583.576319ms ago: executing program 9 (id=10214): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) 555.64104ms ago: executing program 9 (id=10216): syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x44, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7, [{0x4, 0x5, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269"}, {0x3, 0x1, "005ff9297d00001392"}]}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 490.432082ms ago: executing program 6 (id=10220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000b40)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc68f57e6777b5fdbf6e1cce45033ae91684f7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8000000002934", 0x5e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b89", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="b115", 0x2}], 0x1}}], 0x3, 0x2090) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 468.632353ms ago: executing program 6 (id=10222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000005080000000b00000400000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000d00)="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", 0x183}, {&(0x7f0000000b40)="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", 0x12c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="b11554", 0x3}], 0x1}}], 0x3, 0x2090) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 444.982534ms ago: executing program 6 (id=10224): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x29, 0xca, 0x2, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x10, 0x10, 0x7, 0x7}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'gretap0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x700, 0x8, 0x74, 0x2, {{0xf, 0x4, 0x3, 0x1, 0x3c, 0x68, 0x0, 0x67, 0x29, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x7, 0x20, [@broadcast]}, @lsrr={0x83, 0x7, 0xa4, [@empty]}, @noop, @timestamp_addr={0x44, 0x14, 0x58, 0x1, 0x8, [{@multicast1, 0xfffffff9}, {@rand_addr=0x64010101, 0x800}]}, @noop, @generic={0x86, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x1, 0x0, 0x5b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8000, 0x78c7, 0xf5b, 0x4e84}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x40, 0x7, 0xb, 0x4, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x64, 0x0, 0xff, 0x23, 0x0, @rand_addr=0x64010100, @remote, {[@lsrr={0x83, 0xf, 0x30, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x3d}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b80)={'wg1\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xffec}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c00)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x6, 0x6, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0xb, 0x4}}) r15 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r15, 0x1, 0x41, &(0x7f0000000040)=0x5ad2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r15, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r16}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x2}, 0x1, 0x2, 0x0, 0x0, "69908b952e0f9a67"}, 0x10}}, 0x408d1) r17 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r18, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x220000a0}, 0xc, &(0x7f0000001d00)={&(0x7f0000000d00)={0xdd4, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x953}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x9, 0x60, 0x4391}, {0xcd0e, 0x8, 0xff, 0x3}, {0x42, 0x6, 0x40, 0x6}, {0xfff, 0x4, 0x61, 0x40}, {0xffff, 0x5, 0x6, 0xd8}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x42}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0xf, 0x8, 0x7}, {0xc977, 0x0, 0x16, 0x2}, {0x6, 0x7, 0xf2, 0x6}, {0x1, 0x6, 0x9, 0xfffffffc}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe4f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xf, 0x7, 0x5}, {0x0, 0x9, 0x0, 0x9}, {0x0, 0x9, 0x1, 0x8}, {0xc7, 0x40, 0x7, 0x5}, {0x5, 0x9, 0x5, 0x8}, {0xfff, 0x7, 0x10}, {0x200, 0x5, 0x40, 0x3}, {0x6, 0x7, 0x5, 0x4}]}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x2bc, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x4, 0x1, 0x4}, {0x9, 0xf7, 0xfe, 0x8000}, {0xca15, 0x1, 0xd3, 0x3}, {0x101, 0xf9, 0xa0, 0x3}, {0x6, 0x28, 0x2, 0xcb}, {0x6, 0xd, 0xb1, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0xe, 0x0, 0x7fff}, {0x10, 0x3, 0x8, 0x5}, {0x8, 0x9, 0xfe, 0x4}, {0x800, 0x7, 0x1e, 0x1}, {0xe, 0xf4, 0x6, 0x4d8}, {0x7, 0x81, 0x9c, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1a000000}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfffb, 0x8, 0xa6, 0x80000001}, {0x3, 0x8, 0x2, 0x400}, {0x4, 0x3, 0x1, 0x1000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x83b}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0xff, 0x5, 0xd59c}, {0x5, 0x0, 0x0, 0xfff}, {0x1ff, 0x1, 0x3, 0x706f}, {0x1, 0x73, 0x7, 0x4}, {0x4, 0x80, 0x1, 0x8}, {0x100, 0x4, 0x9, 0x3}, {0x8000, 0x0, 0xd, 0x3}, {0x7, 0x33, 0x5, 0xe946}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}]}}]}, 0xdd4}, 0x1, 0x0, 0x0, 0x20000004}, 0x104) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20013, 0x2021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0xfe, {0x7b00c347, 0x1}}]}]}}}, @IFLA_LINK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) 395.633266ms ago: executing program 6 (id=10226): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) 353.483687ms ago: executing program 6 (id=10227): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() sync() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) getpgrp(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) socket$nl_generic(0x10, 0x3, 0x10) 337.320418ms ago: executing program 7 (id=10229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0x0, 0xff000000, 0xff000000]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="98b1b368fac9"}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0xd}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x134, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11c, 0x1, [@m_vlan={0xe4, 0x2, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x40, 0xffff, 0x10000000, 0xed, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4d2}]}, {0x82, 0x6, "dfcbe56315373395564dd53dac806cb38e1f7fea5713ff518cdde6e8611a50e6682d3078bc3f3c3acd4e05285258f39f0396baca278ff66b4acdc2a9dbac14df80630c12cb17b37ef3b5d4e99fbe2d65ec4cd41ca6b1d7963ab5c0beb1d1ee078a959b754477f944a73c0e7696ba5710f06c234da2ba72d035002a758326"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x34, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x7, 0x6, "9787c2"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4060884}, 0x4008010) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 290.351959ms ago: executing program 7 (id=10230): close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r0) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0) 192.493013ms ago: executing program 7 (id=10231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000300)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) 158.507484ms ago: executing program 3 (id=10232): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x9, 0x1, [0x1]}, 0xa) 123.758595ms ago: executing program 3 (id=10233): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000b40)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc68f57e6777b5fdbf6e1cce45033ae91684f7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8000000002934", 0x5e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b89", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="b115", 0x2}], 0x1}}], 0x3, 0x2090) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 106.923636ms ago: executing program 3 (id=10234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103ac2, 0x32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 90.308947ms ago: executing program 7 (id=10235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db700000000000001000400"/53], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 87.280267ms ago: executing program 3 (id=10236): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x158200, 0x46, 0x20}, 0x18) r1 = openat2(r0, 0x0, &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mmap(&(0x7f0000c74000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001000000804861d468bef897b63108b2a095ff655af977fd"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x20, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYRES32=r8, @ANYRESHEX, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000008500000085000000b700000000000000950000000000000000000000000000000000daec690200b9ff715da568cb4654036727c965d4332116af391bfb35ece807f3c32bc9b178345c7e9caf5b895f363f7542d46b9a850208e0b5ac48bd367e29b7d2f3e514bd14a104f42b59c00522f98c731611e89fe3e1791bbbbf43d80b0f9eb814014bb705e2f23041d1c05159b48a00"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x8, 0x1b, &(0x7f00000002c0)='Kvq\t\x00\x00\x00\x00', &(0x7f00000000c0)=""/27, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x1004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x102270, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x80) fgetxattr(r11, 0x0, &(0x7f0000000a00)=""/64, 0x40) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x0, 0x0, 0x4, 0xff, 0x1}, [@RTA_UID={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040d3}, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x58, &(0x7f00000004c0)=""/88, 0x41000, 0x12, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x231f5, r1, 0x1, &(0x7f0000000580)=[r3, r1, r1, r1, r1, r3], &(0x7f0000000680)=[{0x1, 0x2, 0xa, 0x7}], 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 20.943939ms ago: executing program 7 (id=10237): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) 20.664999ms ago: executing program 7 (id=10238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) socket$kcm(0x21, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x85, &(0x7f00000004c0)={[{@i_version}, {@noblock_validity}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nodelalloc}, {@nogrpid}]}, 0x6, 0x613, &(0x7f0000000c00)="$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") socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x2) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, 'B'}]}}}}}}}}, 0x0) 0s ago: executing program 3 (id=10239): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 997845][T32050] netlink: 399 bytes leftover after parsing attributes in process `syz.8.8297'. [ 938.011843][T32050] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 938.020189][T32050] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 938.077366][T32058] syzkaller0: entered promiscuous mode [ 938.083190][T32058] syzkaller0: entered allmulticast mode [ 938.146672][T32042] chnl_net:caif_netlink_parms(): no params data found [ 938.189139][T32042] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.196363][T32042] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.203949][T32042] bridge_slave_0: entered allmulticast mode [ 938.213719][T32042] bridge_slave_0: entered promiscuous mode [ 938.221306][T32042] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.228595][T32042] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.236522][T32042] bridge_slave_1: entered allmulticast mode [ 938.243349][T32042] bridge_slave_1: entered promiscuous mode [ 938.262509][T32042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.275580][T32042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.307486][T32042] team0: Port device team_slave_0 added [ 938.314528][T32042] team0: Port device team_slave_1 added [ 938.333966][T32042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.341056][T32042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.367647][T32042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.379574][T32042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.386801][T32042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.413363][T32042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.442372][T32042] hsr_slave_0: entered promiscuous mode [ 938.448747][T32042] hsr_slave_1: entered promiscuous mode [ 938.454991][T32042] debugfs: 'hsr0' already exists in 'hsr' [ 938.460955][T32042] Cannot create hsr debugfs directory [ 938.703597][T32078] loop7: detected capacity change from 0 to 512 [ 938.741396][T32042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 938.750748][T32078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.767120][T32042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 938.778969][T32042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 938.795716][T32042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 938.804123][T32076] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 938.814715][T32076] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 938.824275][T32076] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.8302: Failed to acquire dquot type 0 [ 938.875239][T32042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.887311][T23622] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.888648][T32042] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.908934][T19197] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.916382][T19197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.931646][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.939169][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.056807][T32042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.147131][T32042] veth0_vlan: entered promiscuous mode [ 939.156410][T32042] veth1_vlan: entered promiscuous mode [ 939.175118][T32042] veth0_macvtap: entered promiscuous mode [ 939.183704][T32042] veth1_macvtap: entered promiscuous mode [ 939.204562][T32042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.219170][T32042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.243870][ T3760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.252845][ T3760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.270200][ T3760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.288872][ T3760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.426468][T32110] loop0: detected capacity change from 0 to 1764 [ 939.433729][T32110] iso9660: Bad value for 'uid' [ 939.438738][T32110] iso9660: Bad value for 'uid' [ 939.448754][T32110] netlink: 399 bytes leftover after parsing attributes in process `syz.0.8307'. [ 939.458420][T32110] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 939.467827][T32110] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 939.537508][T32120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8311'. [ 939.672452][T32128] netlink: 'syz.0.8314': attribute type 1 has an invalid length. [ 939.684912][T32128] vlan2: entered allmulticast mode [ 939.691014][T32128] ip6gretap0: entered allmulticast mode [ 939.697565][T32128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8314'. [ 939.774861][T32135] syzkaller0: entered promiscuous mode [ 939.780965][T32135] syzkaller0: entered allmulticast mode [ 939.821921][T32140] loop7: detected capacity change from 0 to 1764 [ 939.829632][T32140] iso9660: Bad value for 'uid' [ 939.834732][T32140] iso9660: Bad value for 'uid' [ 939.845424][T32140] netlink: 399 bytes leftover after parsing attributes in process `syz.7.8320'. [ 939.855985][T32140] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 939.864411][T32140] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 939.927927][T32150] netlink: 'syz.0.8325': attribute type 1 has an invalid length. [ 939.939646][T32150] vlan3: entered allmulticast mode [ 939.945021][T32150] veth1: entered allmulticast mode [ 939.960162][T32150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8325'. [ 939.970869][T32150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8325'. [ 940.253841][T32169] loop0: detected capacity change from 0 to 128 [ 940.349567][ T28] audit: type=1326 audit(2000002984.706:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32168 comm="syz.0.8332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b8dac819 code=0x7ffc0000 [ 940.375927][ T28] audit: type=1326 audit(2000002984.706:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32168 comm="syz.0.8332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f71b8dac819 code=0x7ffc0000 [ 940.402291][ T28] audit: type=1326 audit(2000002984.706:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32168 comm="syz.0.8332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b8dac819 code=0x7ffc0000 [ 940.427624][ T28] audit: type=1326 audit(2000002984.706:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32168 comm="syz.0.8332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71b8dac819 code=0x7ffc0000 [ 940.454010][ T28] audit: type=1326 audit(2000002984.706:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32168 comm="syz.0.8332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b8dac819 code=0x7ffc0000 [ 940.494398][T32176] syzkaller0: entered promiscuous mode [ 940.500220][T32176] syzkaller0: entered allmulticast mode [ 940.534461][T32184] netlink: 'syz.8.8337': attribute type 1 has an invalid length. [ 940.561074][T32184] bond4: entered promiscuous mode [ 940.566327][T32184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 940.582102][T32184] vlan2: entered allmulticast mode [ 940.593954][T32184] bond4: entered allmulticast mode [ 941.570302][T32219] loop8: detected capacity change from 0 to 1024 [ 941.578762][T32219] EXT4-fs: Ignoring removed i_version option [ 941.585162][T32219] EXT4-fs: Ignoring removed bh option [ 941.592271][T32219] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 941.597357][T32218] syzkaller0: entered promiscuous mode [ 941.602566][T32219] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 941.618643][T32219] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 941.619804][T32218] syzkaller0: entered allmulticast mode [ 941.629565][T32219] EXT4-fs (loop8): orphan cleanup on readonly fs [ 941.652375][T32219] Quota error (device loop8): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 941.686073][T32219] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 941.701477][T32219] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 941.708287][T32219] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.8350: bad orphan inode 11 [ 941.718415][T32219] loop8: lost filesystem error report for type 5 error -117 [ 941.718626][T32219] ext4_test_bit(bit=10, block=1) = 0 [ 941.725973][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 941.725996][ C1] EXT4-fs (loop8): initial error at time 2000002986: ext4_orphan_get:1423 [ 941.726025][ C1] EXT4-fs (loop8): last error at time 2000002986: ext4_orphan_get:1423 [ 941.755573][T32219] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 941.789893][T23688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.582999][T32246] loop7: detected capacity change from 0 to 512 [ 942.604323][T32246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.619116][T32246] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 942.630136][T32246] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 942.640262][T32246] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.8360: Failed to acquire dquot type 0 [ 942.698430][T23622] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.737849][T32257] loop3: detected capacity change from 0 to 1024 [ 942.747168][T32257] EXT4-fs: Ignoring removed i_version option [ 942.755770][T32257] EXT4-fs: Ignoring removed bh option [ 942.767559][T32257] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 942.778478][T32257] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 942.789750][T32257] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 942.805039][T32257] EXT4-fs (loop3): orphan cleanup on readonly fs [ 942.814514][T32257] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 942.829903][T32257] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 942.842129][T32257] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8363: bad orphan inode 11 [ 942.854408][T32257] loop3: lost filesystem error report for type 5 error -117 [ 942.857241][T32257] ext4_test_bit(bit=10, block=1) = 0 [ 942.864596][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 942.864620][ C0] EXT4-fs (loop3): initial error at time 2000002987: ext4_orphan_get:1423 [ 942.864649][ C0] EXT4-fs (loop3): last error at time 2000002987: ext4_orphan_get:1423 [ 942.894947][T32257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 942.918458][T23480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.116093][T32266] loop8: detected capacity change from 0 to 128 [ 943.229644][T32287] loop3: detected capacity change from 0 to 512 [ 943.247263][T32287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.268153][T32287] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.8374: Failed to acquire dquot type 0 [ 943.341157][T23480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.384003][T32299] loop3: detected capacity change from 0 to 1024 [ 943.400022][T32299] EXT4-fs: Ignoring removed i_version option [ 943.408528][T32299] EXT4-fs: Ignoring removed bh option [ 943.427517][T32299] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 943.451961][T32299] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 943.462850][T32299] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 943.482133][T32299] EXT4-fs (loop3): orphan cleanup on readonly fs [ 943.510887][T32299] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 943.525966][T32299] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 943.533108][T32299] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8377: bad orphan inode 11 [ 943.543917][T32299] loop3: lost filesystem error report for type 5 error -117 [ 943.549581][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 943.563917][ C1] EXT4-fs (loop3): initial error at time 2000002987: ext4_orphan_get:1423 [ 943.573107][ C1] EXT4-fs (loop3): last error at time 2000002987: ext4_orphan_get:1423 [ 943.579648][T32299] ext4_test_bit(bit=10, block=1) = 0 [ 943.588079][T32299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 943.618732][T23480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.816178][T32317] syzkaller0: entered promiscuous mode [ 943.823464][T32317] syzkaller0: entered allmulticast mode [ 944.389416][T32336] loop3: detected capacity change from 0 to 1024 [ 944.407900][T32336] EXT4-fs: Ignoring removed mblk_io_submit option [ 944.514825][T32336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 944.531538][T32336] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.871245][T32343] loop8: detected capacity change from 0 to 1764 [ 944.883763][T32319] loop7: detected capacity change from 0 to 128 [ 944.910558][T32343] iso9660: Bad value for 'uid' [ 944.936489][T32343] iso9660: Bad value for 'uid' [ 944.991257][T32343] __nla_validate_parse: 3 callbacks suppressed [ 944.991346][T32343] netlink: 399 bytes leftover after parsing attributes in process `syz.8.8393'. [ 945.070268][T32343] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 945.137212][T32353] syzkaller0: entered promiscuous mode [ 945.144642][T32343] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 945.170650][T32353] syzkaller0: entered allmulticast mode [ 945.603071][T32377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.618216][T32377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.006471][T32378] loop7: detected capacity change from 0 to 2048 [ 946.013637][T32378] EXT4-fs: Ignoring removed i_version option [ 946.131444][T32378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.143791][T32378] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.369950][T23480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 948.173388][T32390] loop8: detected capacity change from 0 to 1764 [ 948.199392][T32390] iso9660: Bad value for 'uid' [ 948.231204][T32390] iso9660: Bad value for 'uid' [ 948.277646][T32389] netlink: 399 bytes leftover after parsing attributes in process `syz.8.8409'. [ 948.314640][T32389] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 948.349718][T32389] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 948.732415][ T3760] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.023824][T32411] loop3: detected capacity change from 0 to 1024 [ 949.043202][T32411] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.123560][T32411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 949.139532][T32411] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.314836][ T3760] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.424377][ T3760] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.522660][ T3760] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.655009][ T3760] bridge_slave_1: left allmulticast mode [ 949.661096][ T3760] bridge_slave_1: left promiscuous mode [ 949.666843][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.800196][T23622] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.534695][ T3760] bridge_slave_0: left allmulticast mode [ 950.541154][ T3760] bridge_slave_0: left promiscuous mode [ 950.549132][T23480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 950.555192][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.670748][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.680654][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.690760][ T3760] bond0 (unregistering): Released all slaves [ 950.709155][T32420] chnl_net:caif_netlink_parms(): no params data found [ 950.718321][T32456] syzkaller0: entered promiscuous mode [ 950.724091][T32456] syzkaller0: entered allmulticast mode [ 950.739655][ T3760] hsr_slave_0: left promiscuous mode [ 950.745419][ T3760] hsr_slave_1: left promiscuous mode [ 950.752462][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.768616][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.778673][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.793007][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.863201][ T3760] veth1_macvtap: left promiscuous mode [ 950.869970][ T3760] veth0_macvtap: left promiscuous mode [ 950.876172][ T3760] veth1_vlan: left promiscuous mode [ 950.881707][ T3760] veth0_vlan: left promiscuous mode [ 951.381201][T32476] loop9: detected capacity change from 0 to 128 [ 951.556209][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 951.556224][ T28] audit: type=1326 audit(2000002995.907:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 951.566566][ T28] audit: type=1326 audit(2000002995.917:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 951.569692][ T28] audit: type=1326 audit(2000002995.917:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 951.585716][ T28] audit: type=1326 audit(2000002995.937:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 951.589309][ T28] audit: type=1326 audit(2000002995.937:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 951.591488][ T28] audit: type=1326 audit(2000002995.947:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 951.658042][ T28] audit: type=1326 audit(2000002995.977:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 951.658072][ T28] audit: type=1326 audit(2000002996.007:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32463 comm="syz.9.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 952.034800][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 952.046317][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 952.845644][T32483] loop3: detected capacity change from 0 to 1024 [ 952.868884][T32483] EXT4-fs: Ignoring removed mblk_io_submit option [ 952.937786][T32483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 952.952496][T32483] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.982474][T32488] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 953.358177][T32420] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.386964][T32420] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.414561][T32420] bridge_slave_0: entered allmulticast mode [ 953.445016][T32420] bridge_slave_0: entered promiscuous mode [ 953.466930][T32420] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.485131][T32420] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.502806][T32420] bridge_slave_1: entered allmulticast mode [ 953.528919][T32420] bridge_slave_1: entered promiscuous mode [ 953.588618][T32420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.617503][T32420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.662803][T32420] team0: Port device team_slave_0 added [ 953.684795][T32420] team0: Port device team_slave_1 added [ 953.747987][T32420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.770747][T32420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.829480][T32420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.857814][T32420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.890369][T32420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.977522][T32420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.096210][T32420] hsr_slave_0: entered promiscuous mode [ 954.106466][T32420] hsr_slave_1: entered promiscuous mode [ 954.119891][T32420] debugfs: 'hsr0' already exists in 'hsr' [ 954.131310][T32420] Cannot create hsr debugfs directory [ 954.142070][T23480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 954.239717][T32554] syzkaller0: entered promiscuous mode [ 954.245877][T32554] syzkaller0: entered allmulticast mode [ 954.306849][T32559] loop8: detected capacity change from 0 to 1764 [ 954.316211][T32559] iso9660: Bad value for 'uid' [ 954.328945][T32559] iso9660: Bad value for 'uid' [ 954.354419][T32559] netlink: 399 bytes leftover after parsing attributes in process `syz.8.8449'. [ 954.383472][T32559] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 954.391947][T32559] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 954.487939][T32575] syzkaller0: entered promiscuous mode [ 954.493594][T32575] syzkaller0: entered allmulticast mode [ 954.620265][T32420] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 954.623555][T32420] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 954.645793][T32420] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 954.649520][T32580] loop7: detected capacity change from 0 to 128 [ 954.658450][T32420] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 954.664932][ T28] audit: type=1326 audit(2000002999.018:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32579 comm="syz.7.8454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a463c819 code=0x7ffc0000 [ 954.705070][ T28] audit: type=1326 audit(2000002999.018:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32579 comm="syz.7.8454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a463c819 code=0x7ffc0000 [ 954.705191][T32593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8457'. [ 954.866583][T32420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.883107][T32420] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.886766][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.897282][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.933436][T32612] syzkaller0: entered promiscuous mode [ 954.933459][T32612] syzkaller0: entered allmulticast mode [ 955.070984][T19197] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.071074][T19197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.183508][T32631] loop3: detected capacity change from 0 to 1764 [ 955.191847][T32631] iso9660: Bad value for 'uid' [ 955.191941][T32631] iso9660: Bad value for 'uid' [ 955.204849][T32631] netlink: 399 bytes leftover after parsing attributes in process `syz.3.8464'. [ 955.205037][T32631] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 955.205061][T32631] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 955.727174][T32420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.907614][T32420] veth0_vlan: entered promiscuous mode [ 955.933549][T32420] veth1_vlan: entered promiscuous mode [ 955.956864][T32420] veth0_macvtap: entered promiscuous mode [ 955.965984][T32420] veth1_macvtap: entered promiscuous mode [ 955.981070][T32420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.994379][T32420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.006502][ T3764] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.015519][ T3764] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.031972][ T3764] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.058029][ T3764] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.152816][T32678] loop7: detected capacity change from 0 to 128 [ 956.682403][T32734] syzkaller0: entered promiscuous mode [ 956.733474][T32734] syzkaller0: entered allmulticast mode [ 957.647633][T32726] chnl_net:caif_netlink_parms(): no params data found [ 957.737105][T32726] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.754959][T32726] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.772776][T32726] bridge_slave_0: entered allmulticast mode [ 957.788648][T32726] bridge_slave_0: entered promiscuous mode [ 957.800755][T32726] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.816038][T32726] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.832676][T32726] bridge_slave_1: entered allmulticast mode [ 957.846096][T32726] bridge_slave_1: entered promiscuous mode [ 957.895422][T32726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.918093][T32726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.965091][T32726] team0: Port device team_slave_0 added [ 957.982957][T32726] team0: Port device team_slave_1 added [ 958.022439][T32726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.037825][T32726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.095590][T32726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.128117][T32726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.135447][T32726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.174958][T32726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.205435][T32726] hsr_slave_0: entered promiscuous mode [ 958.211958][T32726] hsr_slave_1: entered promiscuous mode [ 958.218529][T32726] debugfs: 'hsr0' already exists in 'hsr' [ 958.224284][T32726] Cannot create hsr debugfs directory [ 958.336746][ T336] loop6: detected capacity change from 0 to 1024 [ 958.392777][ T336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8481'. [ 958.690653][T32726] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.865618][T32726] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.955567][T32726] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.094316][T32726] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.228019][T32726] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 959.241783][T32726] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 959.263054][T32726] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 959.284090][T32726] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 959.382321][T32726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.402343][T32726] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.415908][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.423319][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.448505][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.455897][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.589592][T32726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.785123][T32726] veth0_vlan: entered promiscuous mode [ 959.796957][T32726] veth1_vlan: entered promiscuous mode [ 959.838262][ T463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8493'. [ 959.850383][T32726] veth0_macvtap: entered promiscuous mode [ 959.866698][T32726] veth1_macvtap: entered promiscuous mode [ 959.892992][T32726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.914976][T32726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.928668][T19197] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.939258][T19197] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.950648][T19197] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.978171][T19197] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.998027][ T477] netlink: 'syz.8.8499': attribute type 1 has an invalid length. [ 960.021859][ T477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 960.562499][ T502] chnl_net:caif_netlink_parms(): no params data found [ 960.632460][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.643567][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.651382][ T502] bridge_slave_0: entered allmulticast mode [ 960.661822][ T502] bridge_slave_0: entered promiscuous mode [ 960.669424][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.676931][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.688001][ T502] bridge_slave_1: entered allmulticast mode [ 960.695267][ T502] bridge_slave_1: entered promiscuous mode [ 960.722411][ T502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.734028][ T502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.755019][ T502] team0: Port device team_slave_0 added [ 960.761831][ T502] team0: Port device team_slave_1 added [ 960.779088][ T502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.786568][ T502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.813201][ T502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.837350][ T502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.851759][ T502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.879464][ T502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.911313][ T502] hsr_slave_0: entered promiscuous mode [ 960.918163][ T502] hsr_slave_1: entered promiscuous mode [ 960.924668][ T502] debugfs: 'hsr0' already exists in 'hsr' [ 960.931974][ T502] Cannot create hsr debugfs directory [ 961.116099][ T541] syzkaller0: entered promiscuous mode [ 961.122813][ T541] syzkaller0: entered allmulticast mode [ 961.286625][ T502] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 961.310264][ T502] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 961.338665][ T502] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 961.363619][ T502] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 961.428473][ T574] syzkaller0: entered promiscuous mode [ 961.437606][ T574] syzkaller0: entered allmulticast mode [ 961.481230][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.488439][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.495855][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.502951][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.544470][T19197] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.560506][T19197] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.618630][ T502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.639603][ T502] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.652263][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.659568][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.681365][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.688527][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.792780][ T502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.899885][ T616] syzkaller0: entered promiscuous mode [ 961.911020][ T616] syzkaller0: entered allmulticast mode [ 962.001501][ T502] veth0_vlan: entered promiscuous mode [ 962.013796][ T502] veth1_vlan: entered promiscuous mode [ 962.045821][ T502] veth0_macvtap: entered promiscuous mode [ 962.046869][ T632] netlink: 'syz.3.8548': attribute type 1 has an invalid length. [ 962.059231][ T502] veth1_macvtap: entered promiscuous mode [ 962.075112][ T632] bond3: entered promiscuous mode [ 962.081589][ T632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 962.097667][ T502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.117272][ T632] bond3: (slave bridge3): making interface the new active one [ 962.125421][ T632] bridge3: entered promiscuous mode [ 962.134387][ T632] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 962.146411][ T502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.169498][T19197] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.188025][ T636] netlink: 'syz.3.8549': attribute type 1 has an invalid length. [ 962.191403][T19197] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.226290][ T636] bond4: entered promiscuous mode [ 962.231866][ T636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 962.246539][T19197] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.262516][T19197] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.278998][ T636] bond4: (slave bridge4): making interface the new active one [ 962.294322][ T636] bridge4: entered promiscuous mode [ 962.301240][ T636] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 962.414313][ T649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8553'. [ 963.278053][ T680] loop7: detected capacity change from 0 to 512 [ 963.307661][ T680] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 963.366362][ T656] chnl_net:caif_netlink_parms(): no params data found [ 963.408162][ T687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8565'. [ 963.470138][ T656] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.481899][ T656] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.489290][ T656] bridge_slave_0: entered allmulticast mode [ 963.495784][ T656] bridge_slave_0: entered promiscuous mode [ 963.503406][ T656] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.511233][ T656] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.519452][ T656] bridge_slave_1: entered allmulticast mode [ 963.531363][ T656] bridge_slave_1: entered promiscuous mode [ 963.551904][ T656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.563982][ T656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.590436][ T656] team0: Port device team_slave_0 added [ 963.597871][ T656] team0: Port device team_slave_1 added [ 963.615940][ T656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.623240][ T656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.650040][ T656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.661704][ T656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.668782][ T656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.696258][ T656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.730465][ T656] hsr_slave_0: entered promiscuous mode [ 963.737019][ T656] hsr_slave_1: entered promiscuous mode [ 963.743150][ T656] debugfs: 'hsr0' already exists in 'hsr' [ 963.753065][ T656] Cannot create hsr debugfs directory [ 963.827315][ T656] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.901696][ T656] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.958065][ T656] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.066311][ T656] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.051184][ T656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 965.060967][ T656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 965.082057][ T656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 965.107542][ T733] loop7: detected capacity change from 0 to 1024 [ 965.139889][ T656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 965.237507][ T733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8577'. [ 965.342278][ T656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.375447][ T656] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.399383][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.406879][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.445248][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.452565][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.490481][ T656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 965.522880][ T656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 965.929807][ T656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.066961][ T656] veth0_vlan: entered promiscuous mode [ 966.083004][ T794] loop7: detected capacity change from 0 to 1024 [ 966.099118][ T656] veth1_vlan: entered promiscuous mode [ 966.160662][ T656] veth0_macvtap: entered promiscuous mode [ 966.165747][ T656] veth1_macvtap: entered promiscuous mode [ 966.179548][ T656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.181754][ T656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.233590][ T4259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.259138][ T4259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.268502][ T4259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.268549][ T4259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.280216][ T794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8594'. [ 966.452235][ T807] syzkaller0: entered promiscuous mode [ 966.452393][ T807] syzkaller0: entered allmulticast mode [ 967.088525][ T817] loop6: detected capacity change from 0 to 128 [ 967.368696][ T819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8601'. [ 967.744599][ T849] syzkaller0: entered promiscuous mode [ 967.764625][ T849] syzkaller0: entered allmulticast mode [ 967.775686][ T851] loop3: detected capacity change from 0 to 1024 [ 967.802131][ T851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8614'. [ 968.315173][ T875] syzkaller0: entered promiscuous mode [ 968.323345][ T875] syzkaller0: entered allmulticast mode [ 968.791421][ T894] loop8: detected capacity change from 0 to 1024 [ 969.026831][ T904] syzkaller0: entered promiscuous mode [ 969.056217][ T904] syzkaller0: entered allmulticast mode [ 969.489740][ T947] loop7: detected capacity change from 0 to 512 [ 969.498475][ T947] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 970.031299][ T965] syzkaller0: entered promiscuous mode [ 970.036998][ T965] syzkaller0: entered allmulticast mode [ 970.127054][ T967] loop8: detected capacity change from 0 to 1024 [ 970.227748][ T973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8658'. [ 970.296811][ T977] netlink: 'syz.6.8660': attribute type 1 has an invalid length. [ 970.319338][ T977] bond1: entered promiscuous mode [ 970.324713][ T977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 970.368809][ T977] bond1: (slave bridge1): making interface the new active one [ 970.379494][ T977] bridge1: entered promiscuous mode [ 970.387119][ T977] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 970.611843][ T979] loop9: detected capacity change from 0 to 128 [ 970.685357][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 970.685375][ T28] audit: type=1326 audit(2000003015.040:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 970.738629][ T1005] loop8: detected capacity change from 0 to 128 [ 970.745180][ T28] audit: type=1326 audit(2000003015.040:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 970.777231][ T1005] FAT-fs (loop8): Directory bread(block 32) failed [ 970.783237][ T28] audit: type=1326 audit(2000003015.040:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 970.788270][ T1008] loop6: detected capacity change from 0 to 1024 [ 970.808535][ T28] audit: type=1326 audit(2000003015.060:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 970.814516][ T1005] FAT-fs (loop8): Directory bread(block 33) failed [ 970.865255][ T28] audit: type=1326 audit(2000003015.060:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 970.898651][ T1005] FAT-fs (loop8): Directory bread(block 34) failed [ 970.913134][ T1005] FAT-fs (loop8): Directory bread(block 35) failed [ 970.924645][ T1005] FAT-fs (loop8): Directory bread(block 36) failed [ 970.947097][ T1005] FAT-fs (loop8): Directory bread(block 37) failed [ 970.953813][ T28] audit: type=1326 audit(2000003015.070:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 970.964724][ T1005] FAT-fs (loop8): Directory bread(block 38) failed [ 971.005231][ T28] audit: type=1326 audit(2000003015.070:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 971.006132][ T1005] FAT-fs (loop8): Directory bread(block 39) failed [ 971.046358][ T28] audit: type=1326 audit(2000003015.070:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.9.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 971.053154][ T1005] FAT-fs (loop8): Directory bread(block 40) failed [ 971.085720][ T1005] FAT-fs (loop8): Directory bread(block 41) failed [ 971.663090][ T1069] loop8: detected capacity change from 0 to 1024 [ 971.674792][ T1069] EXT4-fs: Ignoring removed i_version option [ 971.689978][ T1069] EXT4-fs: Ignoring removed bh option [ 971.696031][ T1069] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 971.706502][ T1069] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 971.725538][ T1069] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 972.196030][ T1069] EXT4-fs (loop8): orphan cleanup on readonly fs [ 972.202874][ T1069] Quota error (device loop8): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 972.215222][ T1069] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 972.268977][ T1069] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 972.291574][ T1069] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.8686: bad orphan inode 11 [ 972.330443][ T1069] loop8: lost filesystem error report for type 5 error -117 [ 972.330580][ T1069] ext4_test_bit(bit=10, block=1) = 0 [ 972.338081][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 972.338102][ C1] EXT4-fs (loop8): initial error at time 2000003016: ext4_orphan_get:1423 [ 972.338143][ C1] EXT4-fs (loop8): last error at time 2000003016: ext4_orphan_get:1423 [ 972.372627][ T1069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 972.400098][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.845100][ T1113] loop3: detected capacity change from 0 to 128 [ 972.937299][ T1122] loop8: detected capacity change from 0 to 1024 [ 972.944371][ T1122] EXT4-fs: Ignoring removed i_version option [ 972.951595][ T1122] EXT4-fs: Ignoring removed bh option [ 972.969976][ T1122] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 972.988057][ T1122] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 973.021021][ T1122] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 973.033355][ T1122] EXT4-fs (loop8): orphan cleanup on readonly fs [ 973.051346][ T1122] Quota error (device loop8): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 973.066864][ T1122] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 973.085305][ T1122] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 973.094166][ T1122] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.8710: bad orphan inode 11 [ 973.105035][ T1122] loop8: lost filesystem error report for type 5 error -117 [ 973.105652][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 973.115906][ T1122] ext4_test_bit(bit=10, block=1) = 0 [ 973.119540][ C0] EXT4-fs (loop8): initial error at time 2000003017: ext4_orphan_get:1423 [ 973.125264][ T1122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 973.133651][ C0] EXT4-fs (loop8): last error at time 2000003017: ext4_orphan_get:1423 [ 973.224003][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.425844][ T1143] loop7: detected capacity change from 0 to 128 [ 974.406163][ T1176] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8732'. [ 974.498069][ T1181] loop8: detected capacity change from 0 to 512 [ 974.568903][ T1181] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 974.711443][ T1192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8740'. [ 974.764324][ T1201] netlink: 'syz.7.8744': attribute type 1 has an invalid length. [ 974.784154][ T1201] bond1: entered promiscuous mode [ 974.792132][ T1201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 974.815579][ T1201] bond1: (slave bridge1): making interface the new active one [ 974.823800][ T1201] bridge1: entered promiscuous mode [ 974.830754][ T1201] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 974.995267][ T1210] syzkaller0: entered promiscuous mode [ 975.008992][ T1210] syzkaller0: entered allmulticast mode [ 975.015018][ T1216] loop8: detected capacity change from 0 to 512 [ 975.017397][ T1218] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8750'. [ 975.023325][ T1216] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 975.141316][ T1225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=1225 comm=syz.8.8752 [ 975.160176][ T1225] netlink: 27 bytes leftover after parsing attributes in process `syz.8.8752'. [ 975.302746][ T1232] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8755'. [ 975.691099][ T1245] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8759'. [ 975.807740][ T1249] loop8: detected capacity change from 0 to 128 [ 975.841643][ T1251] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8762'. [ 976.034188][ T1253] syzkaller0: entered promiscuous mode [ 976.075093][ T1253] syzkaller0: entered allmulticast mode [ 976.088410][ T1270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8768'. [ 976.110435][ T1269] loop9: detected capacity change from 0 to 1024 [ 976.875639][ T1289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.904822][ T1289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.200977][ T1293] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8774'. [ 977.538099][ T1298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8776'. [ 979.969017][ T1322] loop8: detected capacity change from 0 to 128 [ 980.120522][ T1331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1331 comm=syz.8.8790 [ 980.140589][ T1330] loop9: detected capacity change from 0 to 1024 [ 980.275101][ T1334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1334 comm=syz.8.8790 [ 980.288335][ T1330] EXT4-fs: Ignoring removed i_version option [ 980.294545][ T1330] EXT4-fs: Ignoring removed bh option [ 980.392836][ T1330] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 980.437817][ T1330] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 980.448499][ T1330] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 980.557503][ T1330] EXT4-fs (loop9): orphan cleanup on readonly fs [ 980.566689][ T1330] Quota error (device loop9): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 980.675525][ T1348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.688443][ T1348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.550806][ T1330] EXT4-fs warning (device loop9): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 981.579110][ T1330] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 981.586054][ T1330] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.8789: bad orphan inode 11 [ 981.596211][ T1330] loop9: lost filesystem error report for type 5 error -117 [ 981.597127][ T1330] ext4_test_bit(bit=10, block=1) = 0 [ 981.604611][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 981.604634][ C1] EXT4-fs (loop9): initial error at time 2000003025: ext4_orphan_get:1423 [ 981.604657][ C1] EXT4-fs (loop9): last error at time 2000003025: ext4_orphan_get:1423 [ 981.753242][ T1362] netlink: 'syz.7.8802': attribute type 1 has an invalid length. [ 981.816837][ T1362] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.8802'. [ 982.141470][ T1370] loop6: detected capacity change from 0 to 128 [ 982.459627][ T1377] loop7: detected capacity change from 0 to 128 [ 982.576665][ T1330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 982.657223][ T28] audit: type=1326 audit(2000003027.021:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 982.727339][T30837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.840221][ T28] audit: type=1326 audit(2000003027.021:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 982.864578][ T28] audit: type=1326 audit(2000003027.071:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 982.900719][ T28] audit: type=1326 audit(2000003027.071:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 982.934447][ T1380] netlink: 57 bytes leftover after parsing attributes in process `syz.9.8807'. [ 982.961189][ T28] audit: type=1326 audit(2000003027.071:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 982.965026][ T1380] netlink: 140 bytes leftover after parsing attributes in process `syz.9.8807'. [ 982.988525][ T28] audit: type=1326 audit(2000003027.071:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 983.004716][ T1382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=1382 comm=syz.7.8808 [ 983.018525][ T28] audit: type=1326 audit(2000003027.071:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 983.034384][ T1380] netlink: 57 bytes leftover after parsing attributes in process `syz.9.8807'. [ 983.085775][ T1383] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8808'. [ 983.102177][ T28] audit: type=1326 audit(2000003027.071:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1367 comm="syz.7.8804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 983.186491][ T1389] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8811'. [ 983.293097][ T1400] netlink: 'syz.9.8816': attribute type 1 has an invalid length. [ 983.339681][ T1400] bond1: entered promiscuous mode [ 983.353134][ T1400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 983.435608][ T1411] loop6: detected capacity change from 0 to 128 [ 984.481118][ T1431] loop8: detected capacity change from 0 to 1024 [ 984.525133][ T1431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1431 comm=syz.8.8830 [ 984.582377][ T1442] netlink: 'syz.6.8835': attribute type 1 has an invalid length. [ 984.611978][ T1442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 984.830295][ T1464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8841'. [ 984.914847][ T1466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.927222][ T1466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.302743][ T1478] netlink: 'syz.7.8846': attribute type 1 has an invalid length. [ 985.311330][ T1478] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.8846'. [ 985.332237][ T1478] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.8846'. [ 986.298919][ T1493] loop7: detected capacity change from 0 to 512 [ 986.407515][ T1493] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 987.021460][ T1507] loop9: detected capacity change from 0 to 1024 [ 987.063825][ T1485] loop8: detected capacity change from 0 to 128 [ 987.087056][ T1507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1507 comm=syz.9.8859 [ 987.174251][ T28] audit: type=1326 audit(2000003031.532:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.228483][ T28] audit: type=1326 audit(2000003031.562:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.263200][ T28] audit: type=1326 audit(2000003031.562:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.288668][ T28] audit: type=1326 audit(2000003031.572:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.332314][ T28] audit: type=1326 audit(2000003031.572:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.375824][ T1519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8864'. [ 987.394046][ T28] audit: type=1326 audit(2000003031.582:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.448433][ T28] audit: type=1326 audit(2000003031.582:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.474682][ T28] audit: type=1326 audit(2000003031.582:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.8.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 987.665931][ T1540] loop3: detected capacity change from 0 to 512 [ 987.677538][ T1540] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 988.188329][ T1566] loop6: detected capacity change from 0 to 1024 [ 988.258660][ T1566] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8877'. [ 989.579809][ T1629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.593600][ T1629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.244673][ T1629] loop3: detected capacity change from 0 to 2048 [ 990.262352][ T1629] EXT4-fs: Ignoring removed i_version option [ 990.377200][ T1629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.392776][ T1629] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.533024][ T1637] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8908'. [ 991.147600][ T1647] syzkaller0: entered promiscuous mode [ 991.168280][ T1647] syzkaller0: entered allmulticast mode [ 991.487598][ T1654] netlink: 'syz.8.8914': attribute type 1 has an invalid length. [ 991.535423][ T1654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 991.927711][ T1689] netlink: 'syz.8.8930': attribute type 1 has an invalid length. [ 991.943847][ T1689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 992.069905][ T1693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.082753][ T1693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.592370][ T656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.978953][ T1699] netlink: 'syz.9.8935': attribute type 1 has an invalid length. [ 993.077804][ T1703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1703 comm=syz.3.8933 [ 993.098134][ T1699] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.8935'. [ 993.159765][ T1706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1706 comm=syz.3.8933 [ 993.187906][ T1705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28488 sclass=netlink_route_socket pid=1705 comm=syz.9.8935 [ 994.266125][ T1723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.278385][ T1723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.970274][ T1723] loop3: detected capacity change from 0 to 2048 [ 994.987977][ T1723] EXT4-fs: Ignoring removed i_version option [ 995.094733][ T1723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.110133][ T1723] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.027340][ T1757] netlink: 'syz.7.8955': attribute type 1 has an invalid length. [ 996.037276][ T1758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1758 comm=syz.8.8956 [ 996.213460][ T1760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1760 comm=syz.8.8956 [ 996.250569][ T1757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 996.299623][ T1770] netlink: 'syz.7.8960': attribute type 1 has an invalid length. [ 996.308396][ T1770] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.8960'. [ 996.438827][ T1790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1790 comm=syz.7.8970 [ 996.452318][ T1790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1790 comm=syz.7.8970 [ 996.493930][ T1793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8971'. [ 996.555612][ T1803] netlink: 'syz.6.8975': attribute type 1 has an invalid length. [ 996.563861][ T1803] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.8975'. [ 996.601376][ T1807] syzkaller0: entered promiscuous mode [ 996.607121][ T1807] syzkaller0: entered allmulticast mode [ 996.711069][ T1819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1819 comm=syz.7.8983 [ 996.724191][ T1819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1819 comm=syz.7.8983 [ 996.770504][ T1823] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8985'. [ 996.894405][T19197] bridge_slave_1: left allmulticast mode [ 996.900400][T19197] bridge_slave_1: left promiscuous mode [ 996.906706][T19197] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.916687][T19197] bridge_slave_0: left allmulticast mode [ 996.928919][T19197] bridge_slave_0: left promiscuous mode [ 996.935948][T19197] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.983900][ T1831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=1831 comm=syz.9.8988 [ 996.997638][ T1831] netlink: 7 bytes leftover after parsing attributes in process `syz.9.8988'. [ 997.055244][T19197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.064682][T19197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.074111][T19197] bond0 (unregistering): Released all slaves [ 997.081813][T19197] bond1 (unregistering): (slave veth3): Releasing active interface [ 997.090571][T19197] bond1 (unregistering): Released all slaves [ 997.099388][T19197] bond2 (unregistering): (slave veth5): Releasing active interface [ 997.108165][T19197] bond2 (unregistering): Released all slaves [ 997.121879][T19197] bond3 (unregistering): Released all slaves [ 997.138253][T19197] bond4 (unregistering): Released all slaves [ 997.148034][T19197] bond5 (unregistering): Released all slaves [ 997.160850][ T1835] netlink: 'syz.8.8990': attribute type 1 has an invalid length. [ 997.169528][ T1835] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.8990'. [ 997.212174][T19197] hsr_slave_0: left promiscuous mode [ 997.219872][T19197] hsr_slave_1: left promiscuous mode [ 997.226290][T19197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.256558][T19197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.292953][ T656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.344377][T19197] team0 (unregistering): Port device team_slave_1 removed [ 997.356509][T19197] team0 (unregistering): Port device team_slave_0 removed [ 997.401417][ T1844] syzkaller0: entered promiscuous mode [ 997.407130][ T1844] syzkaller0: entered allmulticast mode [ 998.235078][ T1874] netlink: 'syz.3.9006': attribute type 1 has an invalid length. [ 998.265172][ T1874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 998.268010][ T1879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1879 comm=syz.6.9008 [ 998.295636][ T1879] netlink: 91 bytes leftover after parsing attributes in process `syz.6.9008'. [ 998.321084][ T1876] syzkaller0: entered promiscuous mode [ 998.342672][ T1876] syzkaller0: entered allmulticast mode [ 998.678221][ T1910] netlink: 'syz.7.9022': attribute type 1 has an invalid length. [ 998.686441][ T1910] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.9022'. [ 998.964882][ T1919] syzkaller0: entered promiscuous mode [ 998.976150][ T1919] syzkaller0: entered allmulticast mode [ 999.290308][ T1933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9031'. [ 999.459537][ T1938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1938 comm=syz.3.9033 [ 999.472714][ T1938] netlink: 91 bytes leftover after parsing attributes in process `syz.3.9033'. [ 999.792224][ T1952] syzkaller0: entered promiscuous mode [ 999.803225][ T1952] syzkaller0: entered allmulticast mode [ 1000.464134][ T1960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1960 comm=syz.6.9044 [ 1000.478473][ T1960] netlink: 27 bytes leftover after parsing attributes in process `syz.6.9044'. [ 1000.898877][ T1982] netlink: 244 bytes leftover after parsing attributes in process `syz.6.9054'. [ 1001.005218][ T1989] syzkaller0: entered promiscuous mode [ 1001.010900][ T1989] syzkaller0: entered allmulticast mode [ 1001.748718][ T2001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2001 comm=syz.8.9061 [ 1001.761841][ T2001] netlink: 27 bytes leftover after parsing attributes in process `syz.8.9061'. [ 1001.977850][ T2010] netlink: 244 bytes leftover after parsing attributes in process `syz.8.9067'. [ 1002.038904][ T3764] dv_s: left allmulticast mode [ 1002.056791][ T3764] dv_s: left promiscuous mode [ 1002.072391][ T3764] bridge0: port 2(dv_s) entered disabled state [ 1002.085764][ T2021] loop8: detected capacity change from 0 to 1024 [ 1002.187938][ T3764] bridge_slave_0: left allmulticast mode [ 1002.211946][ T3764] bridge_slave_0: left promiscuous mode [ 1002.217667][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.242883][ T2033] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9072'. [ 1002.334191][ T2040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.349490][ T2040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.991649][ T2040] loop9: detected capacity change from 0 to 2048 [ 1003.010980][ T2040] EXT4-fs: Ignoring removed i_version option [ 1003.121576][ T2040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.143945][ T2040] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.424513][ T3764] gretap0 (unregistering): left allmulticast mode [ 1003.511378][ T2061] netlink: 244 bytes leftover after parsing attributes in process `syz.7.9083'. [ 1003.535807][ T3764] bridge0 (unregistering): left allmulticast mode [ 1003.714856][ T3764] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1003.727318][ T3764] bridge1 (unregistering): left promiscuous mode [ 1003.774105][ T3764] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1003.782744][ T3764] bridge2 (unregistering): left promiscuous mode [ 1003.835056][ T3764] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1003.847215][ T3764] bridge3 (unregistering): left promiscuous mode [ 1003.894385][ T3764] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 1003.902874][ T3764] bridge4 (unregistering): left promiscuous mode [ 1003.958617][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.969018][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.979453][ T3764] bond0 (unregistering): Released all slaves [ 1003.991451][ T3764] bond1 (unregistering): Released all slaves [ 1004.004007][ T3764] bond2 (unregistering): Released all slaves [ 1004.015740][ T3764] bond3 (unregistering): Released all slaves [ 1004.029391][ T3764] bond4 (unregistering): Released all slaves [ 1004.095345][ T2054] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1004.104626][ T3764] hsr_slave_0: left promiscuous mode [ 1004.123929][ T3764] hsr_slave_1: left promiscuous mode [ 1004.129653][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.148022][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.316149][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 1004.327030][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 1004.416667][ T2094] loop6: detected capacity change from 0 to 1024 [ 1004.705583][ T2089] loop7: detected capacity change from 0 to 128 [ 1004.893883][ T28] audit: type=1326 audit(2000003049.264:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.021253][ T28] audit: type=1326 audit(2000003049.284:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.149633][ T28] audit: type=1326 audit(2000003049.304:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.201313][ T28] audit: type=1326 audit(2000003049.334:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.253669][ T28] audit: type=1326 audit(2000003049.334:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.289233][ T28] audit: type=1326 audit(2000003049.334:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.315470][ T28] audit: type=1326 audit(2000003049.334:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.444655][T30837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.539127][ T28] audit: type=1326 audit(2000003049.334:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.7.9093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1005.585632][ T2105] bond2: entered promiscuous mode [ 1005.603750][ T2105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1006.154714][ T2128] loop7: detected capacity change from 0 to 1024 [ 1006.368722][ T2132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.382964][ T2132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.528516][ T2134] program syz.9.9109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1006.771963][ T2139] loop8: detected capacity change from 0 to 2048 [ 1006.779208][ T2139] EXT4-fs: Ignoring removed i_version option [ 1006.811873][ T2139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.824444][ T2139] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.096316][ T2146] netlink: 'syz.9.9113': attribute type 1 has an invalid length. [ 1007.129497][ T2146] netlink: 144 bytes leftover after parsing attributes in process `syz.9.9113'. [ 1007.273440][T19197] bridge_slave_1: left allmulticast mode [ 1007.281514][T19197] bridge_slave_1: left promiscuous mode [ 1007.287233][T19197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.296088][T19197] bridge_slave_0: left allmulticast mode [ 1007.907024][ T2161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2161 comm=syz.7.9116 [ 1007.959479][ T2162] netlink: 27 bytes leftover after parsing attributes in process `syz.7.9116'. [ 1008.251965][T19197] bridge_slave_0: left promiscuous mode [ 1008.258405][T19197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.696117][T19197] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1008.706004][T19197] bridge1 (unregistering): left promiscuous mode [ 1008.712646][T19197] bridge1 (unregistering): left allmulticast mode [ 1008.762282][T19197] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1008.771779][T19197] bridge2 (unregistering): left promiscuous mode [ 1008.778158][T19197] bridge2 (unregistering): left allmulticast mode [ 1008.822295][T19197] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1008.830637][T19197] bridge3 (unregistering): left promiscuous mode [ 1008.873527][T19197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.883957][T19197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.893945][T19197] bond0 (unregistering): Released all slaves [ 1008.903706][T19197] bond1 (unregistering): Released all slaves [ 1008.915171][T19197] bond2 (unregistering): Released all slaves [ 1008.928968][T19197] bond3 (unregistering): Released all slaves [ 1008.994001][T19197] hsr_slave_0: left promiscuous mode [ 1009.001412][T19197] hsr_slave_1: left promiscuous mode [ 1009.007421][T19197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.033345][T19197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.067089][T19197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.082240][ T2170] loop7: detected capacity change from 0 to 256 [ 1009.085989][T19197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.091709][ T2170] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1009.117114][ T2170] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1009.129070][T19197] veth0_macvtap: left promiscuous mode [ 1009.138845][T19197] veth0_vlan: left promiscuous mode [ 1009.276574][ T2184] netlink: 'syz.6.9127': attribute type 1 has an invalid length. [ 1009.293456][ T2184] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9127'. [ 1009.308202][T19197] team0 (unregistering): Port device team_slave_1 removed [ 1009.318448][T19197] team0 (unregistering): Port device team_slave_0 removed [ 1009.384835][ T2186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2186 comm=syz.6.9128 [ 1009.398133][ T2186] netlink: 27 bytes leftover after parsing attributes in process `syz.6.9128'. [ 1009.544167][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.699260][ T2206] netlink: 'syz.8.9138': attribute type 1 has an invalid length. [ 1009.712352][ T2206] netlink: 144 bytes leftover after parsing attributes in process `syz.8.9138'. [ 1009.826725][ T2213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2213 comm=syz.9.9141 [ 1009.840066][ T2213] netlink: 27 bytes leftover after parsing attributes in process `syz.9.9141'. [ 1009.870267][ T2211] loop8: detected capacity change from 0 to 128 [ 1009.904008][ T28] audit: type=1326 audit(2000003054.275:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1009.966687][ T28] audit: type=1326 audit(2000003054.275:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1009.990600][ T28] audit: type=1326 audit(2000003054.295:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1010.014404][ T28] audit: type=1326 audit(2000003054.305:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1010.038253][ T28] audit: type=1326 audit(2000003054.305:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1010.062742][ T28] audit: type=1326 audit(2000003054.315:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1010.112009][ T2223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.124362][ T2223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.141629][ T28] audit: type=1326 audit(2000003054.315:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1010.174023][ T28] audit: type=1326 audit(2000003054.315:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.8.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1010.841226][ T2223] loop9: detected capacity change from 0 to 2048 [ 1010.857940][ T2223] EXT4-fs: Ignoring removed i_version option [ 1010.939735][ T2223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.956834][ T2223] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.086227][ T2238] netlink: 'syz.6.9150': attribute type 1 has an invalid length. [ 1011.153798][ T2238] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9150'. [ 1011.339697][ T2249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2249 comm=syz.8.9153 [ 1011.369154][ T2249] netlink: 27 bytes leftover after parsing attributes in process `syz.8.9153'. [ 1012.228405][ T2287] bond3: entered promiscuous mode [ 1012.233981][ T2287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1012.384494][ T2301] syzkaller0: entered promiscuous mode [ 1012.390046][ T2301] syzkaller0: entered allmulticast mode [ 1012.566392][ T2311] loop6: detected capacity change from 0 to 1024 [ 1012.584735][ T2311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9185'. [ 1013.006257][T30837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.015663][ T2323] syzkaller0: entered promiscuous mode [ 1013.021361][ T2323] syzkaller0: entered allmulticast mode [ 1013.108236][ T2333] loop3: detected capacity change from 0 to 512 [ 1013.152415][ T2338] loop8: detected capacity change from 0 to 256 [ 1013.159375][ T2338] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1013.173522][ T2338] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1013.243016][ T2347] netlink: 'syz.3.9202': attribute type 1 has an invalid length. [ 1013.251074][ T2347] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9202'. [ 1013.381718][ T2356] syzkaller0: entered promiscuous mode [ 1013.387276][ T2356] syzkaller0: entered allmulticast mode [ 1013.497983][ T2358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.510223][ T2358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.937667][ T2358] loop7: detected capacity change from 0 to 2048 [ 1013.954467][ T2358] EXT4-fs: Ignoring removed i_version option [ 1014.128097][ T2358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.143042][ T2358] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1015.391069][ T2377] loop3: detected capacity change from 0 to 256 [ 1015.397978][ T2377] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1015.494813][ T2377] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1015.527775][ T2381] netlink: 'syz.9.9214': attribute type 1 has an invalid length. [ 1015.539747][ T2381] netlink: 144 bytes leftover after parsing attributes in process `syz.9.9214'. [ 1015.604554][ T2387] syzkaller0: entered promiscuous mode [ 1015.615377][ T2387] syzkaller0: entered allmulticast mode [ 1016.276328][ T2431] syzkaller0: entered promiscuous mode [ 1016.282397][ T2431] syzkaller0: entered allmulticast mode [ 1016.561768][T32726] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.811504][ T2459] syzkaller0: entered promiscuous mode [ 1016.825467][ T2459] syzkaller0: entered allmulticast mode [ 1017.110774][ T2478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.123828][ T2478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.552871][ T2478] loop8: detected capacity change from 0 to 2048 [ 1017.573951][ T2478] EXT4-fs: Ignoring removed i_version option [ 1017.812264][ T2478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.827887][ T2478] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.588007][ T2511] loop7: detected capacity change from 0 to 1024 [ 1018.643379][ T2511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9269'. [ 1019.236099][ T2538] loop6: detected capacity change from 0 to 1024 [ 1019.260856][ T2541] loop9: detected capacity change from 0 to 256 [ 1019.268344][ T2541] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1019.287972][ T2541] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1019.329485][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9282'. [ 1019.588854][ T2565] loop9: detected capacity change from 0 to 256 [ 1019.596934][ T2565] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1019.610458][ T2565] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1019.809027][ T2589] loop9: detected capacity change from 0 to 1024 [ 1019.847870][ T2589] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9307'. [ 1020.030478][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.433256][ T2637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.445119][ T2637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.869353][ T2637] loop8: detected capacity change from 0 to 2048 [ 1020.888680][ T2637] EXT4-fs: Ignoring removed i_version option [ 1021.120764][ T2637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.135973][ T2637] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.424289][ T2655] sit0: entered promiscuous mode [ 1021.487469][ T2655] netlink: 'syz.9.9333': attribute type 1 has an invalid length. [ 1021.584339][ T2655] netlink: 9 bytes leftover after parsing attributes in process `syz.9.9333'. [ 1021.916988][ T2669] bond3: entered promiscuous mode [ 1021.976465][ T2669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1022.326068][ T2685] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.9346'. [ 1022.490045][ T2704] bond3: entered promiscuous mode [ 1022.503769][ T2704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1022.650094][ T2715] loop3: detected capacity change from 0 to 1024 [ 1022.672554][ T2715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9360'. [ 1022.742812][ T2721] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.9363'. [ 1022.995526][ T2731] bond4: entered promiscuous mode [ 1023.001091][ T2731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1023.023317][ T2733] syzkaller0: entered promiscuous mode [ 1023.042848][ T2733] syzkaller0: entered allmulticast mode [ 1023.106602][ T2738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9371'. [ 1023.215767][ T2745] netlink: 16410 bytes leftover after parsing attributes in process `syz.9.9374'. [ 1023.223940][ T2748] loop3: detected capacity change from 0 to 1024 [ 1023.263454][ T2748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9376'. [ 1023.394851][ T2759] netlink: 43 bytes leftover after parsing attributes in process `syz.6.9381'. [ 1023.424142][ T2764] loop7: detected capacity change from 0 to 256 [ 1023.435372][ T2764] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1023.453509][ T2764] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.507546][ T2768] loop6: detected capacity change from 0 to 256 [ 1023.515505][ T2768] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1023.531369][ T2768] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.590041][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.667046][ T2777] netlink: 16410 bytes leftover after parsing attributes in process `syz.8.9388'. [ 1023.676777][ T2778] netlink: 'syz.6.9390': attribute type 1 has an invalid length. [ 1023.709862][ T2778] bond5: entered promiscuous mode [ 1023.715303][ T2778] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1023.791106][ T2778] bond5: (slave bridge2): making interface the new active one [ 1023.799287][ T2778] bridge2: entered promiscuous mode [ 1023.806092][ T2778] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1023.820831][ T2795] loop8: detected capacity change from 0 to 256 [ 1023.823018][ T2791] netlink: 43 bytes leftover after parsing attributes in process `syz.7.9396'. [ 1023.827943][ T2795] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1023.860516][ T2795] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.985595][ T2800] loop3: detected capacity change from 0 to 256 [ 1024.000365][ T2800] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1024.011874][ T2805] loop8: detected capacity change from 0 to 1024 [ 1024.021188][ T2800] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1024.119803][ T2810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.134175][ T2810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.771601][ T2810] loop6: detected capacity change from 0 to 2048 [ 1024.790632][ T2810] EXT4-fs: Ignoring removed i_version option [ 1024.854467][ T2810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.869179][ T2810] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.386928][ T2833] loop3: detected capacity change from 0 to 256 [ 1025.396037][ T2834] sit0: entered promiscuous mode [ 1025.408925][ T2833] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1025.425621][ T2834] netlink: 'syz.8.9413': attribute type 1 has an invalid length. [ 1025.465246][ T2833] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1025.948216][ T2849] loop8: detected capacity change from 0 to 256 [ 1025.967151][ T2849] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1025.995334][ T2849] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.081896][ T2861] loop3: detected capacity change from 0 to 256 [ 1026.106793][ T2861] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1026.154540][ T2861] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.270859][ T2880] loop3: detected capacity change from 0 to 256 [ 1026.278137][ T2880] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1026.303755][ T2880] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.473117][ T2899] loop8: detected capacity change from 0 to 256 [ 1026.480836][ T2899] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1026.495006][ T2899] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.594749][ T2910] loop8: detected capacity change from 0 to 256 [ 1026.603879][ T2910] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1026.621263][ T2910] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.729745][ T2922] loop8: detected capacity change from 0 to 256 [ 1026.737219][ T2922] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1026.750639][ T2922] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1026.958690][ T2935] __nla_validate_parse: 6 callbacks suppressed [ 1026.958710][ T2935] netlink: 43 bytes leftover after parsing attributes in process `syz.9.9460'. [ 1026.991743][ T2937] netlink: 16410 bytes leftover after parsing attributes in process `syz.9.9461'. [ 1027.005218][T32420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.070537][ T2941] loop6: detected capacity change from 0 to 256 [ 1027.083558][ T2941] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1027.110977][ T2941] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1027.273036][ T2952] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9468'. [ 1027.316161][ T2958] netlink: 43 bytes leftover after parsing attributes in process `syz.9.9471'. [ 1027.580043][ T2971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.592047][ T2971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.201557][ T2971] loop6: detected capacity change from 0 to 2048 [ 1028.216763][ T2971] EXT4-fs: Ignoring removed i_version option [ 1028.364598][ T2971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.380476][ T2971] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.907600][ T3005] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9485'. [ 1029.721612][ T3044] loop3: detected capacity change from 0 to 128 [ 1029.947850][ T3049] bond3: entered promiscuous mode [ 1029.953277][ T3049] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1030.385404][ T3057] netlink: 'syz.8.9502': attribute type 1 has an invalid length. [ 1030.422693][ T3057] bond4: entered promiscuous mode [ 1030.428770][ T3057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1030.439795][ T3064] netlink: 57 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1030.450728][ T3064] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1030.461086][ T3064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1030.522976][ T3057] bond4: (slave bridge1): making interface the new active one [ 1030.531296][ T3057] bridge1: entered promiscuous mode [ 1030.538059][ T3057] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1030.547231][T32420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.302735][ T3093] netlink: 43 bytes leftover after parsing attributes in process `syz.9.9517'. [ 1031.768111][ T3126] netlink: 43 bytes leftover after parsing attributes in process `syz.8.9529'. [ 1032.022559][ T3169] netlink: 43 bytes leftover after parsing attributes in process `syz.8.9544'. [ 1032.172593][ T3187] netlink: 'syz.6.9552': attribute type 1 has an invalid length. [ 1032.195835][ T3187] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1032.288565][ T3200] netlink: 'syz.8.9557': attribute type 9 has an invalid length. [ 1032.297106][ T3200] netlink: 27 bytes leftover after parsing attributes in process `syz.8.9557'. [ 1032.335302][ T3204] bond7: entered promiscuous mode [ 1032.340909][ T3204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1032.515493][ T3227] netlink: 'syz.3.9569': attribute type 9 has an invalid length. [ 1032.530190][ T3227] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9569'. [ 1032.570081][ T3234] bond4: entered promiscuous mode [ 1032.575588][ T3234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1032.627376][ T3240] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9573'. [ 1032.763936][ T3258] netlink: 'syz.9.9581': attribute type 9 has an invalid length. [ 1032.797318][ T3258] netlink: 27 bytes leftover after parsing attributes in process `syz.9.9581'. [ 1032.843596][ T3270] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.9587'. [ 1032.889275][ T3272] bond2: entered promiscuous mode [ 1032.899584][ T3272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.001194][ T3289] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1033.121821][ T3288] loop7: detected capacity change from 0 to 128 [ 1033.124701][ T3309] netlink: 16410 bytes leftover after parsing attributes in process `syz.9.9602'. [ 1033.225037][ T3321] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9608'. [ 1033.360775][ T3335] netlink: 16410 bytes leftover after parsing attributes in process `syz.8.9614'. [ 1033.488452][ T3343] loop3: detected capacity change from 0 to 128 [ 1033.850361][ T3378] loop8: detected capacity change from 0 to 128 [ 1033.866993][ T28] audit: type=1326 audit(2000003078.228:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.8.9635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1033.899050][ T28] audit: type=1326 audit(2000003078.228:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.8.9635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1033.930657][ T28] audit: type=1326 audit(2000003078.228:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.8.9635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1033.955079][ T28] audit: type=1326 audit(2000003078.228:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.8.9635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1034.016516][ T28] audit: type=1326 audit(2000003078.228:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3377 comm="syz.8.9635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1034.667910][ T3489] 9p: Bad value for 'wfdno' [ 1035.425360][ T3524] 9p: Bad value for 'wfdno' [ 1035.725172][ T3554] 9p: Bad value for 'wfdno' [ 1037.045697][ T3582] loop3: detected capacity change from 0 to 128 [ 1037.078257][ T28] audit: type=1326 audit(2000003081.438:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3581 comm="syz.3.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331113c819 code=0x7ffc0000 [ 1037.127486][ T28] audit: type=1326 audit(2000003081.438:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3581 comm="syz.3.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331113c819 code=0x7ffc0000 [ 1037.177567][ T28] audit: type=1326 audit(2000003081.448:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3581 comm="syz.3.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f331113c819 code=0x7ffc0000 [ 1037.227118][ T28] audit: type=1326 audit(2000003081.448:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3581 comm="syz.3.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331113c819 code=0x7ffc0000 [ 1037.284810][ T28] audit: type=1326 audit(2000003081.448:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3581 comm="syz.3.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f331113c819 code=0x7ffc0000 [ 1038.219943][ T3619] loop7: detected capacity change from 0 to 1024 [ 1038.258128][ T3619] __nla_validate_parse: 7 callbacks suppressed [ 1038.258145][ T3619] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9744'. [ 1038.587538][T19197] bridge_slave_1: left allmulticast mode [ 1038.594253][T19197] bridge_slave_1: left promiscuous mode [ 1038.606511][ T3649] loop3: detected capacity change from 0 to 128 [ 1038.610895][T19197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.626504][T19197] bridge_slave_0: left allmulticast mode [ 1038.640986][T19197] bridge_slave_0: left promiscuous mode [ 1038.657075][T19197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.778436][ T3671] loop8: detected capacity change from 0 to 1024 [ 1038.843353][ T3675] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9767'. [ 1038.889144][T19197] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1038.897613][T19197] bridge1 (unregistering): left promiscuous mode [ 1038.964139][T19197] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1038.972498][T19197] bridge2 (unregistering): left promiscuous mode [ 1039.018743][T19197] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1039.026919][T19197] bridge3 (unregistering): left promiscuous mode [ 1039.078532][T19197] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 1039.087201][T19197] bridge4 (unregistering): left promiscuous mode [ 1039.138873][T19197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.148945][T19197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.158530][T19197] bond0 (unregistering): Released all slaves [ 1039.166069][T19197] bond1 (unregistering): Released all slaves [ 1039.174857][T19197] bond2 (unregistering): Released all slaves [ 1039.183171][T19197] bond3 (unregistering): Released all slaves [ 1039.191886][T19197] bond4 (unregistering): Released all slaves [ 1039.284614][T19197] hsr_slave_0: left promiscuous mode [ 1039.292283][ T3684] IPv6: addrconf: prefix option has invalid lifetime [ 1039.337148][T19197] hsr_slave_1: left promiscuous mode [ 1039.357815][T19197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.385881][T19197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.387996][ T3700] netlink: 'syz.3.9779': attribute type 1 has an invalid length. [ 1039.415512][T19197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.427747][T19197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.457508][T19197] veth1_macvtap: left promiscuous mode [ 1039.471099][ T3711] loop8: detected capacity change from 0 to 1024 [ 1039.477137][T19197] veth0_macvtap: left promiscuous mode [ 1039.485574][T19197] veth1_vlan: left promiscuous mode [ 1039.491160][T19197] veth0_vlan: left promiscuous mode [ 1039.563053][ T3715] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9783'. [ 1039.591509][T19197] team0 (unregistering): Port device team_slave_1 removed [ 1039.602357][T19197] team0 (unregistering): Port device team_slave_0 removed [ 1039.696201][ T3700] bond5: entered promiscuous mode [ 1039.701579][ T3700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1039.737611][ T3709] bond5: (slave bridge1): making interface the new active one [ 1039.745265][ T3709] bridge1: entered promiscuous mode [ 1039.761610][ T3709] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 1039.846689][ T3733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=3733 comm=syz.6.9791 [ 1040.029338][ T3752] syzkaller0: entered promiscuous mode [ 1040.040339][ T3752] syzkaller0: entered allmulticast mode [ 1040.139176][ T3769] loop6: detected capacity change from 0 to 1024 [ 1040.179795][ T3769] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9808'. [ 1040.185231][ T3773] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9811'. [ 1040.991720][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9826'. [ 1041.373059][ T3828] syzkaller0: entered promiscuous mode [ 1041.397925][ T3828] syzkaller0: entered allmulticast mode [ 1041.530441][ T3835] loop9: detected capacity change from 0 to 1024 [ 1041.637852][ T3835] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9833'. [ 1043.544981][ T3869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.556642][ T3869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.154275][ T3938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.165956][ T3938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.324782][ T3942] netlink: 'syz.8.9876': attribute type 1 has an invalid length. [ 1048.621798][ T3951] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9880'. [ 1052.394119][ T4010] 9p: Bad value for 'rfdno' [ 1053.222172][ T4004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.234970][ T4004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.006016][ T4020] loop3: detected capacity change from 0 to 2048 [ 1054.013201][ T4020] EXT4-fs: Ignoring removed i_version option [ 1054.079638][ T4020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.092013][ T4020] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.501031][ T656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.571662][ T4056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9920'. [ 1056.627195][ T4062] dv_s: renamed from bridge_slave_1 (while UP) [ 1056.676457][ T4059] 9p: Bad value for 'rfdno' [ 1058.207334][ T4104] loop7: detected capacity change from 0 to 512 [ 1058.246757][ T4104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.363830][ T4104] __quota_error: 10 callbacks suppressed [ 1058.363886][ T4104] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1058.383752][ T4104] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1058.393331][ T4104] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.9934: Failed to acquire dquot type 0 [ 1059.017066][T32726] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.301689][ T4265] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9993'. [ 1065.368644][ T4265] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9993'. [ 1065.422612][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9996'. [ 1065.641855][ T4288] loop6: detected capacity change from 0 to 512 [ 1065.671244][ T4288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.896567][ T4288] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1065.926772][ T4288] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1065.950817][ T4288] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.10001: Failed to acquire dquot type 0 [ 1066.283007][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10010'. [ 1066.670046][ T4319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.681917][ T4319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.524808][T32420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.768072][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10021'. [ 1069.290565][ T4344] loop8: detected capacity change from 0 to 128 [ 1069.376879][ T28] audit: type=1326 audit(2000003113.742:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.8.10024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1069.424229][ T28] audit: type=1326 audit(2000003113.782:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.8.10024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1069.449219][ T28] audit: type=1326 audit(2000003113.782:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.8.10024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1069.489579][ T28] audit: type=1326 audit(2000003113.792:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.8.10024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1069.514784][ T28] audit: type=1326 audit(2000003113.792:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.8.10024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1069.539202][ T28] audit: type=1326 audit(2000003113.792:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.8.10024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1069.563000][ T28] audit: type=1326 audit(2000003113.792:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.8.10024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc763fc819 code=0x7ffc0000 [ 1069.790127][ T4356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.803418][ T4356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.342682][ T4356] loop9: detected capacity change from 0 to 2048 [ 1070.357808][ T4356] EXT4-fs: Ignoring removed i_version option [ 1070.518665][ T4356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.534918][ T4356] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.751474][ T4373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10032'. [ 1070.912186][ T4373] bond6: entered promiscuous mode [ 1070.947081][ T4373] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1071.215123][ T4387] 9p: Bad value for 'rfdno' [ 1071.536413][ T4390] loop7: detected capacity change from 0 to 1024 [ 1071.557370][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10039'. [ 1072.268311][ T4402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.282005][ T4402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.493250][ T4405] loop7: detected capacity change from 0 to 2048 [ 1073.500361][ T4405] EXT4-fs: Ignoring removed i_version option [ 1073.600805][ T4404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.612593][ T4404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.037075][ T4413] syzkaller0: entered promiscuous mode [ 1075.043709][ T4413] syzkaller0: entered allmulticast mode [ 1075.083867][T30837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.883875][ T4405] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7. [ 1076.041115][ T4424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10049'. [ 1076.059508][ T4424] bond4: entered promiscuous mode [ 1076.065134][ T4424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1076.086787][ T4424] vlan2: entered allmulticast mode [ 1076.091967][ T4424] bond4: entered allmulticast mode [ 1076.359114][ T4427] loop9: detected capacity change from 0 to 128 [ 1076.425805][ T28] audit: type=1326 audit(2000003120.793:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.9.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 1076.483154][ T28] audit: type=1326 audit(2000003120.823:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.9.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 1076.518219][ T28] audit: type=1326 audit(2000003120.843:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.9.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 1076.543764][ T28] audit: type=1326 audit(2000003120.853:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.9.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 1076.569346][ T28] audit: type=1326 audit(2000003120.853:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.9.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 1076.597781][ T28] audit: type=1326 audit(2000003120.853:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.9.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 1076.654814][ T28] audit: type=1326 audit(2000003120.853:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.9.10050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64a0c819 code=0x7ffc0000 [ 1077.035067][ T4441] 9p: Bad value for 'rfdno' [ 1077.521062][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10061'. [ 1077.536675][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10062'. [ 1077.604490][ T4461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.616396][ T4461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.637558][ T4458] bond5: entered promiscuous mode [ 1077.643061][ T4458] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1077.726720][ T4458] vlan3: entered allmulticast mode [ 1077.751989][ T4458] bond5: entered allmulticast mode [ 1078.311841][ T4461] loop8: detected capacity change from 0 to 2048 [ 1078.327720][ T4461] EXT4-fs: Ignoring removed i_version option [ 1078.406102][ T4461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.420557][ T4461] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.199873][ T4477] loop7: detected capacity change from 0 to 128 [ 1079.447017][ T28] audit: type=1326 audit(2000003123.824:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.7.10064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1079.491287][ T28] audit: type=1326 audit(2000003123.824:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.7.10064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7853d6c819 code=0x7ffc0000 [ 1079.562360][ T4492] syzkaller0: entered promiscuous mode [ 1079.579347][ T4492] syzkaller0: entered allmulticast mode [ 1080.475690][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.000072][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.008785][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.187639][ T4524] loop3: detected capacity change from 0 to 1024 [ 1081.242903][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10087'. [ 1082.680865][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.693932][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.965610][ T4536] loop6: detected capacity change from 0 to 1024 [ 1084.020718][ T4541] loop9: detected capacity change from 0 to 2048 [ 1084.027773][ T4541] EXT4-fs: Ignoring removed i_version option [ 1084.626343][ T4541] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.638745][ T4541] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.741676][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10090'. [ 1085.252756][ T4570] loop8: detected capacity change from 0 to 512 [ 1085.276052][ T4570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.368914][ T4577] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1085.379389][ T4577] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1085.389422][ T4577] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.10103: Failed to acquire dquot type 0 [ 1086.020540][T30837] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.065964][ T4583] netlink: 'syz.7.10106': attribute type 1 has an invalid length. [ 1086.083589][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.096752][ T4584] loop9: detected capacity change from 0 to 1024 [ 1086.105081][ T4583] bond6: entered promiscuous mode [ 1086.134337][ T4583] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1086.170617][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10105'. [ 1086.190831][ T4587] vlan4: entered allmulticast mode [ 1086.211528][ T4587] bond6: entered allmulticast mode [ 1086.439338][ T4600] syzkaller0: entered promiscuous mode [ 1086.445369][ T4600] syzkaller0: entered allmulticast mode [ 1087.377439][ T4621] syzkaller0: entered promiscuous mode [ 1087.393269][ T4621] syzkaller0: entered allmulticast mode [ 1088.477173][ T4637] loop7: detected capacity change from 0 to 1024 [ 1088.498894][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10125'. [ 1088.788408][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.802235][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.820914][ T4681] loop8: detected capacity change from 0 to 1024 [ 1091.828984][ T4681] EXT4-fs: Ignoring removed i_version option [ 1091.841521][ T4681] EXT4-fs: Ignoring removed bh option [ 1091.848535][ T4681] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1091.858938][ T4681] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 1091.868676][ T4681] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1091.879855][ T4681] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1091.890010][ T4681] Quota error (device loop8): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 1091.902280][ T4681] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1091.917337][ T4681] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 1091.924203][ T4681] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.10142: bad orphan inode 11 [ 1091.934551][ T4681] loop8: lost filesystem error report for type 5 error -117 [ 1091.940324][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1091.954399][ C1] EXT4-fs (loop8): initial error at time 2000003136: ext4_orphan_get:1423 [ 1091.962954][ C1] EXT4-fs (loop8): last error at time 2000003136: ext4_orphan_get:1423 [ 1091.984962][ T4681] ext4_test_bit(bit=10, block=1) = 0 [ 1091.993202][ T4681] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1092.022387][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.353903][ T4690] loop7: detected capacity change from 0 to 1024 [ 1092.371552][ T4690] EXT4-fs: Ignoring removed mblk_io_submit option [ 1092.465058][ T4690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.485638][ T4690] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.661816][ T4696] loop9: detected capacity change from 0 to 1024 [ 1092.959951][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10147'. [ 1093.910422][ T4721] loop6: detected capacity change from 0 to 1024 [ 1093.926547][ T4721] EXT4-fs: Ignoring removed mblk_io_submit option [ 1093.964439][ T4694] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1094.038251][ T4721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.053116][ T4721] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.161852][T32726] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1094.598113][ T4735] loop3: detected capacity change from 0 to 1024 [ 1094.670497][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10164'. [ 1094.728289][ T4744] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10168'. [ 1094.829842][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10170'. [ 1094.907872][ T4751] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10170'. [ 1094.989881][ T4751] veth9: entered promiscuous mode [ 1095.000181][ T4751] veth9: entered allmulticast mode [ 1095.034609][ T4694] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1095.403818][T32420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1095.511135][ T4783] loop3: detected capacity change from 0 to 512 [ 1095.540165][ T4783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.591559][ T4783] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1095.602046][ T4783] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1095.611698][ T4783] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.10184: Failed to acquire dquot type 0 [ 1095.902475][ T4815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.914930][ T4815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.115946][ T4822] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10199'. [ 1096.169130][ T4823] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10199'. [ 1096.311124][ T4825] loop8: detected capacity change from 0 to 2048 [ 1096.318411][ T4825] EXT4-fs: Ignoring removed i_version option [ 1096.381598][ T4825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.394224][ T4825] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.811874][ T4823] veth7: entered promiscuous mode [ 1096.824971][ T656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.882581][ T4823] veth7: entered allmulticast mode [ 1097.967912][ T4879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10224'. [ 1098.170775][ T4895] syzkaller0: entered promiscuous mode [ 1098.176302][ T4895] syzkaller0: entered allmulticast mode [ 1098.329021][ T4886] loop6: detected capacity change from 0 to 128 [ 1098.388739][ T4909] loop7: detected capacity change from 0 to 1024 [ 1098.398709][ T2998] ================================================================== [ 1098.406845][ T2998] BUG: KCSAN: data-race in d_delete / lookup_fast [ 1098.408432][ T4909] EXT4-fs: Ignoring removed i_version option [ 1098.413302][ T2998] [ 1098.413314][ T2998] read-write to 0xffff8881076c0b40 of 4 bytes by task 9649 on cpu 0: [ 1098.413335][ T2998] d_delete+0xbe/0xe0 [ 1098.413369][ T2998] d_delete_notify+0x32/0x100 [ 1098.427548][ T4909] EXT4-fs: Ignoring removed bh option [ 1098.430183][ T2998] vfs_unlink+0x289/0x490 [ 1098.430213][ T2998] filename_unlinkat+0x1e2/0x410 [ 1098.430237][ T2998] __se_sys_unlink+0x2b/0xe0 [ 1098.430259][ T2998] __x64_sys_unlink+0x1f/0x30 [ 1098.430283][ T2998] x64_sys_call+0x2eb6/0x3020 [ 1098.435339][ T4909] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1098.439145][ T2998] do_syscall_64+0x12c/0x370 [ 1098.445102][ T4909] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 1098.449484][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.449514][ T2998] [ 1098.449522][ T2998] read to 0xffff8881076c0b40 of 4 bytes by task 2998 on cpu 1: [ 1098.449541][ T2998] lookup_fast+0xf0/0x320 [ 1098.449566][ T2998] path_lookupat+0x15c/0x500 [ 1098.449588][ T2998] filename_lookup+0x190/0x390 [ 1098.449611][ T2998] do_readlinkat+0x74/0x2f0 [ 1098.454975][ T4909] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1098.459245][ T2998] __x64_sys_readlink+0x47/0x60 [ 1098.481717][ T28] audit: type=1326 audit(2000003142.856:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.6.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6293c819 code=0x7ffc0000 [ 1098.483254][ T2998] x64_sys_call+0x2b51/0x3020 [ 1098.509187][ T28] audit: type=1326 audit(2000003142.876:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.6.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f6c6293c819 code=0x7ffc0000 [ 1098.513146][ T2998] do_syscall_64+0x12c/0x370 [ 1098.513184][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.522974][ T28] audit: type=1326 audit(2000003142.886:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.6.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6293c819 code=0x7ffc0000 [ 1098.527035][ T2998] [ 1098.527043][ T2998] value changed: 0x00300180 -> 0x00004080 [ 1098.527057][ T2998] [ 1098.527063][ T2998] Reported by Kernel Concurrency Sanitizer on: [ 1098.527078][ T2998] CPU: 1 UID: 0 PID: 2998 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 1098.527106][ T2998] Tainted: [W]=WARN [ 1098.537975][ T28] audit: type=1326 audit(2000003142.886:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.6.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c6293c819 code=0x7ffc0000 [ 1098.542402][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1098.542418][ T2998] ================================================================== [ 1098.703641][ T4909] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1098.711016][ T4909] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 1098.723123][ T4909] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1098.724126][ T28] audit: type=1326 audit(2000003142.886:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.6.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6293c819 code=0x7ffc0000 [ 1098.738057][ T4909] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1098.738142][ T4909] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.10238: bad orphan inode 11 [ 1098.761933][ T28] audit: type=1326 audit(2000003142.906:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.6.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6293c819 code=0x7ffc0000 [ 1098.771991][ T4909] loop7: lost filesystem error report for type 5 error -117 [ 1098.825359][ T4909] ext4_test_bit(bit=10, block=1) = 0 [ 1098.832851][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1098.832875][ C1] EXT4-fs (loop7): initial error at time 2000003143: ext4_orphan_get:1423 [ 1098.832897][ C1] EXT4-fs (loop7): last error at time 2000003143: ext4_orphan_get:1423 [ 1098.862297][ T502] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.862500][ T4909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1098.941809][T32726] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.