last executing test programs: 4m55.507630922s ago: executing program 3 (id=486): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendto(0xffffffffffffffff, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) io_setup(0xb, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4m52.190812686s ago: executing program 3 (id=504): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfbc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m46.168774769s ago: executing program 3 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060102000000000000000a0000000015000300686173683a69702c706f72742c6e6574000000000900020073797a31000000000c000780080012400ffffffc050005000a00000005000400000000000500010007"], 0x5c}, 0x1, 0x0, 0x0, 0x4044090}, 0x40040) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x1c}}, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xfd, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x2, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r3 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r9, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r11, 0x12, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x15}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r12 = getpid() perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x73, 0x4, 0x8, 0x8, 0x0, 0x2, 0x12100, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000300)}, 0x1802, 0x8, 0x6, 0x2, 0x8, 0x5, 0x97c, 0x0, 0x9, 0x0, 0x800}, r12, 0xd, 0xffffffffffffffff, 0x0) 4m43.81124128s ago: executing program 3 (id=549): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x1d) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') readv(r6, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 64) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async, rerun: 64) openat$cgroup_ro(r3, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6000001, 0x12, 0xffffffffffffffff, 0x48ec1000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x8084, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/devices.allow\x00', 0x1e4) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) (rerun: 32) 4m28.767012664s ago: executing program 32 (id=549): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x1d) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') readv(r6, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 64) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async, rerun: 64) openat$cgroup_ro(r3, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6000001, 0x12, 0xffffffffffffffff, 0x48ec1000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x8084, &(0x7f0000000780)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646f74732c646f74732c6e6f636173652c646f74732c636865636b3d72656c617865642c646f74732c6e6f646f74732c646f74732c0032884758edd2e7a17e3c116a014262927783807ed4e210440ddebdf7d64a629cc9e873202c6d1e1d7dbabad279cb2a0d8a6c81b9ee715a035afdc5af3e15b932174f56cf4f009847fbc0e187d20fe47e50595251e835b306ddf10814e05bc51afba2115e92b262c4ee4cee83e529784e53c874b73bb376876e2f3b2e667330e12c337d3a8b8cacccd9d86bc4c2f3b8971a79fb8f69af7b1d19592bf6a7186f7d4322045a99eaa207c407ab52aeadaaf1d089c278fccfb2138f", @ANYRESDEC=r0], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/devices.allow\x00', 0x1e4) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) (rerun: 32) 4m27.791639248s ago: executing program 0 (id=683): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) brk(0xfffffffffffffffd) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x0, 0xa, 0x8, 0x0, 0x5, 0x7b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001f0a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0x0, 0x9, 0xffff, 0x9, 0xe, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) (async) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x1000000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) (async) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) 4m27.320385004s ago: executing program 0 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x6000}], 0x34000, 0x0) 4m26.784317874s ago: executing program 0 (id=691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000b80), 0x1, 0x45f, &(0x7f0000000080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x4da441, 0x81) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x40}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8e4}]}, 0x3c}}, 0x8) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180)=0x3c35ee76) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x8, 0x5, 0x1, 0x2, 0x0, 0x3, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xaf, 0x3ff}, 0x1001, 0x1, 0x2, 0x0, 0x3, 0x100, 0xfffb, 0x0, 0x6, 0x0, 0x615}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 4m26.220330705s ago: executing program 0 (id=697): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0x6, 0x58f7, 0x7, 0xf651}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x4, 0x6, 0x7}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r3, &(0x7f00000024c0)=""/205, 0x4c, 0x53) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x81c) creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r4}]) 4m26.069232383s ago: executing program 0 (id=700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[], 0x0) 4m25.148399474s ago: executing program 0 (id=703): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd24, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffc}}, 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x10000}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1b85ef1c98cdd154644a4406e874eb47ac6a2ef419ecbc67124aa2e10651f77d2fb0479cca70", @ANYRES16=r1, @ANYBLOB="00002cbd7000fbdbdf25300000000c009900050000007d000000060036000800000006003600020000000600360014000000060036000000000006003600290000000600360005000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 4m25.088986648s ago: executing program 33 (id=703): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x200, 0x70bd24, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffc}}, 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x10000}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1b85ef1c98cdd154644a4406e874eb47ac6a2ef419ecbc67124aa2e10651f77d2fb0479cca70", @ANYRES16=r1, @ANYBLOB="00002cbd7000fbdbdf25300000000c009900050000007d000000060036000800000006003600020000000600360014000000060036000000000006003600290000000600360005000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 3m42.408082093s ago: executing program 5 (id=1023): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="bcd494ba6d83", 0x0, 0x9, 0x0, 0x2, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000003640)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2}}) 3m42.328249728s ago: executing program 5 (id=1024): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getpgid(0x0) write$tun(0xffffffffffffffff, 0x0, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r2 = socket$inet(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x11, 0x63, 0x0, 0x0) 3m42.095088271s ago: executing program 5 (id=1030): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e7800000000000, 0x8a000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0xa, 0x3, 0x0, 0x92bd, 0x585c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x4, @perf_config_ext={0x0, 0x3ad6}, 0x40, 0x0, 0x7, 0x6, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000020000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x4, 0x3]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}}, 0x0) 3m41.939544319s ago: executing program 5 (id=1031): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0xfff, 0xfffffffb, 0x12}, 0x50) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000340)) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x64000080) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x6) 3m41.483790365s ago: executing program 5 (id=1035): socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x208000, &(0x7f0000000280)={[{@block_validity}, {}, {@data_err_ignore}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r0, 0x0, 0x0, 0x8800000) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000640)='./file0\x00', 0x2000812, &(0x7f0000000040)={[{@cruft}, {@map_acorn}, {@map_normal}, {@nojoliet}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@overriderock}, {@session={'session', 0x3d, 0x26}}, {@overriderock}, {@unhide}, {@cruft}]}, 0x5, 0xa4b, &(0x7f0000001180)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) r4 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') gettid() socket$packet(0x11, 0x2, 0x300) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x11, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket(0x40000000015, 0x5, 0x0) socket(0x2, 0x3, 0xff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c842, 0x24) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x200000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f00000003c0)="af", &(0x7f0000000000)=""/1, 0x2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 3m40.280072841s ago: executing program 5 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x1) r6 = eventfd2(0x7, 0x800) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r7, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) r9 = syz_open_procfs$userns(r0, &(0x7f00000000c0)) sendfile(r8, r9, &(0x7f0000000100)=0x2, 0x45) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) unshare(0x44040200) 3m40.227975474s ago: executing program 34 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x1) r6 = eventfd2(0x7, 0x800) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r7, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) r9 = syz_open_procfs$userns(r0, &(0x7f00000000c0)) sendfile(r8, r9, &(0x7f0000000100)=0x2, 0x45) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) unshare(0x44040200) 2m49.359933914s ago: executing program 1 (id=1407): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000006980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x18, 0x10}}], 0x2, 0x4004800) prlimit64(r0, 0x4, &(0x7f0000000040)={0x3ff, 0x5e36}, &(0x7f0000000080)) 2m49.130679786s ago: executing program 1 (id=1414): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) tee(r0, r1, 0x7ff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0xd3, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xf, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/244, 0xf4, 0x4, 0xffff, 0x8, 0x7, 0x6}}, 0x120) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002fb}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xfffffffe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x30) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m48.741845908s ago: executing program 1 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m48.492073502s ago: executing program 1 (id=1422): bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000d000000000000005300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000009000000000000000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x3f9602b6a203aea8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a010100000000000000000200000009000100"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x4000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$sg(0x0, 0x4, 0x100) sched_setattr(0x0, 0x0, 0x0) io_setup(0x2, 0x0) eventfd(0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x300) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0x7, 0x11000, 0x0, 0xe4, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x203, 0x420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x342}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCFLSH(0xffffffffffffffff, 0x8910, 0xffffffffffff7ffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x3}, 0x100, 0x0, 0x3, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) msgget(0x3, 0x710) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x60, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0xc48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2m48.320632701s ago: executing program 1 (id=1425): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x1e1e57c82e4eed97) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0xffffffffffffffff}) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r1, &(0x7f0000000180)={0x47e, 0x7, 0x1, 0x7}) (async) connect$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x198, 0xd8, 0xd8, 0x198, 0x198, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x0, 0x0, 0x4, 0x0, 0x2], 0x3, 0x2}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @multicast2, 0xff000000, 0xff000000, 'pimreg0\x00', 'ip6erspan0\x00', {}, {0xff}, 0x4, 0x0, 0x9}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, 0xff000000, 0xffffffff, 'veth0_macvtap\x00', 'veth1_to_hsr\x00', {}, {}, 0x5e, 0x3, 0x40}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x39}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xf}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x78daac84945b2204, 0x0, 'syzkaller1\x00', 'pimreg0\x00', {0xff}, {}, 0x11, 0x1, 0x12}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x32}}, @common=@ttl={{0x28}, {0x3, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000840)={&(0x7f0000000780)=""/172, 0xac}) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000880)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f00000008c0)={0x40, 0x4}) (async) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) (async) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000900)=[{}, {}], 0x2, 0x4, &(0x7f0000000940)={[0x100]}, 0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a00)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010004) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x2, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@access_uid={'access', 0x3d, r1}}, {@nodevmap}, {@cache_none}], [{@defcontext={'defcontext', 0x3d, 'root'}}]}}) preadv(r7, &(0x7f0000001040)=[{&(0x7f0000000cc0)=""/48, 0x30}, {&(0x7f0000000d00)=""/1, 0x1}, {&(0x7f0000000d40)=""/172, 0xac}, {&(0x7f0000000e00)=""/118, 0x76}, {&(0x7f0000000e80)=""/181, 0xb5}, {&(0x7f0000000f40)=""/51, 0x33}, {&(0x7f0000000f80)=""/139, 0x8b}], 0x7, 0x10001, 0x8) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000010c0)) ioctl$int_in(r4, 0x5421, &(0x7f0000001100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000001140)={{0x1, 0x1, 0x18, r4, {r2}}, './file0\x00'}) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001180)=0x10102, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockname$packet(r8, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001200)=0x14) (async) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000001240)={0x3, 0x29a, 0x4, 0x3, 0xfff}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x87}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x784fa3d4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) socket$inet(0x2, 0x6, 0x3154) 2m45.99889152s ago: executing program 1 (id=1438): perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefa, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475, 0x6}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(0x0, 0x0) pipe2(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x9, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x100) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000001c0)=""/245) 2m45.957929532s ago: executing program 35 (id=1438): perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefa, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475, 0x6}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(0x0, 0x0) pipe2(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x9, 0x1, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x100) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000001c0)=""/245) 5.035249751s ago: executing program 4 (id=3042): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4060, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) writev(r0, &(0x7f00000022c0)=[{&(0x7f0000000000)='x', 0x1}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000000) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) mmap(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x12, r3, 0x60f28000) setpriority(0x2, 0xff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000040)=0x735, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) 5.034526001s ago: executing program 4 (id=3043): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) fcntl$setpipe(r0, 0x407, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07, 0x1fff}, 0x2000000) 4.960014556s ago: executing program 4 (id=3044): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xffffffffffffff5b, 0xb67387bf2abb21f7}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53ef71a76d2686dd4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000240000000000000700000a34000000060a010400000000000000000200000008000a4000001a020900010073797a30000000000900020073797a320000000014000000110001000000"], 0x5c}}, 0x40) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) pwrite64(r2, 0x0, 0x0, 0xe7c) socket$phonet(0x23, 0x2, 0x1) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1fe31d1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.959332206s ago: executing program 4 (id=3045): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, r3, 0x25, 0x1, @val=@netfilter={0x7, 0x0, 0xc41d}}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000014, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r4, &(0x7f0000000200)='setgroups\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x50021, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0xffffffbffffffffc, 0x5, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x20a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x0, 0x80000004dd5}, 0x0, 0x0, 0x10000, 0x2, 0x6f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) 2.578640838s ago: executing program 2 (id=3052): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x122) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.464372314s ago: executing program 6 (id=3053): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000002640)={0xffffffffffffffee, 0x7253, 0xffffffffffffffdf, 0x696c, 0x9, 0x6, 0x52e6ac5d, 0x8, 0x0, 0x0, 0x400000000000000d, 0x7fffffff, 0x6, 0x8000000b, 0x80000004000000, 0x9, 0xfffffffffffffffd, 0x89, 0x3, 0x8000003, 0x5, 0x3, 0x200000005, 0xfffffffffffffffe, 0x9dc6, 0xa}) r4 = syz_genetlink_get_family_id$nl80211(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r9, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r11, 0x12, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x15}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r12 = getpid() r13 = perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0xf3, 0x4, 0x1, 0xa, 0x0, 0x3, 0x25422, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xd, 0x98}, 0x2, 0x5acd, 0x80000001, 0x6, 0x2, 0x90000, 0x5, 0x0, 0xf3d3, 0x0, 0x101}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x73, 0x4, 0x8, 0x8, 0x0, 0x2, 0x12100, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000300)}, 0x1802, 0x8, 0x6, 0x2, 0x8, 0x5, 0x97c, 0x0, 0x9, 0x0, 0x800}, r12, 0xd, r13, 0x0) 2.37198742s ago: executing program 2 (id=3055): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x588, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r5, 0x0, &(0x7f0000000740)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) unshare(0x2a020480) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x19, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r0, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r9, 0x0, 0x0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x32002) 2.319952812s ago: executing program 6 (id=3057): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="180080dbdf25080003000200000000000018000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x44044) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 2.212153248s ago: executing program 6 (id=3059): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.079862405s ago: executing program 7 (id=3063): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000002640)={0xffffffffffffffee, 0x7253, 0xffffffffffffffdf, 0x696c, 0x9, 0x6, 0x52e6ac5d, 0x8, 0x0, 0x0, 0x400000000000000d, 0x7fffffff, 0x6, 0x8000000b, 0x80000004000000, 0x9, 0xfffffffffffffffd, 0x89, 0x3, 0x8000003, 0x5, 0x3, 0x200000005, 0xfffffffffffffffe, 0x9dc6, 0xa}) r4 = syz_genetlink_get_family_id$nl80211(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r9, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r11, 0x12, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x15}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r12 = getpid() r13 = perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0xf3, 0x4, 0x1, 0xa, 0x0, 0x3, 0x25422, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xd, 0x98}, 0x2, 0x5acd, 0x80000001, 0x6, 0x2, 0x90000, 0x5, 0x0, 0xf3d3, 0x0, 0x101}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x73, 0x4, 0x8, 0x8, 0x0, 0x2, 0x12100, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000300)}, 0x1802, 0x8, 0x6, 0x2, 0x8, 0x5, 0x97c, 0x0, 0x9, 0x0, 0x800}, r12, 0xd, r13, 0x0) 2.079019695s ago: executing program 2 (id=3064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000670020006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbddaf686c4f64d26b42e7d613e42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c310"], &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xbb2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r4, 0x4, 0x6, [0x5, 0x0, 0x7, 0x0, 0x0, 0x401]}, 0x14) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x300, 0x0, 0x0, 0x0}) socketpair(0x27, 0x3, 0x7, &(0x7f00000001c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r2, &(0x7f0000000080)="3b056327dc5add8745c67630c0bc61c1f6ddd45086e43cd85afb00f01a0ddcfe5bf223e122120d68725a201f5582cd9aeb62599491f5c54fceea4ca59595d957f5106752b11ef267a8beb2826fd5d31affb83cffddae5274be8f914aa612567d49e9ab00ea0546c97708908462f5a9daa03e5bdbf4ebc08e13df176e7ceeea86467c10b89dc54f305db3b8bdf59d27486dbd553bc346c5d90ac4fd14786b7060c1c329aafb39291159228dae6e95fd84f0d16b94a712fc", &(0x7f0000000380)=""/204, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.029115238s ago: executing program 7 (id=3065): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x122) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.025339748s ago: executing program 2 (id=3066): perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefa, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x44c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x438, 0x1, [@m_police={0x434, 0x2, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0x10, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x100, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0xfffffffe, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7b, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x8c4, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x10001, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) capset(0x0, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9}) pipe2(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5, 0xf, 0x1, 0x0, 0x0, 0x8f, 0x10004, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x400, 0xe6, 0xfffffffa, 0x2, 0x10001, 0xfffffffa, 0x6, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000240001800c00010069623a677265300031000280af17230800020008000000080001000d"], 0x38}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x40000) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000100)={0x76, 0x7d, 0x9, 0x4, 0x0, 0x81}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') 2.010163249s ago: executing program 8 (id=3067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000040)='bdev\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x260, 0x260, 0x260, 0x260, 0x198, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000340), {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x4, 0x7, 0x6, 0x4, 0x5, 0x5], 0x2, 0x1}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 'veth1_to_team\x00', 'bond_slave_0\x00', {}, {}, 0x5c, 0x0, 0x74}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x9, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xe3bdf7d, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0xc884) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r2, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.931977773s ago: executing program 7 (id=3068): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000380)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x11, 0x2002, 0x8000, 0x29, "ff000d00009a468e0cd912098d00"}) r5 = syz_open_pts(r4, 0x8000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x64ef, 0xfbffffff, 0x66f, 0x9, 0x12, "17f7c7963b667010476bb59b6dbd633737d0f6"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xa) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @remote}}}, 0xa0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000140)={{0x2, 0x4e24, @empty}, {0x0, @local}, 0x1a, {0x2, 0x4e24, @multicast2}, 'nicvf0\x00'}) 1.922336454s ago: executing program 4 (id=3069): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="180080dbdf25080003000200000000000018000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x44044) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 1.918335104s ago: executing program 7 (id=3070): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.784236502s ago: executing program 4 (id=3071): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x02\x00', 0x280600, &(0x7f0000000080)={@align=0x2000, {0x663, 0x7fff, 0x8, 0x1000}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffff8}) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x24020000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, &(0x7f0000000380)) 1.783604982s ago: executing program 8 (id=3073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25110000000c0009800800010000000000293d7d921b9c40a066e464469d12bfdbd96a04888e4139347db42c428bdde3180cdf537333229148c3"], 0x20}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r4, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000200)=0x2) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x200088c0) close(r7) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1.777171502s ago: executing program 7 (id=3074): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x80101, 0x0, &(0x7f0000048000), 0x0) 1.630825241s ago: executing program 8 (id=3075): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x153) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2800714, &(0x7f0000000500), 0xf7, 0x48e, &(0x7f0000000580)="$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") creat(&(0x7f0000000240)='./file0\x00', 0x179) io_setup(0x202, &(0x7f0000000200)) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x8401) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15", 0x1}], 0x1}}], 0x2, 0x4) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400), 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000906010200000000c9a0fd516d46671f0900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414190c000280080001406401010124d5644523512c69c6afa09c4aa1f3d8b08eed186f536e2118bf1d7c3d70b1c01c4d6712310b4b432ecc736070cd6d0bfc5de4b1"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r3 = open(&(0x7f0000000180)='./file1\x00', 0x24c42, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000280)={0x72, 0xfffffffffffffffa, 0x5, 0x9, 0xf4}) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r4], 0x108}}], 0x2, 0xc040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x700, 0x7800, 0x6, 0x7, {{0xd, 0x4, 0x2, 0x7, 0x34, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@end, @rr={0x7, 0x1b, 0x7b, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x82, 0x3, "c8"}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r3, 0x20, &(0x7f0000000d40)={&(0x7f0000000c00)=""/192, 0xc0, 0x0, &(0x7f0000000cc0)=""/77, 0x4d}}, 0x10) 1.311009948s ago: executing program 8 (id=3076): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000002640)={0xffffffffffffffee, 0x7253, 0xffffffffffffffdf, 0x696c, 0x9, 0x6, 0x52e6ac5d, 0x8, 0x0, 0x0, 0x400000000000000d, 0x7fffffff, 0x6, 0x8000000b, 0x80000004000000, 0x9, 0xfffffffffffffffd, 0x89, 0x3, 0x8000003, 0x5, 0x3, 0x200000005, 0xfffffffffffffffe, 0x9dc6, 0xa}) syz_genetlink_get_family_id$nl80211(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d660900000000000000000000000220", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r8, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r10, 0x12, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x15}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = getpid() r12 = perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x80, 0xf3, 0x4, 0x1, 0xa, 0x0, 0x3, 0x25422, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xd, 0x98}, 0x2, 0x5acd, 0x80000001, 0x6, 0x2, 0x90000, 0x5, 0x0, 0xf3d3, 0x0, 0x101}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x73, 0x4, 0x8, 0x8, 0x0, 0x2, 0x12100, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000300)}, 0x1802, 0x8, 0x6, 0x2, 0x8, 0x5, 0x97c, 0x0, 0x9, 0x0, 0x800}, r11, 0xd, r12, 0x0) 1.221405653s ago: executing program 6 (id=3077): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 4) 1.210232294s ago: executing program 2 (id=3078): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) rt_tgsigqueueinfo(0x0, r1, 0x27, &(0x7f0000000340)={0x3d, 0x3f78, 0x3}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r6, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) syz_clone(0xc1003000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.144370947s ago: executing program 6 (id=3079): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@auto_da_alloc}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) (fail_nth: 4) 1.131882668s ago: executing program 6 (id=3080): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, r3, 0x25, 0x1, @val=@netfilter={0x7, 0x0, 0xc41d}}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000014, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r4, &(0x7f0000000200)='setgroups\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x50021, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0xffffffbffffffffc, 0x5, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x20a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x0, 0x80000004dd5}, 0x0, 0x0, 0x10000, 0x2, 0x6f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) 154.381072ms ago: executing program 2 (id=3081): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="180080dbdf25080003000200000000000018000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x44044) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 0s ago: executing program 7 (id=3082): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x88}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa6ff}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000780)="05", 0x1}], 0x1) kernel console output (not intermixed with test programs): 5][T12315] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.427829][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/943.tmp-b7:8' failed: Read-only file system [ 333.465920][T12315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.513100][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 333.548117][T12315] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.626150][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/945.tmp-b7:8' failed: Read-only file system [ 333.649462][T12315] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.703228][T12312] loop2: detected capacity change from 0 to 512 [ 333.714029][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 333.737350][T12315] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 3: comm syz.8.2268: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 333.796290][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/947.tmp-b7:2' failed: Read-only file system [ 333.816086][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/946.tmp-b7:8' failed: Read-only file system [ 333.829684][T12312] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.852050][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 333.897009][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.908278][T12312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.023883][T12312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.033284][T12334] tap0: tun_chr_ioctl cmd 1074812118 [ 334.052706][T12312] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.095156][T12312] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.2269: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 334.197500][T12344] loop8: detected capacity change from 0 to 128 [ 334.200168][T12343] loop4: detected capacity change from 0 to 512 [ 334.218277][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.234620][T12344] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 334.316593][T12344] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.330116][T12348] bio_check_eod: 264 callbacks suppressed [ 334.330131][T12348] syz.4.2275: attempt to access beyond end of device [ 334.330131][T12348] loop4: rw=1, sector=560, nr_sectors = 32 limit=512 [ 334.370111][T12348] syz.4.2275: attempt to access beyond end of device [ 334.370111][T12348] loop4: rw=1, sector=624, nr_sectors = 32 limit=512 [ 334.400224][T12348] syz.4.2275: attempt to access beyond end of device [ 334.400224][T12348] loop4: rw=1, sector=688, nr_sectors = 32 limit=512 [ 334.434440][T12348] syz.4.2275: attempt to access beyond end of device [ 334.434440][T12348] loop4: rw=1, sector=752, nr_sectors = 32 limit=512 [ 334.473495][T12348] syz.4.2275: attempt to access beyond end of device [ 334.473495][T12348] loop4: rw=1, sector=816, nr_sectors = 32 limit=512 [ 334.497150][T12347] loop2: detected capacity change from 0 to 2048 [ 334.505788][T12348] syz.4.2275: attempt to access beyond end of device [ 334.505788][T12348] loop4: rw=1, sector=880, nr_sectors = 32 limit=512 [ 334.529867][T12347] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 334.551125][T12348] syz.4.2275: attempt to access beyond end of device [ 334.551125][T12348] loop4: rw=1, sector=944, nr_sectors = 32 limit=512 [ 334.616155][T12348] syz.4.2275: attempt to access beyond end of device [ 334.616155][T12348] loop4: rw=1, sector=1008, nr_sectors = 32 limit=512 [ 334.619321][T12351] loop2: detected capacity change from 0 to 128 [ 334.648831][T12348] syz.4.2275: attempt to access beyond end of device [ 334.648831][T12348] loop4: rw=1, sector=1072, nr_sectors = 32 limit=512 [ 334.649793][ T9125] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.662678][T12348] syz.4.2275: attempt to access beyond end of device [ 334.662678][T12348] loop4: rw=1, sector=1136, nr_sectors = 32 limit=512 [ 334.691112][T12351] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 334.722279][T12351] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.805288][T12354] loop8: detected capacity change from 0 to 4096 [ 334.821412][T12358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2281'. [ 334.842684][T12358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12358 comm=syz.6.2281 [ 334.861012][T12354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.895847][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.088901][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 335.104096][T12369] xfrm0 speed is unknown, defaulting to 1000 [ 335.419727][T12374] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:32789 [ 335.489226][T12375] loop4: detected capacity change from 0 to 512 [ 335.519850][T12375] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.2284: corrupted xattr block 95: invalid header [ 335.533628][T12375] fserror_report: 2 callbacks suppressed [ 335.533707][T12375] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 335.540200][T12375] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2284: bg 0: block 7: invalid block bitmap [ 335.550624][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 335.561663][T12375] loop4: lost filesystem error report for type 5 error -117 [ 335.567968][ C1] EXT4-fs (loop4): initial error at time 1777306318: ext4_expand_extra_isize_ea:2810 [ 335.568935][T12375] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 335.575264][ C1] : inode 11 [ 335.575279][ C1] EXT4-fs (loop4): last error at time 1777306318: ext4_validate_block_bitmap:432 [ 335.584735][T12375] loop4: lost filesystem error report for type 5 error -117 [ 335.593391][ C1] [ 335.621618][T12375] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.2284: corrupted xattr block 95: invalid header [ 335.635172][T12375] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 335.636341][T12375] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 335.654575][T12375] EXT4-fs (loop4): 1 orphan inode deleted [ 335.663916][T12375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.045977][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.226449][T12405] loop8: detected capacity change from 0 to 4096 [ 337.319608][T12405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.371530][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 337.371547][ T28] audit: type=1400 audit(1777306320.686:17382): avc: denied { mounton } for pid=12402 comm="syz.4.2290" path="/file0" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 337.455226][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.488620][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.530578][ T8936] udevd[8936]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system [ 337.596939][ T3285] udevd[3285]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 337.625532][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/954.tmp-b7:2' failed: Read-only file system [ 337.672216][ T3285] udevd[3285]: symlink '../../loop8' '/dev/disk/by-diskseq/961.tmp-b7:8' failed: Read-only file system [ 337.693796][ T3285] udevd[3285]: symlink '../../loop8' '/dev/disk/by-diskseq/961.tmp-b7:8' failed: Read-only file system [ 337.700356][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/954.tmp-b7:2' failed: Read-only file system [ 337.711148][ T3285] udevd[3285]: symlink '../../loop8' '/dev/disk/by-diskseq/963.tmp-b7:8' failed: Read-only file system [ 337.729896][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/962.tmp-b7:2' failed: Read-only file system [ 337.732284][ T28] audit: type=1400 audit(1777306321.046:17383): avc: denied { write } for pid=12423 comm="syz.8.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 337.735369][ T28] audit: type=1400 audit(1777306321.056:17384): avc: denied { read } for pid=12423 comm="syz.8.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 337.746661][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2294'. [ 337.761116][T12416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.763015][T12416] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.766580][T12416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.911108][T12416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.935450][T12416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.942243][T12416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.942310][T12416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.950818][T12416] veth1_macvtap: left promiscuous mode [ 337.951483][T12416] veth0_macvtap: left promiscuous mode [ 338.226367][T12416] veth0_macvtap: entered promiscuous mode [ 338.243700][T12416] veth1_macvtap: entered promiscuous mode [ 338.267821][T12416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.289101][T12416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.309410][T12416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.334964][T12416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.363757][T12416] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 338.397800][T12416] bridge0: port 2(batadv2) entered blocking state [ 338.404292][T12416] bridge0: port 2(batadv2) entered listening state [ 338.421444][T12416] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 338.471626][T12416] ip6gre1: left promiscuous mode [ 338.483284][T12416] ip6gre1: left allmulticast mode [ 338.508232][T12416] ip6tnl1: left allmulticast mode [ 338.527129][T12416] bridge0: port 3(batadv3) entered blocking state [ 338.533628][T12416] bridge0: port 3(batadv3) entered listening state [ 338.556797][T12416] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 338.578776][T12416] bridge0: port 4(batadv4) entered blocking state [ 338.585331][T12416] bridge0: port 4(batadv4) entered listening state [ 338.592977][T12416] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 338.602067][T12416] bridge0: port 5(batadv5) entered blocking state [ 338.608563][T12416] bridge0: port 5(batadv5) entered listening state [ 338.615539][T12416] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 338.635503][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.642635][ T8718] bridge0: port 1(bridge_slave_0) entered listening state [ 338.684546][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/962.tmp-b7:2' failed: Read-only file system [ 338.789434][ T3372] xfrm0 speed is unknown, defaulting to 1000 [ 338.804674][ T8722] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.805586][ T3372] syz0: Port: 1 Link ACTIVE [ 338.838271][ T8722] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.855777][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/963.tmp-b7:8' failed: Read-only file system [ 338.873925][T12443] loop2: detected capacity change from 0 to 512 [ 338.899172][T12452] loop8: detected capacity change from 0 to 512 [ 338.971606][T12453] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2303'. [ 338.988286][T12443] EXT4-fs: Ignoring removed bh option [ 339.005693][T12443] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.020186][ T3407] xfrm0 speed is unknown, defaulting to 1000 [ 339.030444][ T8722] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.039861][ T8722] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.048496][T12453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.055849][T12453] IPv6: NLM_F_CREATE should be set when creating new route [ 339.063078][T12453] IPv6: NLM_F_CREATE should be set when creating new route [ 339.089352][T12443] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 339.117045][T12457] xfrm0 speed is unknown, defaulting to 1000 [ 339.135751][T12443] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 339.145869][T12443] EXT4-fs (loop2): orphan cleanup on readonly fs [ 339.168445][T12443] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 339.188426][T12443] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 339.198576][ T28] audit: type=1400 audit(1777306322.516:17385): avc: denied { cmd } for pid=12459 comm="syz.4.2306" path="socket:[39409]" dev="sockfs" ino=39409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 339.236929][T12443] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2300: Failed to acquire dquot type 1 [ 339.251217][T12443] loop2: lost filesystem error report for type 5 error -5 [ 339.267701][T12443] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2300: Invalid block bitmap block 0 in block_group 0 [ 339.275311][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 339.275480][ C1] EXT4-fs (loop2): last error at time 1777306322: ext4_acquire_dquot:7034 [ 339.375979][T12463] loop8: detected capacity change from 0 to 512 [ 339.384262][T12443] loop2: lost filesystem error report for type 5 error -117 [ 339.388782][T12443] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2300: Invalid block bitmap block 0 in block_group 0 [ 339.429177][T12463] EXT4-fs: Ignoring removed bh option [ 339.441501][T12463] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.454333][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2309'. [ 339.466973][T12463] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 339.481027][T12470] netlink: 1140 bytes leftover after parsing attributes in process `syz.4.2309'. [ 339.502790][T12443] loop2: lost filesystem error report for type 5 error -117 [ 339.504776][T12443] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2300: Invalid block bitmap block 0 in block_group 0 [ 339.534578][T12463] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 339.607182][T12463] EXT4-fs (loop8): orphan cleanup on readonly fs [ 339.625080][T12443] loop2: lost filesystem error report for type 5 error -117 [ 339.626223][T12443] Quota error (device loop2): write_blk: dquota write failed [ 339.661073][T12463] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 339.703114][T12463] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 339.716478][T12443] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 339.731031][T12463] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2307: Failed to acquire dquot type 1 [ 339.747399][T12443] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2300: Failed to acquire dquot type 1 [ 339.753754][T12463] loop8: lost filesystem error report for type 5 error -5 [ 339.767446][T12463] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2307: Invalid block bitmap block 0 in block_group 0 [ 339.774864][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 339.774917][ C0] EXT4-fs (loop8): last error at time 1777306323: ext4_acquire_dquot:7034 [ 339.790816][T12443] loop2: lost filesystem error report for type 5 error -28 [ 339.824808][T12443] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2300: Failed to acquire dquot type 1 [ 339.827929][T12463] loop8: lost filesystem error report for type 5 error -117 [ 339.838441][T12443] loop2: lost filesystem error report for type 5 error -28 [ 339.871691][T12463] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2307: Invalid block bitmap block 0 in block_group 0 [ 339.906642][T12443] EXT4-fs (loop2): 1 orphan inode deleted [ 339.911913][T12463] loop8: lost filesystem error report for type 5 error -117 [ 339.912967][T12463] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2307: Invalid block bitmap block 0 in block_group 0 [ 339.944098][T12443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.956838][T12463] loop8: lost filesystem error report for type 5 error -117 [ 339.957541][T12463] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2307: Failed to acquire dquot type 1 [ 339.998766][T12463] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2307: Failed to acquire dquot type 1 [ 340.011813][T12463] EXT4-fs (loop8): 1 orphan inode deleted [ 340.019492][T12463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.070942][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.146290][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.158156][T12474] loop2: detected capacity change from 0 to 512 [ 340.192215][T12474] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 340.192414][T12481] loop8: detected capacity change from 0 to 512 [ 340.213384][T12481] EXT4-fs: Ignoring removed bh option [ 340.219273][T12481] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.263643][T12481] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 340.298997][T12481] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 340.307269][T12481] EXT4-fs (loop8): orphan cleanup on readonly fs [ 340.314075][T12481] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2312: Failed to acquire dquot type 1 [ 340.329351][T12481] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2312: Invalid block bitmap block 0 in block_group 0 [ 340.351330][T12481] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2312: Invalid block bitmap block 0 in block_group 0 [ 340.365039][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 340.365339][ C0] EXT4-fs (loop8): last error at time 1777306323: ext4_read_block_bitmap_nowait:483 [ 340.385319][T12481] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2312: Invalid block bitmap block 0 in block_group 0 [ 340.405823][T12481] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2312: Failed to acquire dquot type 1 [ 340.429015][T12481] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2312: Failed to acquire dquot type 1 [ 340.445623][T12481] EXT4-fs (loop8): 1 orphan inode deleted [ 340.472799][T12488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.475757][T12481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.545070][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.688141][T12511] netlink: 204 bytes leftover after parsing attributes in process `syz.8.2320'. [ 340.702652][T12511] netlink: 120 bytes leftover after parsing attributes in process `syz.8.2320'. [ 340.711716][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2320'. [ 340.720647][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2320'. [ 340.738490][T12513] batadv0: entered promiscuous mode [ 340.754099][T12513] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2322'. [ 340.781038][T12513] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 341.556468][T12525] loop2: detected capacity change from 0 to 512 [ 341.605717][T12525] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 341.752190][T12535] xfrm0 speed is unknown, defaulting to 1000 [ 341.968744][T12541] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2329'. [ 342.689826][T12544] loop2: detected capacity change from 0 to 512 [ 342.705507][T12544] EXT4-fs: Ignoring removed bh option [ 342.713139][T12544] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.723239][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/976.tmp-b7:2' failed: Read-only file system [ 342.735390][T12544] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 342.747751][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 342.788832][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/976.tmp-b7:2' failed: Read-only file system [ 342.804475][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 342.881123][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/973.tmp-b7:8' failed: Read-only file system [ 342.883088][T12544] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 342.927184][T12544] EXT4-fs (loop2): orphan cleanup on readonly fs [ 342.946350][T12544] __quota_error: 14 callbacks suppressed [ 342.946369][T12544] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 342.985186][T12544] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 343.007260][T12544] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2330: Failed to acquire dquot type 1 [ 343.070632][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 343.077095][ C1] EXT4-fs (loop2): last error at time 1777306326: ext4_acquire_dquot:7034 [ 343.097983][T12544] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2330: Invalid block bitmap block 0 in block_group 0 [ 343.154341][T12544] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2330: Invalid block bitmap block 0 in block_group 0 [ 343.191275][T12544] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2330: Invalid block bitmap block 0 in block_group 0 [ 343.207877][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/973.tmp-b7:8' failed: Read-only file system [ 343.217328][T12579] loop8: detected capacity change from 0 to 512 [ 343.230512][T12544] Quota error (device loop2): write_blk: dquota write failed [ 343.240683][T12579] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 343.245010][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/977.tmp-b7:8' failed: Read-only file system [ 343.258682][T12579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 343.259894][T12544] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 343.278301][T12579] System zones: 0-1, 15-15, 18-18, 34-34 [ 343.278473][T12579] EXT4-fs (loop8): orphan cleanup on readonly fs [ 343.278512][T12579] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 343.278539][T12579] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 343.278687][T12579] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 343.286162][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 343.314574][T12544] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2330: Failed to acquire dquot type 1 [ 343.316488][T12579] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.2342: bad orphan inode 16 [ 343.321715][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/977.tmp-b7:8' failed: Read-only file system [ 343.335067][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 343.335087][ C1] EXT4-fs (loop8): initial error at time 1777306326: ext4_orphan_get:1423 [ 343.335111][ C1] EXT4-fs (loop8): last error at time 1777306326: ext4_orphan_get:1423 [ 343.347007][T12544] Quota error (device loop2): write_blk: dquota write failed [ 343.356423][T12579] ext4_test_bit(bit=15, block=18) = 1 [ 343.356471][T12579] is_bad_inode(inode)=0 [ 343.356480][T12579] NEXT_ORPHAN(inode)=0 [ 343.356488][T12579] max_ino=32 [ 343.356494][T12579] i_nlink=2 [ 343.356988][T12579] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.381558][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 343.424206][T12544] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 343.457630][T12579] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 343.458055][T12544] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2330: Failed to acquire dquot type 1 [ 343.479133][T12544] EXT4-fs (loop2): 1 orphan inode deleted [ 343.485845][T12544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.518568][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.560333][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.625737][T12588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.651015][T12592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.718214][T12603] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 343.727229][T12603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12603 comm=syz.2.2348 [ 343.760518][ T28] audit: type=1326 audit(1777306327.076:17388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12604 comm="syz.8.2350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcf7e9cdd9 code=0x0 [ 343.826860][ T28] audit: type=1326 audit(1777306327.146:17389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.6.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 343.852999][ T28] audit: type=1326 audit(1777306327.146:17390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12612 comm="syz.6.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 343.865486][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2350'. [ 344.065517][T12623] loop2: detected capacity change from 0 to 4096 [ 344.112251][T12623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.120333][T12623] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 344.135263][T12623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.302251][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.358637][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2360'. [ 344.383271][T12641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.406944][T12639] bond2: entered promiscuous mode [ 344.412529][T12639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.472128][T12651] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2362'. [ 344.481768][T12651] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 344.489705][T12651] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 344.621690][T12660] netlink: 'syz.8.2367': attribute type 13 has an invalid length. [ 344.786553][T12671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12671 comm=syz.8.2369 [ 344.855157][T12671] loop8: detected capacity change from 0 to 256 [ 344.890290][T12677] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 344.941186][T12677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2371'. [ 345.091204][T12687] SELinux: policydb magic number 0x2f74656e does not match expected magic number 0xf97cff8c [ 345.102780][T12687] SELinux: failed to load policy [ 345.191991][T12698] loop8: detected capacity change from 0 to 512 [ 345.200574][T12698] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 345.226707][T12698] EXT4-fs (loop8): 1 truncate cleaned up [ 345.239220][T12698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.278570][T12704] Unsupported ieee802154 address type: 0 [ 345.284689][T12704] netlink: 'syz.2.2380': attribute type 63 has an invalid length. [ 345.300227][T12698] syzkaller0: entered promiscuous mode [ 345.310745][T12698] syzkaller0: entered allmulticast mode [ 345.343870][T12708] netlink: 'syz.2.2381': attribute type 4 has an invalid length. [ 345.357448][T12708] .`: renamed from bond0 (while UP) [ 345.700583][T12722] loop2: detected capacity change from 0 to 164 [ 345.903502][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.132352][T12739] __nla_validate_parse: 2 callbacks suppressed [ 347.132364][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2390'. [ 347.163980][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2390'. [ 347.960776][ T28] kauditd_printk_skb: 741 callbacks suppressed [ 347.960792][ T28] audit: type=1400 audit(1777306331.286:18132): avc: denied { relabelfrom } for pid=12763 comm="syz.4.2399" name="TCP" dev="sockfs" ino=39932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 347.990522][ T28] audit: type=1401 audit(1777306331.286:18133): op=setxattr invalid_context="system_u:object_r:hald_sonypic_exec_t:s0" [ 348.079570][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/986.tmp-b7:8' failed: Read-only file system [ 348.148887][T12773] tipc: Enabling of bearer rejected, failed to enable media [ 348.298280][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/986.tmp-b7:8' failed: Read-only file system [ 348.348025][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/986.tmp-b7:8' failed: Read-only file system [ 348.501975][T12796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.520364][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/985.tmp-b7:2' failed: Read-only file system [ 348.545261][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/985.tmp-b7:2' failed: Read-only file system [ 348.547123][T12800] loop2: detected capacity change from 0 to 512 [ 348.566284][T12800] EXT4-fs: Ignoring removed bh option [ 348.578404][T12800] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.583623][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/987.tmp-b7:2' failed: Read-only file system [ 348.585528][T12800] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 348.596996][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 348.606376][T12800] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 348.630228][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/988.tmp-b7:2' failed: Read-only file system [ 348.639983][T12800] EXT4-fs (loop2): orphan cleanup on readonly fs [ 348.650437][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 348.660254][T12800] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 348.672963][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/988.tmp-b7:2' failed: Read-only file system [ 348.685573][T12800] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 348.698944][T12800] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2409: Failed to acquire dquot type 1 [ 348.715588][T12800] fserror_report: 15 callbacks suppressed [ 348.715685][T12800] loop2: lost filesystem error report for type 5 error -5 [ 348.727165][T12800] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2409: Invalid block bitmap block 0 in block_group 0 [ 348.734948][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 348.735078][ C1] EXT4-fs (loop2): last error at time 1777306332: ext4_acquire_dquot:7034 [ 348.768974][T12800] loop2: lost filesystem error report for type 5 error -117 [ 348.771622][T12800] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2409: Invalid block bitmap block 0 in block_group 0 [ 348.793343][T12800] loop2: lost filesystem error report for type 5 error -117 [ 348.793656][T12800] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2409: Invalid block bitmap block 0 in block_group 0 [ 348.817165][T12800] loop2: lost filesystem error report for type 5 error -117 [ 348.817389][T12800] Quota error (device loop2): write_blk: dquota write failed [ 348.833136][T12800] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 348.843984][T12800] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2409: Failed to acquire dquot type 1 [ 348.857118][T12800] loop2: lost filesystem error report for type 5 error -28 [ 348.876617][T12800] Quota error (device loop2): write_blk: dquota write failed [ 348.893587][T12800] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 348.907822][T12800] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2409: Failed to acquire dquot type 1 [ 348.919267][T12800] loop2: lost filesystem error report for type 5 error -28 [ 348.919447][T12800] EXT4-fs (loop2): 1 orphan inode deleted [ 348.933357][T12800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.942119][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 348.960368][T12810] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.2412'. [ 349.052274][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2412'. [ 349.074847][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.321426][ T28] audit: type=1400 audit(1777306332.646:18134): avc: denied { lock } for pid=12813 comm="syz.8.2414" path="socket:[38733]" dev="sockfs" ino=38733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.404559][T12818] xfrm0 speed is unknown, defaulting to 1000 [ 349.663930][T12831] batman_adv: batadv0: Adding interface: dummy0 [ 349.663956][T12831] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 350.775066][T12867] xfrm0 speed is unknown, defaulting to 1000 [ 351.233676][T12882] loop8: detected capacity change from 0 to 1024 [ 351.249602][T12882] EXT4-fs: test_dummy_encryption option not supported [ 351.430775][T12885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12885 comm=syz.8.2430 [ 351.562106][T12884] loop2: detected capacity change from 0 to 1024 [ 351.574513][T12884] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.689611][T12872] xfrm0 speed is unknown, defaulting to 1000 [ 351.954573][T12884] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2431: Invalid block bitmap block 0 in block_group 0 [ 351.990096][T12884] loop2: lost filesystem error report for type 5 error -117 [ 351.990655][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 352.004665][ C0] EXT4-fs (loop2): initial error at time 1777306335: ext4_read_block_bitmap_nowait:483 [ 352.014784][ C0] EXT4-fs (loop2): last error at time 1777306335: ext4_read_block_bitmap_nowait:483 [ 352.027543][T12884] Quota error (device loop2): write_blk: dquota write failed [ 352.038522][T12884] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2431: Failed to acquire dquot type 0 [ 352.058967][T12884] loop2: lost filesystem error report for type 5 error -117 [ 352.101483][T12884] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2431: Freeing blocks not in datazone - block = 0, count = 4096 [ 352.144400][T12884] loop2: lost filesystem error report for type 5 error -117 [ 352.150485][T12884] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2431: Invalid inode bitmap blk 0 in block_group 0 [ 352.176883][ T8722] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:27: Failed to release dquot type 0 [ 352.191629][T12906] loop8: detected capacity change from 0 to 512 [ 352.196886][T12884] loop2: lost filesystem error report for type 5 error -117 [ 352.198418][T12884] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 352.206121][T12908] netlink: 'syz.6.2437': attribute type 4 has an invalid length. [ 352.214414][T12884] EXT4-fs (loop2): 1 orphan inode deleted [ 352.238153][T12908] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2437'. [ 352.244689][T12884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.260151][T12906] loop8: detected capacity change from 0 to 1024 [ 352.274658][T12908] .`: renamed from bond0 [ 352.293222][T12906] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 352.331863][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.399252][T12917] netlink: 'syz.2.2438': attribute type 6 has an invalid length. [ 352.407303][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2440'. [ 352.472418][T12919] xfrm0 speed is unknown, defaulting to 1000 [ 352.497833][T12915] netlink: 'syz.8.2439': attribute type 1 has an invalid length. [ 352.514072][T12915] netlink: 'syz.8.2439': attribute type 2 has an invalid length. [ 352.557665][T12925] loop2: detected capacity change from 0 to 8192 [ 352.874325][T12941] loop8: detected capacity change from 0 to 512 [ 352.945182][T12944] xfrm0 speed is unknown, defaulting to 1000 [ 353.267446][T12941] EXT4-fs warning (device loop8): read_mmp_block:111: Error -74 while reading MMP block 7 [ 353.285133][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/999.tmp-b7:8' failed: Read-only file system [ 353.327637][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 353.349408][ T8936] udevd[8936]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 353.364127][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/999.tmp-b7:8' failed: Read-only file system [ 353.396718][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/999.tmp-b7:8' failed: Read-only file system [ 353.428923][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 353.428936][ T28] audit: type=1326 audit(1777306336.736:18138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.2.2441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fccb6cdd9 code=0x0 [ 353.469829][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/999.tmp-b7:8' failed: Read-only file system [ 353.561252][ C0] bridge0: port 2(batadv2) entered learning state [ 353.571111][ C1] bridge0: port 3(batadv3) entered learning state [ 353.671502][T12965] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 353.686569][T12965] netlink: 'syz.4.2454': attribute type 2 has an invalid length. [ 353.749279][T12963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 353.894061][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/998.tmp-b7:2' failed: Read-only file system [ 353.915041][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/998.tmp-b7:2' failed: Read-only file system [ 353.942832][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1001.tmp-b7:2' failed: Read-only file system [ 353.991701][T12975] loop2: detected capacity change from 0 to 2048 [ 354.017860][T12975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.035152][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1002.tmp-b7:2' failed: Read-only file system [ 354.106588][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.200829][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 354.207949][ C1] bridge0: port 5(batadv5) entered learning state [ 354.214480][ C1] bridge0: port 4(batadv4) entered learning state [ 354.237730][T13006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.267908][T13017] futex_wake_op: syz.6.2470 tries to shift op by 144; fix this program [ 354.279229][T13010] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 354.293071][T13010] netlink: 'syz.4.2466': attribute type 2 has an invalid length. [ 354.468400][T13029] loop8: detected capacity change from 0 to 512 [ 354.682229][T13029] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 354.700598][T13029] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 354.825385][T13029] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 354.835710][T13029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 354.843930][T13029] System zones: 0-2, 18-18, 34-35 [ 354.849784][T13029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.873766][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.008331][T13054] netlink: 'syz.2.2480': attribute type 10 has an invalid length. [ 355.016611][T13054] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2480'. [ 355.025678][T13054] veth1_virt_wifi: entered promiscuous mode [ 355.088316][T13058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.273542][T13062] xfrm0 speed is unknown, defaulting to 1000 [ 356.057905][T13069] batadv_slave_0: entered promiscuous mode [ 356.080467][T13067] batadv_slave_0: left promiscuous mode [ 356.089239][T13079] batman_adv: batadv0: Removing interface: dummy0 [ 356.099000][T13079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.180937][T13094] netlink: 'syz.8.2486': attribute type 1 has an invalid length. [ 356.229651][T13102] loop2: detected capacity change from 0 to 512 [ 356.236447][T13102] ext4: Unknown parameter 'noacl' [ 356.930915][T13113] loop8: detected capacity change from 0 to 512 [ 356.973363][T13113] EXT4-fs: Ignoring removed mblk_io_submit option [ 356.996815][T13113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.007323][T13125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13125 comm=syz.7.2500 [ 357.051238][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2500'. [ 357.066088][T13113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.107444][T13113] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.148175][T13113] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 3: comm syz.8.2496: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 357.224121][T13131] loop2: detected capacity change from 0 to 512 [ 357.243956][T13131] EXT4-fs (loop2): Invalid log block size: 67108864 [ 357.336244][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2503'. [ 357.345517][T13137] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2503'. [ 357.523833][T13144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.872148][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.200860][T13166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13166 comm=syz.2.2511 [ 358.220962][T13166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2511'. [ 358.231204][ T28] audit: type=1326 audit(1777306341.556:18139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.266262][T13162] batman_adv: batadv0: Adding interface: dummy0 [ 358.272354][ T28] audit: type=1326 audit(1777306341.556:18140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.272559][T13162] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.272642][T13162] batman_adv: batadv0: Interface activated: dummy0 [ 358.296673][ T28] audit: type=1326 audit(1777306341.556:18141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.296702][ T28] audit: type=1326 audit(1777306341.556:18142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.296728][ T28] audit: type=1326 audit(1777306341.556:18143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.296798][ T28] audit: type=1326 audit(1777306341.576:18144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.296822][ T28] audit: type=1326 audit(1777306341.576:18145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.296848][ T28] audit: type=1326 audit(1777306341.576:18146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.296874][ T28] audit: type=1326 audit(1777306341.576:18147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.512586][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 358.512601][ T28] audit: type=1326 audit(1777306341.836:18172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.514325][T13164] macvlan3: mtu less than device minimum [ 358.518716][ T28] audit: type=1326 audit(1777306341.836:18173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.7.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 358.556378][T13164] batadv0: mtu less than device minimum [ 358.578669][T13164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.589698][T13164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.600596][T13164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.611562][T13164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 358.708754][ T3650] udevd[3650]: symlink '../../loop8' '/dev/disk/by-diskseq/1011.tmp-b7:8' failed: Read-only file system [ 358.807617][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1010.tmp-b7:2' failed: Read-only file system [ 358.839920][T11446] IPVS: starting estimator thread 0... [ 358.847361][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1011.tmp-b7:8' failed: Read-only file system [ 358.957508][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1011.tmp-b7:8' failed: Read-only file system [ 358.969366][T13189] IPVS: using max 2304 ests per chain, 115200 per kthread [ 359.038907][T13196] FAULT_INJECTION: forcing a failure. [ 359.038907][T13196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.059831][T13196] CPU: 1 UID: 0 PID: 13196 Comm: syz.8.2520 Tainted: G W syzkaller #0 PREEMPT(full) [ 359.059904][T13196] Tainted: [W]=WARN [ 359.059961][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.060070][T13196] Call Trace: [ 359.060077][T13196] [ 359.060084][T13196] __dump_stack+0x1d/0x30 [ 359.060111][T13196] dump_stack_lvl+0x95/0xd0 [ 359.060136][T13196] dump_stack+0x15/0x1b [ 359.060182][T13196] should_fail_ex+0x263/0x280 [ 359.060207][T13196] should_fail+0xb/0x20 [ 359.060230][T13196] should_fail_usercopy+0x1a/0x20 [ 359.060303][T13196] _copy_from_user+0x1c/0xb0 [ 359.060332][T13196] get_user_ifreq+0x52/0x110 [ 359.060359][T13196] inet_ioctl+0x2c6/0x3a0 [ 359.060390][T13196] packet_ioctl+0x239/0x280 [ 359.060442][T13196] sock_do_ioctl+0x73/0x230 [ 359.060472][T13196] sock_ioctl+0x41b/0x610 [ 359.060497][T13196] ? mutex_lock+0x57/0x90 [ 359.060549][T13196] ? __pfx_sock_ioctl+0x10/0x10 [ 359.060571][T13196] __se_sys_ioctl+0xce/0x140 [ 359.060670][T13196] __x64_sys_ioctl+0x43/0x50 [ 359.060697][T13196] x64_sys_call+0x1563/0x3020 [ 359.060738][T13196] do_syscall_64+0x12c/0x3b0 [ 359.060764][T13196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.060786][T13196] RIP: 0033:0x7fdcf7e9cdd9 [ 359.060800][T13196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.060881][T13196] RSP: 002b:00007fdcf68f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.060900][T13196] RAX: ffffffffffffffda RBX: 00007fdcf8115fa0 RCX: 00007fdcf7e9cdd9 [ 359.060917][T13196] RDX: 0000200000000040 RSI: 0000000000008918 RDI: 0000000000000006 [ 359.060946][T13196] RBP: 00007fdcf68f7090 R08: 0000000000000000 R09: 0000000000000000 [ 359.060962][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.060974][T13196] R13: 00007fdcf8116038 R14: 00007fdcf8115fa0 R15: 00007ffdae346148 [ 359.060991][T13196] [ 359.351263][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1011.tmp-b7:8' failed: Read-only file system [ 359.467188][T13226] syz.6.2529 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 359.483423][T13218] loop8: detected capacity change from 0 to 1024 [ 359.490314][T13218] EXT4-fs: Ignoring removed nobh option [ 359.496360][T13218] EXT4-fs: Ignoring removed i_version option [ 359.511499][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1012.tmp-b7:8' failed: Read-only file system [ 359.529142][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 359.550725][T13218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.564889][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1012.tmp-b7:8' failed: Read-only file system [ 359.588736][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 359.605093][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1010.tmp-b7:2' failed: Read-only file system [ 359.635622][ T28] audit: type=1326 audit(1777306342.956:18174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.682365][ T28] audit: type=1326 audit(1777306342.976:18175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.714372][ T28] audit: type=1326 audit(1777306342.976:18176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.740800][ T28] audit: type=1326 audit(1777306342.976:18177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.764841][ T28] audit: type=1326 audit(1777306342.976:18178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.789334][T13238] batman_adv: batadv0: Adding interface: dummy0 [ 359.789436][ T28] audit: type=1326 audit(1777306342.986:18179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.799135][T13238] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.819521][ T28] audit: type=1326 audit(1777306342.986:18180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.819551][ T28] audit: type=1326 audit(1777306342.986:18181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9fccb6cdd9 code=0x7ffc0000 [ 359.899382][T13238] batman_adv: batadv0: Interface activated: dummy0 [ 359.913395][T13248] bond0: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 359.923139][T13248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.957714][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.050454][T13258] veth0_vlan: entered allmulticast mode [ 360.052155][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2538'. [ 360.084299][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2537'. [ 360.107109][T13262] loop2: detected capacity change from 0 to 2048 [ 360.115105][T13262] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 360.237957][T13258] veth0_vlan (unregistering): left allmulticast mode [ 360.302497][T13271] xfrm0 speed is unknown, defaulting to 1000 [ 360.314427][T13280] loop2: detected capacity change from 0 to 128 [ 360.337127][T13280] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 360.352822][T13280] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.482935][T13287] bridge_slave_0: left allmulticast mode [ 360.488672][T13287] bridge_slave_0: left promiscuous mode [ 360.494394][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.505675][T13287] bond0: (slave bridge_slave_1): Releasing backup interface [ 360.520375][T13287] bond0: (slave bond_slave_0): Releasing backup interface [ 360.536531][T13287] bond0: (slave bond_slave_1): Releasing backup interface [ 360.552905][T13287] team0: Port device team_slave_0 removed [ 360.576294][T13287] team0: Port device team_slave_1 removed [ 360.587658][T13287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.595991][T13287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.615947][T13287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.624402][T13287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.641191][T13287] net_ratelimit: 15 callbacks suppressed [ 360.641315][T13287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.683146][T13265] xfrm0 speed is unknown, defaulting to 1000 [ 360.799532][T13283] xfrm0 speed is unknown, defaulting to 1000 [ 360.984489][T13295] xfrm0 speed is unknown, defaulting to 1000 [ 361.222202][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.343447][T13318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13318 comm=syz.7.2554 [ 361.390457][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2554'. [ 361.457812][T13322] IPVS: stopping backup sync thread 12237 ... [ 361.630922][T13330] loop2: detected capacity change from 0 to 128 [ 361.768710][T13330] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 362.709962][T13330] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.294519][T13355] xfrm0 speed is unknown, defaulting to 1000 [ 363.357879][T13357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13357 comm=syz.7.2566 [ 363.371130][T13357] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2566'. [ 363.468566][T13366] vlan2: entered promiscuous mode [ 363.480651][T13366] bridge0: entered promiscuous mode [ 363.554181][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.603416][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 363.603449][ T28] audit: type=1400 audit(1777306346.926:18197): avc: denied { accept } for pid=13377 comm="syz.8.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.636308][T13380] macvlan2: entered promiscuous mode [ 363.641991][T13380] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 363.649850][T13380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 363.666863][T13378] loop8: detected capacity change from 0 to 512 [ 363.673377][T13380] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 363.691942][T13386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13386 comm=syz.4.2578 [ 363.705161][T13386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2578'. [ 363.763371][T13378] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 363.775113][T13378] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 363.785521][T13378] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2576: Corrupt directory, running e2fsck is recommended [ 363.799763][T13378] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 363.809071][T13378] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.2576: corrupted in-inode xattr: e_name out of bounds [ 363.827026][T13378] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.827262][T13378] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2576: couldn't read orphan inode 15 (err -117) [ 363.836444][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 363.836460][ C0] EXT4-fs (loop8): initial error at time 1777306347: ext4_iget_extra_inode:5128: inode 15 [ 363.836490][ C0] EXT4-fs (loop8): last error at time 1777306347: ext4_iget_extra_inode:5128: inode 15 [ 363.883230][T13378] fserror_report: 2 callbacks suppressed [ 363.883244][T13378] loop8: lost filesystem error report for type 5 error -117 [ 363.889879][T13378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.124176][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.183646][ T8936] udevd[8936]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 364.342362][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1020.tmp-b7:8' failed: Read-only file system [ 364.369908][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1020.tmp-b7:8' failed: Read-only file system [ 364.423929][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1021.tmp-b7:8' failed: Read-only file system [ 364.707501][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1019.tmp-b7:2' failed: Read-only file system [ 364.762693][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 364.789872][T13414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.805452][T13414] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 364.847980][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1019.tmp-b7:2' failed: Read-only file system [ 364.870733][T13420] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2589'. [ 364.922779][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1019.tmp-b7:2' failed: Read-only file system [ 364.962212][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1019.tmp-b7:2' failed: Read-only file system [ 365.084249][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1021.tmp-b7:8' failed: Read-only file system [ 365.135288][T13440] loop8: detected capacity change from 0 to 4096 [ 365.153021][T13440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.161867][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1022.tmp-b7:8' failed: Read-only file system [ 365.206309][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.242253][T13443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 365.311593][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2599'. [ 365.581668][T13479] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 365.592102][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2606'. [ 366.378163][T13493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 366.977596][T13523] xfrm0 speed is unknown, defaulting to 1000 [ 367.031172][T13520] loop8: detected capacity change from 0 to 2048 [ 367.038532][T13520] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 367.239663][T13532] xfrm0 speed is unknown, defaulting to 1000 [ 367.824516][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 368.011382][T13541] xfrm0 speed is unknown, defaulting to 1000 [ 368.174500][T13553] xfrm0 speed is unknown, defaulting to 1000 [ 368.607828][ T28] audit: type=1326 audit(1777306351.926:18198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13562 comm="syz.4.2634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5138f7cdd9 code=0x0 [ 368.849998][T13583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13583 comm=syz.6.2640 [ 368.864097][T13583] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2640'. [ 368.927767][ C0] bridge0: port 2(batadv2) entered forwarding state [ 368.934412][ C0] bridge0: topology change detected, propagating [ 368.940854][ C1] bridge0: port 3(batadv3) entered forwarding state [ 368.947461][ C1] bridge0: topology change detected, propagating [ 368.974881][T13588] loop2: detected capacity change from 0 to 2048 [ 369.005809][T13588] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 369.178897][T13609] xfrm0 speed is unknown, defaulting to 1000 [ 369.330465][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1027.tmp-b7:2' failed: Read-only file system [ 369.381108][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1025.tmp-b7:8' failed: Read-only file system [ 369.408531][T13618] loop8: detected capacity change from 0 to 4096 [ 369.413153][T13615] batman_adv: batadv0: Interface deactivated: dummy0 [ 369.425351][T13615] batman_adv: batadv0: Removing interface: dummy0 [ 369.438991][T13618] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.466092][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1028.tmp-b7:8' failed: Read-only file system [ 369.490413][T13615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 369.504036][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 369.522735][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.558336][ T8936] udevd[8936]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 369.569825][ C1] bridge0: port 4(batadv4) entered forwarding state [ 369.569850][ C1] bridge0: topology change detected, propagating [ 369.569913][ C1] bridge0: port 5(batadv5) entered forwarding state [ 369.569926][ C1] bridge0: topology change detected, propagating [ 369.602208][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1028.tmp-b7:8' failed: Read-only file system [ 369.617038][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1027.tmp-b7:2' failed: Read-only file system [ 369.618582][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1028.tmp-b7:8' failed: Read-only file system [ 369.664702][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1029.tmp-b7:8' failed: Read-only file system [ 369.694928][T13638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 369.716376][T13640] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 369.774850][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1029.tmp-b7:8' failed: Read-only file system [ 369.797152][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'. [ 369.850706][T13651] validate_nla: 1 callbacks suppressed [ 369.850723][T13651] netlink: 'syz.8.2659': attribute type 1 has an invalid length. [ 369.865292][ T28] audit: type=1326 audit(1777306354.191:18199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.2.2662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fccb6cdd9 code=0x0 [ 369.888675][T13651] netlink: 'syz.8.2659': attribute type 2 has an invalid length. [ 370.004718][T13675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.323213][T13705] xfrm0 speed is unknown, defaulting to 1000 [ 370.632571][T13729] netlink: 'syz.4.2676': attribute type 5 has an invalid length. [ 370.742323][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2675'. [ 370.756344][T13734] loop8: detected capacity change from 0 to 512 [ 370.773055][T13734] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 370.803289][T13734] EXT4-fs (loop8): 1 truncate cleaned up [ 370.809331][T13734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.927626][T13745] xfrm0 speed is unknown, defaulting to 1000 [ 371.316603][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.459545][T13752] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2681'. [ 371.460804][T13751] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2681'. [ 371.689710][T13754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.470232][T13779] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2687'. [ 372.747540][T13791] loop2: detected capacity change from 0 to 128 [ 372.758710][T13791] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 372.792754][T13791] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.015507][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2693'. [ 373.178068][T13806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13806 comm=syz.6.2697 [ 373.191367][T13806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2697'. [ 373.283022][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 373.326875][T13813] xfrm0 speed is unknown, defaulting to 1000 [ 373.653698][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.660520][T13825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.947135][T13853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.981282][T13867] netlink: 'syz.7.2711': attribute type 1 has an invalid length. [ 373.989280][T13867] netlink: 'syz.7.2711': attribute type 2 has an invalid length. [ 374.027668][T13839] loop2: detected capacity change from 0 to 512 [ 374.072212][T13839] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.091218][T13839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.125912][T13871] xfrm0 speed is unknown, defaulting to 1000 [ 374.176172][T13839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.202894][T13839] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.268614][T13839] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.2706: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 374.331327][T13869] xfrm0 speed is unknown, defaulting to 1000 [ 374.415366][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.430701][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1031.tmp-b7:8' failed: Read-only file system [ 374.464884][T13879] loop8: detected capacity change from 0 to 4096 [ 374.476784][ T3285] udevd[3285]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 374.493144][T13879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.493446][T13881] loop2: detected capacity change from 0 to 4096 [ 374.538827][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1034.tmp-b7:2' failed: Read-only file system [ 374.554822][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.568183][T13881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.586499][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1036.tmp-b7:8' failed: Read-only file system [ 374.610943][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 374.633511][ T8936] udevd[8936]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 374.646192][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1036.tmp-b7:8' failed: Read-only file system [ 374.662271][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1036.tmp-b7:8' failed: Read-only file system [ 374.696262][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1034.tmp-b7:2' failed: Read-only file system [ 374.725181][T13887] loop8: detected capacity change from 0 to 4096 [ 374.725842][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 374.749395][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.776533][T13887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.873575][T13897] netlink: 'syz.4.2721': attribute type 1 has an invalid length. [ 374.885686][T13897] netlink: 'syz.4.2721': attribute type 3 has an invalid length. [ 374.900466][T13897] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2721'. [ 374.934724][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.964869][T13904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13904 comm=syz.4.2725 [ 375.006280][T13904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2725'. [ 375.101284][T13907] loop8: detected capacity change from 0 to 128 [ 375.150878][T13907] bio_check_eod: 152 callbacks suppressed [ 375.150900][T13907] syz.8.2722: attempt to access beyond end of device [ 375.150900][T13907] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 375.180215][T13907] syz.8.2722: attempt to access beyond end of device [ 375.180215][T13907] loop8: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 375.199286][T13907] syz.8.2722: attempt to access beyond end of device [ 375.199286][T13907] loop8: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 375.219740][T13907] Buffer I/O error on dev loop8, logical block 71, lost async page write [ 375.223697][ T28] audit: type=1400 audit(1777306359.531:18200): avc: denied { read } for pid=13905 comm="syz.8.2722" lport=57502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 375.424188][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2723'. [ 375.856153][T13926] xfrm0 speed is unknown, defaulting to 1000 [ 375.954260][T13924] xfrm0 speed is unknown, defaulting to 1000 [ 376.053810][T13936] loop8: detected capacity change from 0 to 512 [ 376.075681][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2737'. [ 376.092519][ T28] audit: type=1400 audit(1777306360.391:18201): avc: denied { read } for pid=13940 comm="syz.6.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 376.132441][T13936] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.158731][T13936] EXT4-fs (loop8): orphan cleanup on readonly fs [ 376.190111][T13936] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.2735: Allocating blocks 41-42 which overlap fs metadata [ 376.217579][T13936] loop8: lost filesystem error report for type 5 error -117 [ 376.222587][T13936] Quota error (device loop8): write_blk: dquota write failed [ 376.238400][T13936] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 376.248660][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 376.248731][ C1] EXT4-fs (loop8): initial error at time 1777306360: ext4_mb_mark_diskspace_used:4222 [ 376.248867][ C1] EXT4-fs (loop8): last error at time 1777306360: ext4_mb_mark_diskspace_used:4222 [ 376.287705][T13936] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2735: Failed to acquire dquot type 0 [ 376.299434][T13936] loop8: lost filesystem error report for type 5 error -117 [ 376.301407][T13936] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 376.334879][T13936] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.2735: corrupted inode contents [ 376.347370][T13936] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 376.348092][T13936] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #12: comm syz.8.2735: mark_inode_dirty error [ 376.380505][T13936] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 376.381663][T13936] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.2735: corrupted inode contents [ 376.403899][T13936] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 376.404668][T13936] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #12: comm syz.8.2735: mark_inode_dirty error [ 376.439525][T13936] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 376.444602][T13936] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.2735: corrupted inode contents [ 376.491681][T13936] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 376.495947][T13936] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 376.515851][T13936] loop8: lost filesystem error report for type 5 error -117 [ 376.517141][T13936] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #12: comm syz.8.2735: corrupted inode contents [ 376.561558][ T28] audit: type=1326 audit(1777306360.881:18202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 376.563698][T13936] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 376.587453][ T28] audit: type=1326 audit(1777306360.911:18203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 376.604154][T13969] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 376.626433][T13936] EXT4-fs error (device loop8): ext4_truncate:4690: inode #12: comm syz.8.2735: mark_inode_dirty error [ 376.633109][ T28] audit: type=1326 audit(1777306360.911:18204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 376.633239][ T28] audit: type=1326 audit(1777306360.911:18205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 376.633358][ T28] audit: type=1326 audit(1777306360.911:18206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 376.633470][ T28] audit: type=1326 audit(1777306360.911:18207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13968 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fcbc527cdd9 code=0x7ffc0000 [ 376.742922][T13936] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 376.744207][T13969] bond0 (unregistering): Released all slaves [ 376.780896][T13936] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 376.796032][T13936] loop8: lost filesystem error report for type 5 error -117 [ 376.797767][T13936] EXT4-fs (loop8): 1 truncate cleaned up [ 376.813172][T13936] EXT4-fs (loop8): pa ffff8881075d91c0: logic 1, phys. 41, len 23 [ 376.821152][T13936] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 376.842239][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 376.849756][T13936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.898927][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.921586][T13976] netlink: 'syz.8.2748': attribute type 12 has an invalid length. [ 376.929795][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2748'. [ 376.939270][T13976] bond0: option primary_reselect: invalid value (191) [ 377.159251][T13996] netlink: 'syz.2.2755': attribute type 1 has an invalid length. [ 377.181942][T13996] netlink: 'syz.2.2755': attribute type 2 has an invalid length. [ 377.324756][T14018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 377.364046][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'. [ 377.738897][T14049] netlink: 'syz.8.2772': attribute type 1 has an invalid length. [ 377.754194][T14049] netlink: 'syz.8.2772': attribute type 2 has an invalid length. [ 377.757392][T14055] loop2: detected capacity change from 0 to 512 [ 377.779556][T14055] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 377.801124][T14055] FAULT_INJECTION: forcing a failure. [ 377.801124][T14055] name failslab, interval 1, probability 0, space 0, times 0 [ 377.820569][T14055] CPU: 0 UID: 0 PID: 14055 Comm: syz.2.2774 Tainted: G W syzkaller #0 PREEMPT(full) [ 377.820653][T14055] Tainted: [W]=WARN [ 377.820677][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.820690][T14055] Call Trace: [ 377.820699][T14055] [ 377.820708][T14055] __dump_stack+0x1d/0x30 [ 377.820734][T14055] dump_stack_lvl+0x95/0xd0 [ 377.820770][T14055] dump_stack+0x15/0x1b [ 377.820849][T14055] should_fail_ex+0x263/0x280 [ 377.820878][T14055] ? fat_parse_long+0x62/0x430 [ 377.820911][T14055] should_failslab+0x8c/0xb0 [ 377.820950][T14055] __kmalloc_cache_noprof+0x5f/0x400 [ 377.820984][T14055] fat_parse_long+0x62/0x430 [ 377.821026][T14055] fat_search_long+0x1cc/0x9b0 [ 377.821113][T14055] ? avc_has_perm+0x101/0x190 [ 377.821150][T14055] vfat_lookup+0xd4/0x2e0 [ 377.821219][T14055] ? __pfx_vfat_lookup+0x10/0x10 [ 377.821248][T14055] path_openat+0xbf0/0x2050 [ 377.821289][T14055] do_file_open+0x16c/0x290 [ 377.821323][T14055] do_sys_openat2+0x94/0x130 [ 377.821345][T14055] __x64_sys_openat+0xf2/0x120 [ 377.821401][T14055] x64_sys_call+0x1e39/0x3020 [ 377.821454][T14055] do_syscall_64+0x12c/0x3b0 [ 377.821480][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.821502][T14055] RIP: 0033:0x7f9fccb6cdd9 [ 377.821520][T14055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.821583][T14055] RSP: 002b:00007f9fcb5c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.821605][T14055] RAX: ffffffffffffffda RBX: 00007f9fccde5fa0 RCX: 00007f9fccb6cdd9 [ 377.821621][T14055] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 377.821635][T14055] RBP: 00007f9fcb5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 377.821750][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.821762][T14055] R13: 00007f9fccde6038 R14: 00007f9fccde5fa0 R15: 00007ffc2afbf118 [ 377.821804][T14055] [ 378.115469][T14064] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2778'. [ 378.226414][T14080] xfrm0 speed is unknown, defaulting to 1000 [ 378.331748][T14085] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 378.414000][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 378.423141][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 378.449785][T14091] netlink: 'syz.8.2787': attribute type 1 has an invalid length. [ 378.458137][T14091] netlink: 'syz.8.2787': attribute type 2 has an invalid length. [ 378.990056][T14104] loop2: detected capacity change from 0 to 4096 [ 379.009963][T14104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.055031][T14108] loop8: detected capacity change from 0 to 4096 [ 379.075393][T14108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.102903][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.128216][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.168496][T14113] netlink: 'syz.8.2794': attribute type 4 has an invalid length. [ 379.299320][T14124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.331197][T14117] loop2: detected capacity change from 0 to 512 [ 379.344128][T14117] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.353145][T14117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 379.388257][T14117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.401445][T14126] loop8: detected capacity change from 0 to 4096 [ 379.402094][T14117] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.421788][T14126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.439817][T14126] vlan2: entered allmulticast mode [ 379.445148][T14126] veth0_to_bond: entered allmulticast mode [ 379.451138][T14117] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.2796: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 379.452169][T14126] bond1: (slave vlan2): Opening slave failed [ 379.483625][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1053.tmp-b7:8' failed: Read-only file system [ 379.496444][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 379.538502][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.556818][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 379.570129][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1052.tmp-b7:2' failed: Read-only file system [ 379.585259][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1052.tmp-b7:2' failed: Read-only file system [ 379.599496][T14131] bond2: entered promiscuous mode [ 379.607623][T14131] bond2: entered allmulticast mode [ 379.608372][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1054.tmp-b7:2' failed: Read-only file system [ 379.613677][T14131] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.635496][T14133] erspan2: entered allmulticast mode [ 379.643618][T14133] bond2: (slave erspan2): making interface the new active one [ 379.651452][T14133] erspan2: entered promiscuous mode [ 379.657599][T14133] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 379.706354][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1054.tmp-b7:2' failed: Read-only file system [ 379.717693][T14135] xfrm0 speed is unknown, defaulting to 1000 [ 379.791626][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1054.tmp-b7:2' failed: Read-only file system [ 379.827107][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1054.tmp-b7:2' failed: Read-only file system [ 379.894875][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1054.tmp-b7:2' failed: Read-only file system [ 379.930197][T14146] loop2: detected capacity change from 0 to 4096 [ 379.943151][T14146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.973753][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.004334][T14151] program syz.2.2805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.056869][T14153] loop2: detected capacity change from 0 to 1024 [ 380.083751][T14153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 380.092299][T14153] System zones: 0-1, 3-36 [ 380.098366][T14153] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2807: bad orphan inode 134217728 [ 380.109619][T14153] loop2: lost filesystem error report for type 5 error -117 [ 380.110225][T14153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.144714][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.318262][T14160] loop8: detected capacity change from 0 to 512 [ 380.344605][T14160] EXT4-fs: Ignoring removed mblk_io_submit option [ 380.352814][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.355906][T14160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.386758][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2810'. [ 380.398181][T14160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.411811][T14160] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.460953][T14160] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 3: comm syz.8.2809: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 380.520300][T14175] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 380.532763][T14175] loop2: detected capacity change from 0 to 128 [ 380.540485][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.547274][T14175] msdos: Unknown parameter 'E-' [ 380.589195][T14178] loop8: detected capacity change from 0 to 4096 [ 380.596377][T14175] loop2: detected capacity change from 0 to 1024 [ 380.606268][T14178] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.624673][T14175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.638686][T14175] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 380.639567][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.696225][T14181] xfrm0 speed is unknown, defaulting to 1000 [ 380.836771][T14184] loop8: detected capacity change from 0 to 256 [ 380.850260][T14184] vfat: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 380.953409][ T28] kauditd_printk_skb: 820 callbacks suppressed [ 380.953421][ T28] audit: type=1326 audit(1777306365.271:19028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 380.993733][ T28] audit: type=1326 audit(1777306365.301:19029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 381.017877][ T28] audit: type=1326 audit(1777306365.301:19030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 381.020571][T14175] xfrm0 speed is unknown, defaulting to 1000 [ 381.041747][ T28] audit: type=1326 audit(1777306365.301:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 381.041779][ T28] audit: type=1326 audit(1777306365.301:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde9c3d60e code=0x7ffc0000 [ 381.099297][ T28] audit: type=1326 audit(1777306365.301:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efde9c3d60e code=0x7ffc0000 [ 381.123208][ T28] audit: type=1326 audit(1777306365.301:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efde9c3d60e code=0x7ffc0000 [ 381.147261][ T28] audit: type=1326 audit(1777306365.301:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 381.561791][ T28] audit: type=1326 audit(1777306365.871:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138f7cdd9 code=0x7ffc0000 [ 381.621201][ T28] audit: type=1326 audit(1777306365.871:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.4.2823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138f7cdd9 code=0x7ffc0000 [ 381.798872][T14213] xfrm0 speed is unknown, defaulting to 1000 [ 382.846413][T14231] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 382.860782][T14231] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 382.870697][T14231] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.2824: inode #1: comm syz.2.2824: iget: illegal inode # [ 382.883849][T14231] loop2: lost filesystem error report for type 5 error -117 [ 382.884426][T14231] EXT4-fs (loop2): no journal found [ 382.891966][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 382.892007][ C0] EXT4-fs (loop2): initial error at time 1777306367: ext4_get_journal_inode:5896 [ 382.892227][ C0] EXT4-fs (loop2): last error at time 1777306367: ext4_get_journal_inode:5896 [ 382.924044][T14231] EXT4-fs (loop2): can't get journal size [ 383.708331][T14231] EXT4-fs (loop2): failed to initialize system zone (-22) [ 383.719356][T14231] EXT4-fs (loop2): mount failed [ 384.405301][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2824'. [ 384.497211][T14244] set_capacity_and_notify: 1 callbacks suppressed [ 384.497230][T14244] loop8: detected capacity change from 0 to 128 [ 384.584617][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1072.tmp-b7:8' failed: Read-only file system [ 384.596193][T14244] msdos: Unknown parameter 'E-' [ 384.614053][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1071.tmp-b7:2' failed: Read-only file system [ 384.674313][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1072.tmp-b7:8' failed: Read-only file system [ 384.701079][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1071.tmp-b7:2' failed: Read-only file system [ 384.732224][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1072.tmp-b7:8' failed: Read-only file system [ 384.881080][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1072.tmp-b7:8' failed: Read-only file system [ 384.999268][T14244] loop8: detected capacity change from 0 to 1024 [ 385.260056][T14244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.280156][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1074.tmp-b7:8' failed: Read-only file system [ 385.307825][T14244] EXT4-fs (loop8): The Hurd can't support 64-bit file systems [ 385.342658][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:8' failed: Read-only file system [ 385.454078][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1074.tmp-b7:8' failed: Read-only file system [ 385.488946][T14277] validate_nla: 5 callbacks suppressed [ 385.489073][T14277] netlink: 'syz.4.2835': attribute type 1 has an invalid length. [ 385.603670][T14277] netlink: 'syz.4.2835': attribute type 2 has an invalid length. [ 385.622049][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1071.tmp-b7:2' failed: Read-only file system [ 385.630915][T14283] netlink: 'syz.8.2837': attribute type 1 has an invalid length. [ 385.935071][T14286] loop8: detected capacity change from 0 to 128 [ 385.954405][T14286] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.990462][T14312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2847'. [ 385.999965][T14286] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.017257][T14312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2847'. [ 386.071784][ T9125] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.192683][T14324] netlink: 'syz.8.2849': attribute type 1 has an invalid length. [ 386.201176][T14324] netlink: 'syz.8.2849': attribute type 2 has an invalid length. [ 386.218794][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 386.218885][ T28] audit: type=1400 audit(1777306370.531:19100): avc: denied { lock } for pid=14331 comm="syz.2.2854" path="socket:[45610]" dev="sockfs" ino=45610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.238580][T14332] xfrm0 speed is unknown, defaulting to 1000 [ 386.296098][T14337] loop2: detected capacity change from 0 to 512 [ 386.372639][T14337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.433927][T14337] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.473743][T14345] loop8: detected capacity change from 0 to 2048 [ 386.480374][T14345] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 386.578526][T14349] loop8: detected capacity change from 0 to 4096 [ 386.593069][T14349] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.650531][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.692698][T14354] loop8: detected capacity change from 0 to 4096 [ 386.714035][T14354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.773447][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.805234][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.926783][T14370] netlink: 'syz.2.2867': attribute type 1 has an invalid length. [ 386.942390][T14370] netlink: 'syz.2.2867': attribute type 2 has an invalid length. [ 386.956147][T14373] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2868'. [ 386.982376][T14378] loop8: detected capacity change from 0 to 128 [ 387.001023][T14378] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 387.042046][T14378] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.226244][T14388] loop2: detected capacity change from 0 to 128 [ 387.246321][T14388] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 387.304279][T14388] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.337025][T14390] xfrm0 speed is unknown, defaulting to 1000 [ 387.800519][T14404] xfrm0 speed is unknown, defaulting to 1000 [ 388.007918][ T9125] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.067264][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2879'. [ 388.077201][ T28] audit: type=1400 audit(1777306372.371:19101): avc: denied { accept } for pid=14406 comm="syz.7.2878" path="socket:[44778]" dev="sockfs" ino=44778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 388.154730][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.238248][T14422] netlink: 'syz.2.2881': attribute type 1 has an invalid length. [ 388.246290][T14422] netlink: 'syz.2.2881': attribute type 2 has an invalid length. [ 388.338343][T14435] loop8: detected capacity change from 0 to 4096 [ 388.363994][T14435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.421501][ T28] audit: type=1400 audit(1777306372.741:19102): avc: denied { bind } for pid=14418 comm="syz.6.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 388.483089][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.499325][T14441] netlink: 'syz.2.2888': attribute type 1 has an invalid length. [ 388.576997][T14445] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 388.586187][T14441] bond3: (slave geneve2): making interface the new active one [ 388.603753][T14441] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 388.612618][T14445] System zones: 0-1, 3-36 [ 388.617629][T14445] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.2887: bad orphan inode 134217728 [ 388.623193][ T8722] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.630850][T14445] loop8: lost filesystem error report for type 5 error -117 [ 388.637858][T14445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.117163][ T8722] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 389.125766][ T8722] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 389.151635][ T8722] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 389.272640][T14466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.306634][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 389.344805][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.372044][T14483] dns_resolver: Unsupported server list version (0) [ 389.404511][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.442689][ T28] audit: type=1400 audit(1777306373.761:19103): avc: denied { associate } for pid=14488 comm="syz.8.2903" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 389.562675][T14495] set_capacity_and_notify: 2 callbacks suppressed [ 389.562694][T14495] loop2: detected capacity change from 0 to 512 [ 389.595522][T14495] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.598018][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1096.tmp-b7:2' failed: Read-only file system [ 389.620512][T14495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.636317][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 389.655334][T14495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.681227][T14495] ext4 filesystem being mounted at /559/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.684785][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1096.tmp-b7:2' failed: Read-only file system [ 389.721304][T14485] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.2900: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 389.729596][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 389.745080][T14507] netlink: 520 bytes leftover after parsing attributes in process `syz.6.2907'. [ 389.808256][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.829323][ T8936] udevd[8936]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 389.847677][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1096.tmp-b7:2' failed: Read-only file system [ 389.865183][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1096.tmp-b7:2' failed: Read-only file system [ 389.889428][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1096.tmp-b7:2' failed: Read-only file system [ 389.905073][ T3285] udevd[3285]: symlink '../../loop8' '/dev/disk/by-diskseq/1095.tmp-b7:8' failed: Read-only file system [ 389.958579][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1095.tmp-b7:8' failed: Read-only file system [ 389.973794][T14521] loop8: detected capacity change from 0 to 512 [ 389.981363][T14521] msdos: Bad value for 'uid' [ 389.996286][T14521] msdos: Bad value for 'uid' [ 390.056261][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.066361][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.076486][T14523] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2913'. [ 390.085629][T14523] tipc: Failed to obtain node identity [ 390.091111][T14523] tipc: Enabling of bearer rejected, failed to enable media [ 390.099838][ T28] audit: type=1400 audit(1777306374.391:19104): avc: denied { listen } for pid=14522 comm="syz.8.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 390.820889][T14544] xfrm0 speed is unknown, defaulting to 1000 [ 391.105846][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.125243][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.242395][T14561] validate_nla: 1 callbacks suppressed [ 391.242409][T14561] netlink: 'syz.2.2926': attribute type 1 has an invalid length. [ 391.255687][T14561] netlink: 'syz.2.2926': attribute type 2 has an invalid length. [ 391.280522][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2925'. [ 391.703932][T14596] xfrm0 speed is unknown, defaulting to 1000 [ 391.790721][T14602] loop8: detected capacity change from 0 to 4096 [ 391.809574][T14602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.861636][T14609] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 391.872303][T14609] netlink: 'syz.2.2938': attribute type 2 has an invalid length. [ 391.893605][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.740973][T14643] xt_hashlimit: size too large, truncated to 1048576 [ 393.129187][T14647] loop8: detected capacity change from 0 to 128 [ 393.144764][T14650] loop2: detected capacity change from 0 to 4096 [ 393.158055][T14647] msdos: Unknown parameter 'E-' [ 393.172583][T14650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.231882][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.248301][T14647] loop8: detected capacity change from 0 to 1024 [ 393.279806][T14647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.310890][T14647] EXT4-fs (loop8): The Hurd can't support 64-bit file systems [ 393.392795][T14647] xfrm0 speed is unknown, defaulting to 1000 [ 393.424047][T14663] netlink: 'syz.7.2955': attribute type 1 has an invalid length. [ 393.431787][T14663] netlink: 'syz.7.2955': attribute type 2 has an invalid length. [ 393.776332][T14697] loop2: detected capacity change from 0 to 4096 [ 393.798917][T14700] xfrm0 speed is unknown, defaulting to 1000 [ 393.947473][T14697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.090963][T14708] team0: entered allmulticast mode [ 394.096421][T14708] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.104066][T14708] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 394.374261][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.459764][T14727] loop2: detected capacity change from 0 to 128 [ 394.474303][T14727] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.495136][T14727] ext4 filesystem being mounted at /578/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.667193][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1107.tmp-b7:8' failed: Read-only file system [ 394.735761][T14748] xfrm0 speed is unknown, defaulting to 1000 [ 394.759881][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.780902][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1107.tmp-b7:8' failed: Read-only file system [ 394.815381][ T3285] udevd[3285]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system [ 394.851836][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1110.tmp-b7:2' failed: Read-only file system [ 394.865112][T14752] loop8: detected capacity change from 0 to 512 [ 394.884925][T14752] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.892167][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1112.tmp-b7:8' failed: Read-only file system [ 394.907393][T14752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 394.915218][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 394.917236][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1110.tmp-b7:2' failed: Read-only file system [ 394.937200][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1112.tmp-b7:8' failed: Read-only file system [ 394.951723][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 394.971904][ T28] audit: type=1400 audit(1777306379.291:19105): avc: denied { mount } for pid=14761 comm="syz.2.2987" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 394.973075][T14752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.009157][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1111.tmp-b7:2' failed: Read-only file system [ 395.014286][T14752] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.054387][T14752] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 3: comm syz.8.2984: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 395.143253][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.381734][T14819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14819 comm=syz.7.2999 [ 395.410937][T14819] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2999'. [ 395.526620][T14825] loop8: detected capacity change from 0 to 1024 [ 395.536660][T14825] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.557733][T14825] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 395.573788][T14825] EXT4-fs (loop8): orphan cleanup on readonly fs [ 395.580409][T14825] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.3001: Freeing blocks not in datazone - block = 0, count = 4096 [ 395.595597][T14825] loop8: lost filesystem error report for type 5 error -117 [ 395.595931][T14825] EXT4-fs (loop8): 1 orphan inode deleted [ 395.603263][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 395.603278][ C0] EXT4-fs (loop8): initial error at time 1777306379: ext4_free_blocks:6718 [ 395.603302][ C0] EXT4-fs (loop8): last error at time 1777306379: ext4_free_blocks:6718 [ 395.632981][T14825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.646582][T14825] EXT4-fs error (device loop8): ext4_search_dir:1474: inode #2: block 16: comm syz.8.3001: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 395.731183][ T9125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.804062][T14855] loop8: detected capacity change from 0 to 128 [ 395.814373][T14855] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 395.827339][T14855] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.365858][T14865] xfrm0 speed is unknown, defaulting to 1000 [ 396.430665][T14873] xfrm0 speed is unknown, defaulting to 1000 [ 396.823528][ T9125] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.170695][T14909] xfrm0 speed is unknown, defaulting to 1000 [ 398.716402][T14925] loop8: detected capacity change from 0 to 256 [ 398.947917][T14938] loop8: detected capacity change from 0 to 512 [ 398.957256][T14938] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.965999][T14938] EXT4-fs: dax option not supported [ 398.973028][T14938] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 398.992692][ T28] audit: type=1400 audit(1777306383.301:19106): avc: denied { relabelto } for pid=14924 comm="syz.8.3034" name="305" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 399.067173][T14957] xt_hashlimit: size too large, truncated to 1048576 [ 400.144179][ T8936] udevd[8936]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 400.155657][ T28] audit: type=1400 audit(1777306383.301:19107): avc: denied { associate } for pid=14924 comm="syz.8.3034" name="305" dev="tmpfs" ino=1659 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 400.194695][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1120.tmp-b7:8' failed: Read-only file system [ 401.099751][ T3285] udevd[3285]: symlink '../../loop2' '/dev/disk/by-diskseq/1111.tmp-b7:2' failed: Read-only file system [ 401.116109][ T28] audit: type=1400 audit(1777306385.431:19108): avc: denied { remove_name } for pid=9125 comm="syz-executor" name="file1" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 401.144910][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1120.tmp-b7:8' failed: Read-only file system [ 401.160145][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1120.tmp-b7:8' failed: Read-only file system [ 401.176943][ T28] audit: type=1400 audit(1777306385.431:19109): avc: denied { rmdir } for pid=9125 comm="syz-executor" name="305" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 401.208221][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3048'. [ 401.220157][ T8936] udevd[8936]: symlink '../../loop8' '/dev/disk/by-diskseq/1121.tmp-b7:8' failed: Read-only file system [ 401.241069][ T28] audit: type=1326 audit(1777306385.561:19110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 401.265733][ T28] audit: type=1326 audit(1777306385.561:19111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 401.265845][T14985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14985 comm=syz.6.3051 [ 401.289962][ T28] audit: type=1326 audit(1777306385.561:19112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 401.310265][T14985] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3051'. [ 401.340532][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1111.tmp-b7:2' failed: Read-only file system [ 401.353063][ T28] audit: type=1326 audit(1777306385.561:19113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 401.376961][ T28] audit: type=1326 audit(1777306385.561:19114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 401.401349][ T28] audit: type=1326 audit(1777306385.561:19115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 401.448988][ T28] audit: type=1326 audit(1777306385.561:19116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde9c7cdd9 code=0x7ffc0000 [ 401.455198][T14993] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3054'. [ 401.502607][T14991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14991 comm=syz.6.3053 [ 401.519570][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3053'. [ 401.531222][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1111.tmp-b7:2' failed: Read-only file system [ 401.543024][T14997] loop2: detected capacity change from 0 to 512 [ 401.544186][ T3285] udevd[3285]: symlink '../../loop8' '/dev/disk/by-diskseq/1121.tmp-b7:8' failed: Read-only file system [ 401.565312][T14997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.583328][ T8936] udevd[8936]: symlink '../../loop2' '/dev/disk/by-diskseq/1122.tmp-b7:2' failed: Read-only file system [ 401.594849][T14997] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.616220][T14997] bond4: entered promiscuous mode [ 401.750115][T15014] loop8: detected capacity change from 0 to 512 [ 401.760478][T15014] ext2: Unknown parameter 'noacl' [ 401.804939][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.806364][T15017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15017 comm=syz.7.3063 [ 401.831949][T15017] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3063'. [ 401.914639][T15028] syzkaller0: entered promiscuous mode [ 401.920140][T15028] syzkaller0: entered allmulticast mode [ 401.997701][T15026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.023852][T15026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.046383][T15026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3066'. [ 402.066283][T15026] tipc: Enabled bearer , priority 10 [ 402.236837][T15044] xfrm0 speed is unknown, defaulting to 1000 [ 402.300715][T15058] loop8: detected capacity change from 0 to 512 [ 402.317881][T15058] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 402.349605][T15058] EXT4-fs (loop8): 1 truncate cleaned up [ 402.363776][T15058] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.439392][T15044] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.446607][T15044] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.454042][T15044] bridge_slave_0: entered allmulticast mode [ 402.460575][T15044] bridge_slave_0: entered promiscuous mode [ 402.467346][T15044] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.474572][T15044] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.481819][T15044] bridge_slave_1: entered allmulticast mode [ 402.488338][T15044] bridge_slave_1: entered promiscuous mode [ 402.503857][T15044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.514794][T15044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.525172][ T9125] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 402.534764][T15044] team0: Port device team_slave_0 added [ 402.538429][ T9125] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 402.550494][T15044] team0: Port device team_slave_1 added [ 402.570142][T15044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.577200][T15044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.603580][T15044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.616641][T15044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.630644][T15044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.657164][T15044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.689983][T15044] hsr_slave_0: entered promiscuous mode [ 402.696754][T15044] hsr_slave_1: entered promiscuous mode [ 402.715128][T15071] loop2: detected capacity change from 0 to 128 [ 402.734633][T15071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 402.739484][T15044] debugfs: 'hsr0' already exists in 'hsr' [ 402.761592][T15071] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.781136][T15044] Cannot create hsr debugfs directory [ 403.465540][T11251] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.487341][T15082] xfrm0 speed is unknown, defaulting to 1000 [ 403.611981][ T1037] tipc: Node number set to 4278321153 [ 403.743464][T15044] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.759131][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.831888][T15044] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.861414][T15085] loop2: detected capacity change from 0 to 4096 [ 403.887193][T15085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.904043][T15044] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.915191][ T8936] ================================================================== [ 403.923274][ T8936] BUG: KCSAN: data-race in __d_drop / fast_dput [ 403.929520][ T8936] [ 403.931832][ T8936] write to 0xffff88810755ccd0 of 8 bytes by task 2979 on cpu 0: [ 403.939445][ T8936] __d_drop+0x14d/0x240 [ 403.943591][ T8936] __dentry_kill+0x125/0x4d0 [ 403.948178][ T8936] finish_dput+0x2b/0x200 [ 403.952496][ T8936] dput+0x52/0x60 [ 403.956116][ T8936] step_into_slowpath+0x38c/0x4c0 [ 403.961130][ T8936] path_lookupat+0x330/0x500 [ 403.965705][ T8936] filename_lookup+0x32a/0x390 [ 403.970460][ T8936] do_readlinkat+0x74/0x2f0 [ 403.974954][ T8936] __x64_sys_readlink+0x47/0x60 [ 403.979792][ T8936] x64_sys_call+0x2b51/0x3020 [ 403.984461][ T8936] do_syscall_64+0x12c/0x3b0 [ 403.989039][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.995352][ T8936] [ 403.997662][ T8936] read to 0xffff88810755ccd0 of 8 bytes by task 8936 on cpu 1: [ 404.005191][ T8936] fast_dput+0x5f/0x2c0 [ 404.009346][ T8936] dput+0x24/0x60 [ 404.012967][ T8936] filename_unlinkat+0x217/0x410 [ 404.017898][ T8936] __se_sys_unlink+0x2b/0xe0 [ 404.022484][ T8936] __x64_sys_unlink+0x1f/0x30 [ 404.027157][ T8936] x64_sys_call+0x2eb6/0x3020 [ 404.031825][ T8936] do_syscall_64+0x12c/0x3b0 [ 404.036401][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.042283][ T8936] [ 404.044598][ T8936] value changed: 0xffff888237ba26c8 -> 0x0000000000000000 [ 404.051687][ T8936] [ 404.053995][ T8936] Reported by Kernel Concurrency Sanitizer on: [ 404.060129][ T8936] CPU: 1 UID: 0 PID: 8936 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 404.070532][ T8936] Tainted: [W]=WARN [ 404.074318][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 404.084362][ T8936] ================================================================== [ 404.150953][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.221428][T15044] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.372321][ T60] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.400640][ T60] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.465900][ T60] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.475689][ T60] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.542681][ T60] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.552971][ T60] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.611847][ T60] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.621652][ T60] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.691505][ T60] batadv3: left allmulticast mode [ 404.696622][ T60] batadv3: left promiscuous mode [ 404.701651][ T60] bridge0: port 5(batadv3) entered disabled state [ 404.708527][ T60] batadv2: left allmulticast mode [ 404.713748][ T60] batadv2: left promiscuous mode [ 404.718855][ T60] bridge0: port 4(batadv2) entered disabled state [ 404.725851][ T60] batadv1: left allmulticast mode [ 404.730913][ T60] batadv1: left promiscuous mode [ 404.735883][ T60] bridge0: port 3(batadv1) entered disabled state [ 404.832531][ T60] bond0 (unregistering): Released all slaves [ 404.840514][ T60] bond1 (unregistering): Released all slaves [ 404.906644][ T60] hsr_slave_0: left promiscuous mode [ 404.912476][ T60] batman_adv: batadv0: Interface deactivated: dummy0 [ 404.919185][ T60] batman_adv: batadv0: Removing interface: dummy0 [ 404.929630][ T60] dummy0: left allmulticast mode [ 404.934737][ T60] veth1_macvtap: left promiscuous mode [ 404.940276][ T60] veth0_macvtap: left promiscuous mode [ 405.017235][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 405.103409][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 405.190001][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 405.275349][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 405.352735][ T60] IPVS: stop unused estimator thread 0... [ 405.433547][ T60] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.443359][ T60] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.453215][ T60] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 405.522612][ T60] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.532415][ T60] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.542252][ T60] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 405.595994][ T60] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.605827][ T60] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.615672][ T60] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 405.663845][ T60] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.673635][ T60] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.683410][ T60] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 405.720239][ T60] bridge_slave_1: left allmulticast mode [ 405.726006][ T60] bridge_slave_1: left promiscuous mode [ 405.731901][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.739512][ T60] bridge_slave_0: left allmulticast mode [ 405.745261][ T60] bridge_slave_0: left promiscuous mode [ 405.750949][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.759446][ T60] tipc: Resetting bearer [ 405.804514][ T60] bond2 (unregistering): (slave erspan2): Releasing active interface [ 405.813499][ T60] erspan2 (unregistering): left promiscuous mode [ 405.823695][ T60] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 405.834253][ T60] tipc: Disabling bearer [ 405.842821][ T60] bond3 (unregistering): (slave geneve2): Releasing active interface [ 405.922056][ T60] .` (unregistering): Released all slaves [ 405.929296][ T60] bond0 (unregistering): Released all slaves [ 405.937246][ T60] bond1 (unregistering): Released all slaves [ 405.945616][ T60] bond2 (unregistering): Released all slaves [ 405.954080][ T60] bond3 (unregistering): Released all slaves [ 405.962479][ T60] bond4 (unregistering): Released all slaves [ 406.023265][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.032954][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.042464][ T60] bond0 (unregistering): Released all slaves [ 406.075574][ T60] tipc: Left network mode [ 406.128355][ T60] hsr_slave_0: left promiscuous mode [ 406.135716][ T60] hsr_slave_0: left promiscuous mode [ 406.141562][ T60] hsr_slave_1: left promiscuous mode [ 406.147200][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.155999][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.165674][ T60] veth1_macvtap: left promiscuous mode [ 406.171190][ T60] veth0_macvtap: left promiscuous mode [ 406.176718][ T60] veth1_vlan: left promiscuous mode [ 406.182052][ T60] veth0_vlan: left promiscuous mode [ 406.293456][ T60] team0 (unregistering): Port device team_slave_1 removed [ 406.303054][ T60] team0 (unregistering): Port device team_slave_0 removed [ 406.333991][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 406.421321][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 406.507639][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 406.593272][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 406.993550][ T60] IPVS: stop unused estimator thread 0...