last executing test programs: 14.628928543s ago: executing program 0 (id=4692): r0 = syz_open_pts(0xffffffffffffffff, 0x9e442) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000940)="ede029b6ea2fe2f76e877cba81b55d97dec7ea600757168d68e56534c212e8d85801617bda1542e4e2db949a98a7525a57c1ee2b1ec296162299e685503016b1c1f478eb115a1a652bfdb536dc58364459c635d2e8ffa72fb1cfb32d0736390d21c0389168b570ff052b38ed5497018409bb2e13b721e855012146dbea191318e322a540b481622bbd26b04d547cc9b5d5f1c0c835cca88dfb05fcb1e0237f59eab539ff9581b5fca3fe281b66322dc36f8f169ad7b87bafd38be23f686c2f945f590787406dfd5cf9070ae059860539af3d9ddade565d") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = dup2(0xffffffffffffffff, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x100, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "d449d6f2fa2637446a5a84077adaa517179719a29af6be7499c203455a98f9552d1083e9ababf22f22d1d0737dabf59405cfd19ca38de4ad197c966d6dc0daf2a300a0091bc030192357834d224423173f7bccca39eab26a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/162, 0xa2}], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_SETINTERFACE(r6, 0x802c550a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r9, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd26792040000006f64e62cd3004917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000014000500fe80000000000000000000000000002914000600"], 0x114}}, 0x0) 14.577041321s ago: executing program 0 (id=4694): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000140)=0x5, 0x4) 14.211996247s ago: executing program 0 (id=4697): socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000977000/0x9000)=nil, 0x9000, 0xc) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_bond\x00', {'wlan0\x00'}, 0x1a}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r4, r3, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) io_uring_enter(r3, 0x1db6, 0xb0df, 0x8, &(0x7f0000000080)={[0x1c]}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000006060108000000000000000003000002050001000700000005c5b5fe45c89167be4a08824d00010007000000050001000700000005000100070000000900020073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r6, 0x705, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r9, 0x0, 0x0) 14.024557556s ago: executing program 0 (id=4700): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000140)=0x5, 0x4) 13.824239046s ago: executing program 0 (id=4702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r2, 0x0, 0x0, 0x6) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r3, 0x2, &(0x7f0000000000)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x58}}, 0x0) 2.27724789s ago: executing program 4 (id=4883): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000017c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller1\x00', 0x4}, 0x18) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x41, 0x0) socket$inet(0x10, 0x6, 0x9) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f0000000180)='!Y\xc7\n\xc6$\xd39P\xc2\xd1\x15\xc4\x83\x00Z\x03\xc2\xabE5\xbb\xdeS\x16\x90p\xf1nEm\xb9/\xc1\xb8\xdaQ\xf1\xee\xa8\x1a(\xf6M7\x1a\x8d\x7f\x1f\xd1\x13\xc7\x98kjV\xb2\xd3\x0f\xb1 /OBRO\x14\xec\xe7\x1c\xae\xd2`\xc9\xe7y3\x9c\x1a\xe63;@\x8a\x8a\xc6\xc5B\xee\x9a2\xb9\xb8z.\xc9%K\x82\xeb\xf415\xfb~\xa8\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xc8, &(0x7f0000000140)={0x400000000102, 0x4b, 0x200008000006, 0x1000000000071f7}) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x441, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOCK(r6, 0x0, 0x0) r7 = socket$inet(0x10, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(r3, 0x0, 0x0) dup3(r7, 0xffffffffffffffff, 0x80000) write$P9_RAUTH(r5, 0x0, 0x0) ioctl$FIGETBSZ(r4, 0x5451, 0x0) fremovexattr(r2, 0x0) r8 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) bind$inet(r8, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r8, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x29) r9 = socket(0x2, 0x6, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 1.291445041s ago: executing program 4 (id=4895): r0 = syz_open_pts(0xffffffffffffffff, 0x9e442) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000940)="ede029b6ea2fe2f76e877cba81b55d97dec7ea600757168d68e56534c212e8d85801617bda1542e4e2db949a98a7525a57c1ee2b1ec296162299e685503016b1c1f478eb115a1a652bfdb536dc58364459c635d2e8ffa72fb1cfb32d0736390d21c0389168b570ff052b38ed5497018409bb2e13b721e855012146dbea191318e322a540b481622bbd26b04d547cc9b5d5f1c0c835cca88dfb05fcb1e0237f59eab539ff9581b5fca3fe281b66322dc36f8f169ad7b87bafd38be23f686c2f945f590787406dfd5cf9070ae059860539af3d9ddade565d") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = dup2(r1, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r4, 0x0, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x100, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "d449d6f2fa2637446a5a84077adaa517179719a29af6be7499c203455a98f9552d1083e9ababf22f22d1d0737dabf59405cfd19ca38de4ad197c966d6dc0daf2a300a0091bc030192357834d224423173f7bccca39eab26a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/162, 0xa2}], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_SETINTERFACE(r7, 0x802c550a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r10, @ANYBLOB="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"], 0x114}}, 0x0) 1.188341417s ago: executing program 3 (id=4898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.164110061s ago: executing program 4 (id=4900): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000001540)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001580)="bd", 0x1}], 0x1}}, {{&(0x7f0000001a80)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) 1.125614527s ago: executing program 4 (id=4901): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x1}, {0x44}, {}]}) unshare(0x0) 1.10078503s ago: executing program 4 (id=4902): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r2, 0x40087101, 0x20001100) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x2a126}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x8001}}]}]}]}, 0x34}}, 0x0) r6 = dup2(r0, r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{}, "1c39090001927507", "6af51dbcfa23ff5fcd7d40f19fb63790", "5d127298", "a88ff7c8b0c32d5c"}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x1d8, 0x30, 0x1, 0x0, 0x0, {}, [{0x1c4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x50, 0xc, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_ZONE={0x6, 0x4, 0x40}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}]}, {0x7, 0x6, "35cea8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x104, 0x11, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0xd2, 0x6, "a7200ea845d038398ab3c451083979f0af902a488ad15e66807b9a84e26601eead580a6b2dbd1367806fb3ea9810b4c6a811929dc6e2282a0df5713fac8a7a9080ab8e04a95cfcd3c87b652361316d50b0bb31bc35f605db775044898a4c36464f12627fd5ac5d1176d0339ab068dc25929e09c7c5abb517d3467c3bfd8e0fcaae3cbb145f5a48bf6547de9362a87d32d37e783f8be7e23d7cc9aba134f521db9951e91b28fce1b3ff1fc39b7add309ed21d3984780d8425dd56fe238a9d98699aae3b55c07c37a515228d27bdd4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1d8}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000003c0)=0x28) sendmsg$inet6(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000029000000"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) fcntl$setpipe(r8, 0x407, 0x0) read$char_usb(r8, &(0x7f0000000280)=""/133, 0x85) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f0, &(0x7f0000000080)) 1.061415037s ago: executing program 3 (id=4903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x1, 0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8, 0x700, 0x1f, 0x3}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x5, 0xaa, 0x38, @dev={0xfe, 0x80, '\x00', 0x44}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x700, 0x9, 0x8}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@empty, @multicast1}, &(0x7f0000000380)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x0, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r4, 0x4, 0x81, 0x23, 0x200, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x8, 0x7831, 0x0, 0x1000}}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000b00)={0x10b4, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x3b, 0x3, "a36437353d9f970295c78d7677643bd3ccf1bb945e855ecbbc6f95cbbd9d78f98fdd58560c7be3402872d9f9391dcd37c00b17247c9cf6"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "1aff80af77a335963b5d2c90832c814e71f159218793d29d21b35ac4e4432746a2a46061671d86551aeae62244a87e2f0a86a1dac70213bf3110ac7b57eb2e1a901eede7e2afbdfdf1d5833a855cb831846b31e233dc77d48f3c438b2dccad936a6c67d43ee16a348257ea8d9ea12946188444c444c3c305db9f9a5f0c1005e8ec14b74542c45d7aaf3044b2b36493c0be494f6e524c19439ca0ef0c878b6da91cb8e2e99da249e4e956ea91747ac8f5212b96bda9b5bcc2726684a41fcde4a24b25c61ffdf7f63e62529c2eb3736e28798b9eb2f8087eba323c8b348bfb90a95915f53c09019ef5f40ac545db02e70b696f53dd32dba0593807f4de48535ff3b60f9abe032b9b0bc8a49990a77f9e4fd27deb6e5382c405df2a9deb1379460e0bf92ee6a24900bcaf5e585fb89d32aaf154bcd663956ad3c537dd23f3f496402c9febddde48d71e3868554aef6e2da086b18cf02278e9314788b21e7e297e6276a6495606a00fea135c0d058aedc0cd9ea5b13778c11b2d928c65d79cfa36507e867c19868f9fc77205e5c4cd2475b209afe7e5318311790d6b5f74c339d3d50a10c47831f812dc5f44043a48c6101db403912ebf84769b90364b8896150aa3b4618cda1fff48c6246c7c455e5d00f0be3589c929aeb8091e2f1cc7995741f89f814a6654c6d60aecae417292fe802fee2579447c2be06c90c627d04a35f43d5ab6e7cb040164b491dc6c2b1386f2f7f54cd727347a90d7df949554250604fd1a8eed803a101f3cfe6f07f5421ff52a4f336b08dfdc66cdf3706a6f843439299599258c5620ed5d9c7b3ea38c453bd1100245d2f046b46f5bdc02dd1eea00479f07600493570f258f7419364aff78ef53cfc7d1ead93e319d6d20f249b1336272fe071955fe17351879aeaa801a2940d72061441b9a4ed1d71e803caffc3f05d0f697c994ee80024e91a5e5d17c6a57413cf3f754a9cca218a3d03206f65a7b891bd8cf102ab8f8f27bc3e92abf5b2228f825d19de3052466becc89556345ed05767acc8e8729683963e2d02c2c170042eff09db36d0973aadbbbc8fdffa79ce8d10f16e6c60fcac37a589c4a122a1668f1749080c1c4d71b16818bf8f8293d1cbb6cd41e2bb8f3297cc348c8942e7d88b941e588b8cb517889a393f0d2c94f40446f74097ed15ad7b8b646716c3fa399e8765767f77a2564915a87f6ec39f2e1abc148fe8c527c13f56caa5cbd39d2c58b76b386575dee502c5f2daf910e83e881b66a1aea95ed90f6cdd88f7c5c25b62fd46baebfd1dd6df69ca29f165b55dfc2fd3f8cf3b8873a2d6870abdd9cc6b65de6ba427e20c88b01af230f4fdee0fe8b93f9986393e0fe26a85a1fc6c4f8203b5250902b584a85585360e36010daa9a412ac603daa77294b839aadca164f9dec5cac50a00137d499d7a609ff02221107672195c64a69b7ae15048e0e1d5c9f79ffcf9b5d61a0000e03eeb154b5de77f5cb9490c988e944985bdfe8f9e9e773a6859683d734d72346445c9f0a8cceffd22095ab5fc3b700b9fc35917002b874ba88eba0eaea6221ff88007b66a99a5980b37b59ccab0b02d0bc6e0de8e32e3eb8d2f6c38e633211a94a92b160ba5461b20cb1c4a5935b5d5721a24da5bb5db7538a964681b7895dfa66510dc9a6f1bedbbb2b8b9b1c6e58ac9929e8dae86c582595ee86416213633d0b875bab253ccd1762791151a4af3ca437f923873e31b0c55c7dd3d694314d1e19f10c532836f72854a74fa76171c43303d37b0da0e8fa0ae82d46af0f8295aa873396edd0e74535b6f09bd0a350c8797ea9227457445e05febcca6268620c88e01bfbe989a777784810f95456541bc4f82dad0d77ded79dc6697795edeea71121b1432ee6ee5eed73141ead3f6e3b05167089b70bcfbdef70d403b5d26d93bb82f935390cea8984d06fb1b0b4aedc799bd313a57d118cce10343d1ea3c721835cb466362600eaab8df1217c818daed4f21226dfde430ea297956a8ff70be501ea127416f4fba127c8931418db8f411340d8bd4d6c3fd93533222205c18100b333901521ccc917196e937ad8be7609d0e76745957eeac743cae8d06e40f4db9cd2e78b310b27b36630766768c424271bf7a86e6878df65cb9303672184cf6860d6a2ead66280abf8497521ff3649affe1a331033b386452ceff86fbb992e51779d8df8005555cff2fe97205e426689b4e200e2bfe1aae2cac8d93c529edbac6e24dc8ebee72082e94927a6220c173a2babcf7c5a7d84dbba9ac3b41fe4130812ac20708cda1dd62511059a4d1e8a1ca9c011085295ac6489536ccc1250b5bce0674d28c984f4075862a1fdc507e75f7d6345ae501e99a7704111c95554a4d3f331921cb2aede162f3743f42d47f7c5e1367c8376ce69b62a12687eff7afc8eca14bb3f67e7c6c08db18ceece11c452bc214079f9500b82e90f3121dd0acf1f536298c8ffeadf9dd4f58f8d64ca9e4bfd3e1f8d468ec37b3dfc77f71ef1221f8d6d0572145a36bb20f71e9e8490dd7b0289be7cd243bba540e6cfb683139a86ba8576de366f819da7a6014a136ad5d38971c1153732051b2b6fd26eb58f9085a2a6ef530bf6d8d3367118819ec4620fb042a0e92fa6e22a6b1790d7b6a4a2c1c25e41bc4c41c3ba91ab3594576fac8d86bbce95c7d03922d5e2dc6802b02a12fdc5bbfa92f90d24ad994cc022666c79b50e155a9fa75c92cec1d936ebb4aff9802ea673953e7c871a845fbe08c48faaea63ba4a28816cce86033af8c79bdbb347db6bb5906158ed8699c41933ae57752a9e2861bc797394d0c1eeab91953247ae718877a0fa3ab60fdb30ada36ab9a411658878a743f88235695f1e846fb09f360fb335814230ea44d11190d3ad33365f662a52de53346cee43192460059090af929fdf499c5ad513d361a875f91c6b6e22ca0b5c2136c5688f77708a084672a571fcf2215ee66b4ba2d73a33d9b7ac7d4b1458ccea5ca46639d939066d2cc3e5522c774caf51db74e0388f0eff54a0dcf56f756fd386efa9891af02d86c1232b14b4cfea1d9f2b216c023aab6939dff5fea77bdb3ddcd7ed86d59f5efe13db9e919cd342c02a45dbf568fc4302efdaa450aa00f0191a3622dd387ea21ccca2560ad44624455891df8c9e881651b8847359e4be4b3cc5e240f266d769e86a38dd77c7f1e6b080ccf672bfb4b379f4b0abf31fd89539a1abf720a48601483eacd5a4823b27865928b9785d8c667c3592d5b2932a04ebf85bfdad50110ad03cfe4b1ba5923aa413c11d7b31e73524584cb2ef0b9830541f44e444f53fb244196fcd07ebcaf53cbf0bbaf81ddb3b285443b0c4fe4381e4da2468c39af62c55f9451982bd28b202a57d9b85d85dc9e4e92e4ca4cfffba075491c24497bca2a9860e2652d3a5e4f0702d96abd32e5b02594b94ec2aeb01ef38cb9bf3dab7ca3beedc85e451b371b410134906087464c10dc31d3f7acb7a24eb955d6ccd1ea1e6c3b139e60cf642b4d3abe257718fee4eaa535e25a09b165d672d73bcf4a1384164b64a2f5376b85861737c8db3893ed6622046f2d2669943424e8dd0a8aa69627275de5167b51712c1bc2f57dead4b91f328108feeaabd9354df2bf4712527412f7d6d4168238b5dd97ff5c1c684bf6246669d737d610bae39e4830c26c37d686c06be3a67ab936b0b2e1f15f298a96ce92bd55680930deebef4741916a24bebc78a5364fa8086b1cf1ef67a536ea4608c58ab44d59c7ce66f93c0b5a93962597598c1eb83189c14dc686523ec0cb5be14f431f15d30c71bb5d9bd0d1b5e36a174ffbc90df4b49e85b846e722d0d9181e76c279a3c1d9dce58764d223f0fe19084f3164ab6c77bcbff5f7695fbdb1df5879fa7a85b7cc9c8a47d35fc489e15b072d56712f48ab8b689889976f6a00a712059b4f1aa2fb4942f4ffa522d118752b101b1e3c51427c3881e44f5ccecad583d17c5885258cf3149e49a67d681ca18334a33e4d612ef1525346cca7d8776e0c5a3d65100b360513f19725b992f6c2a9b23de646464128b7a2f5642c0d93d721817fade13fde53416034fc49cf4e1e719becf5792a7196716786cd2a67d1e817d9d3de68eff6b7f0dcccb468b5d3ee05ed77450d60f4090a78c0ff29ddf5ebaa62788cc84b46dbb59c1ac5a629f51cf2ee2fc1cbb536c862670d1dae956868ae425c3bad46030230cc44708685a638ac701efe4c2ef20434bf4fb257f09f3cabfd197e54a70cecf5dc1a40e519e84a403adf27b4e3f6d3af63a28092aa3a16ffb06c292fdf679f182247b742dc0dbf94da53e06a41ce3c4a7785502c691d39516cf402caf3f391259e58a12146dd2710a76fdd27f940ca3dd2b3c0cf7c5cf746b916fd380ec6f574299f0616bb5c9da960fd22ac8b80bc2c4bba725e4d706cf4ae215b0cbfda755da07ffffed2a3cb0e7f66962932a0fa7f1455a2e71e885d4102a4ebd024f3a6e47426dddf7cebe4dfeebdea5091a5c44fe028e91ca4bc08446fb4af2b2e1bd79742b9935b61a47cbc16462ef78171f78ea78d79ff30c0c3afa03397cb0c9412b7a9a89e87c35424d153789bd3a5a120042023e9a760dbbefe37245c4803fd590d70ca9a55fe263686380bc1bfee785ab37c2e5911b075c9999359e4fab155a2314b34844676145166eb897a1de47ded575f097a981be42c366753f7b2442ea3c3bf49b9511a72258882c1af6f32a0b3972cf7b86ee31635911b11f584e485db020122884ab0d75414ad3a3645d39a3f9dfdc0fe7017626e9344a017d597c4d3b11be0dd4376c29b8d0fcc5dbc5f2c130731ffdcceb9a8279c7ad7fbcba625c598b8bac31af3b00b91f430f24cff2655fa3b30cea656dae84f0d53dde59696c9c5e715e27c137755ba82560af56c46c37a9cb6e590ff38c60e3bc4375ed5e4b357b3a3c7394d4f425f9c95bcb23c93157a3e76c2f669bb6bfea521e17bda6d91fcc0d49c9f8b5ed1ac757c31bd3c1cf7d1de6fe4684be9c0a8feb4d40cf6ba3de6ce41d48306dd68b7b95515aa2189c8193e68e329bedeb293b32726b020e6bea99bcf90003e54809c45559026a44853630371a1a9e0572e12a20126467c2fa68fb16decd2473d66706032c6d98bb8353eb491b52284c7c70480d65a15ad72a251d5a503ca8dd70748f7350a69a3d41f5b467c1d4660b013f871028751bfe041a16fe31113abd0b8df0c57ffe50c6053984c797a4f67fb06b4a8e178f113f49a8f89414789f2e484494c3ff0697652c3058069743fec706bf3ebed52badfe19473fa9cb5b834ba473574c1ed6a0fc063d7ad668ae5c1aa9045047865d1b5d38789910c564fe24e8b5abc9f8273219ebd8225a9e1414b83a3416114a75fc913b44a8b61bb460cc895e6ff1dbc557eee48e57438410543da8d08eb4110124e343171c1dcf0b67dd3b0161c5efadc5150eadedd757700dbed52c7c0a19da4140d55c42d9dc7afc026dd561e73b114cec6d312be0a7f9d4810c6f9ca553d883f3de9807338d82b46d63eb28e0af43e838aca016b503d2fbeaa0d6e9ceef74e984797ce94ffdd37b88648a6ca1061c9f263777e9918420439d161c3e0f1dce47ad77254bac4c43b16bc1fb3fedf274c9b4382884087b16eec6177d8e96415982e4a03eef66dbcfaf287fd7bb04999b1d6e2e8d673d75b6f606c56b21d609d838fc5591c8270718ea5cd3c9485f6b565080bddc2ca6fa2ad2aca9d98ae8a851919eb5494980825f4b8a14e35976c1a13969c9e50f"}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r9, 0x0, 0xf5, 0x7, 0x0, 0x37, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1, 0xfffffdc0, 0x7}}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) finit_module(r8, &(0x7f0000000680)='\\\x00', 0x1) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x32c7, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 787.967338ms ago: executing program 2 (id=4906): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000080a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)=0x5c8) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 787.294779ms ago: executing program 3 (id=4907): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) ioperm(0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000a8000000000000001b40a76e1222a42fd297a1ce790c307662e672c63e6372a3349025756b664ee354d2599ecd152a148db9dff829d9866448da801d0c46e7ff210e8a49f127d9b3e76e3a9f761831f46043"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001040)={&(0x7f00000002c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) r4 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r4, 0x2e, 0x4608, @val=@kprobe_multi=@syms={0x0, 0x5, &(0x7f0000000640)=[&(0x7f0000000200)='\x00', &(0x7f0000000380)='nfc\x00', &(0x7f0000000400)='kfree\x00', &(0x7f00000005c0)='kfree\x00', &(0x7f0000000600)='\x00'], 0x0, 0x8}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000400000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) dup2(0xffffffffffffffff, r5) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 620.481834ms ago: executing program 0 (id=4869): prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8c}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000800)=""/99, 0x63}, {&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110830000000000950000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x10034) ioprio_set$pid(0x1, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) statx(r4, &(0x7f0000000280)='./file0\x00', 0x800, 0x0, &(0x7f00000002c0)) write$cgroup_pressure(r4, &(0x7f00000001c0)={'some'}, 0x4cdad095) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1010, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000007110b900000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8"], 0x0}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000003c0)={0x80000008}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r6, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0xe6, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000140)=@newtaction={0x4c, 0x58, 0x284f, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x3ffe, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x4c}}, 0x0) 619.453104ms ago: executing program 3 (id=4909): r0 = syz_open_pts(0xffffffffffffffff, 0x9e442) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000940)="ede029b6ea2fe2f76e877cba81b55d97dec7ea600757168d68e56534c212e8d85801617bda1542e4e2db949a98a7525a57c1ee2b1ec296162299e685503016b1c1f478eb115a1a652bfdb536dc58364459c635d2e8ffa72fb1cfb32d0736390d21c0389168b570ff052b38ed5497018409bb2e13b721e855012146dbea191318e322a540b481622bbd26b04d547cc9b5d5f1c0c835cca88dfb05fcb1e0237f59eab539ff9581b5fca3fe281b66322dc36f8f169ad7b87bafd38be23f686c2f945f590787406dfd5cf9070ae059860539af3d9ddade565d") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) dup2(r1, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x100, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "d449d6f2fa2637446a5a84077adaa517179719a29af6be7499c203455a98f9552d1083e9ababf22f22d1d0737dabf59405cfd19ca38de4ad197c966d6dc0daf2a300a0091bc030192357834d224423173f7bccca39eab26a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/162, 0xa2}], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_SETINTERFACE(r6, 0x802c550a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r9, @ANYBLOB="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"], 0x114}}, 0x0) 549.334615ms ago: executing program 3 (id=4911): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000001540)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001580)="bd", 0x1}], 0x1}}, {{&(0x7f0000001a80)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) 509.042711ms ago: executing program 3 (id=4914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2e, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"/1587], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4000}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000b210f9000000007f"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000000}) fallocate(r1, 0x8, 0x0, 0x1000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000780)={0x0, 0x56, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r4 = epoll_create(0xf) r5 = socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x7ff) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000002900), 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000011000d0400c6ab8731e691d00f000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0) 488.634934ms ago: executing program 2 (id=4916): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) 334.603768ms ago: executing program 1 (id=4920): socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000140)=0x5, 0x4) 302.890073ms ago: executing program 2 (id=4921): syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x800004, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x2000100, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa0000d, &(0x7f0000000100), 0x1, 0x7bd, &(0x7f0000000f80)="$eJzs3c9rG9kdAPDvyD/jpLVLC216MhRaQ4hcp27SQqEpPZRCA4H2nMTIikktW8GSQ2wMcSiFXnpo6aGwueS82c3ect0f193L/g17WBKyu07YLHtYvIw0SmRbcuzEkrLx5wMjvTcz0nvfeTNPT5pBE8ChNZ4+5CKORwykydFsfhLZjOiPOFtf78nGWiGdktjc/OvnSW2dxxtrhWh6TepolvlJRLz/z4gTuZ3lVlZW52dKpeJSlp+sLlydrKysnryyMDNXnCsunp6anj515tdnTh9crF9+tHrswX/+9Iu3z379jx/f/fcHSZyNY9myRhzrPzy48sZjPNsmA+km3OKPB1fMKyHpdQV4Iemh2Vc/yuN4jEbfLi35+67WDADolBsRsQkAHDKJz38AOGQavwM83lgrNKaon89Z7+kPE13y8A8RMVyPv3F+s76kv37O7uPh2nnQkcdJ7RxJQxIRYwdQ/nhE3Lp34U46xbbzqQCdtH4zIi6NjW/v/9Mebvs1C/v1yz2sM74tr/+D7nk3Hf/8Zuf4LyKXHf/Dtcft45+hFsfui3j+8Z+7vyU7cACFNknHf79rurbtSVP8mbG+LPe92phvILl8pVRM+7bvR8REDAyl+aldyph49M2jdsuax39f/Pfvb6blp8/P1sjd7x/a+prZmerMy8Tc7OHNiJ/2t4o/edr+SZvx7/k9lvHn3/7rjXbL0vjTeBvTzvg7a/N2xM9btv+z66CSXa9PnKztDpONnaKFdz75/0i78pvb/9a9tKS1QuO7QDek7T+ye/xjSfP1mpX9l/Hh7dH32i3bGv+FO2n5W+Nvvf8PJn+rpQezeddnqtWlqYjB5C8755969tpGvrF+Gv/Ez1of/7vt/2k3dClLbz7n4sf+B5+99eLxd1Ya/2za/kkWxHPbf/+Ju0/m+9qVv7f2n66lJrI5O/u//h3vu9cKvtTGAwAAAAAAAAAAAAAAAAAAAAAAAIA9ykXEsUhy+afpXC6fr9/D+0cxkiuVK9UTl8vLi7NRu1f2WAzkGn91Odr0f6hT2f/hN/KntuV/FRE/iIj/DR2p5fOFcmm218EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOZom/v/pz4d6nXtAICOGe51BQCArvP5DwCHz3DS32r2YOu1j3S4NgBAN9S+/7ceAwAAr6l9/P6/3sl6AADdM7x5o9dVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PV2/ty5dNr8amOtkOZnr60sz5evnZwtVubzC8uFfKG8dDU/Vy7PlYr5Qnmh7Rut159K5fLV6Vhcvj5ZLVaqk5WV1YsL5eXF6sUrCzNzxYvFga5FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7V1lZnZ8plYpLErsnbrwS1biZNVuvt4bEK5EYiohOFdHcSxzpTecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8B3wbQAAAP//kdoibg==") 290.742545ms ago: executing program 1 (id=4922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x18, 0x31, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x2a1, &(0x7f0000000800)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0189436, &(0x7f0000000040)) r5 = dup(r3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r2, 0x100, 0x0) getdents64(r2, &(0x7f0000000380)=""/101, 0x65) r6 = socket(0x11, 0x800000003, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000308010200000000000000000000000006a4444000000000140004800800024000000007f1ff0140000000050500030001000000"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan1\x00'}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 194.69546ms ago: executing program 2 (id=4923): r0 = syz_open_pts(0xffffffffffffffff, 0x9e442) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000940)="ede029b6ea2fe2f76e877cba81b55d97dec7ea600757168d68e56534c212e8d85801617bda1542e4e2db949a98a7525a57c1ee2b1ec296162299e685503016b1c1f478eb115a1a652bfdb536dc58364459c635d2e8ffa72fb1cfb32d0736390d21c0389168b570ff052b38ed5497018409bb2e13b721e855012146dbea191318e322a540b481622bbd26b04d547cc9b5d5f1c0c835cca88dfb05fcb1e0237f59eab539ff9581b5fca3fe281b66322dc36f8f169ad7b87bafd38be23f686c2f945f590787406dfd5cf9070ae059860539af3d9ddade565d") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = dup2(r1, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000140)=ANY=[], 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x100, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "d449d6f2fa2637446a5a84077adaa517179719a29af6be7499c203455a98f9552d1083e9ababf22f22d1d0737dabf59405cfd19ca38de4ad197c966d6dc0daf2a300a0091bc030192357834d224423173f7bccca39eab26a"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/162, 0xa2}], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_SETINTERFACE(r7, 0x802c550a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r10, @ANYBLOB="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"], 0x114}}, 0x0) 163.704814ms ago: executing program 1 (id=4924): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000001540)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001580)="bd", 0x1}], 0x1}}, {{&(0x7f0000001a80)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) 151.046006ms ago: executing program 2 (id=4925): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xdd0, &(0x7f0000000180)={0x0, 0xafec}, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x1}) ioctl$TIOCSETD(r1, 0x5413, &(0x7f0000000040)=0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x6, @random="cea0300a1672"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e2, 0x0, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0x5, 0x800, 0x44, @private1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8, 0x8, 0x90a, 0xfff}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000011143dcf000000000000000008001f"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 130.290319ms ago: executing program 1 (id=4926): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x10) socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000580)=""/252) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 118.285091ms ago: executing program 2 (id=4927): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000080a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)=0x5c8) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 102.257194ms ago: executing program 4 (id=4928): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000ff0000000000000000000018010000202070250000000000b28c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r0, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000ac0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x1, 0x2, 0x4, 0x6, 0x2, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xc8, &(0x7f00000005c0)=""/200, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x5, 0x3, 0x8fa8}, 0x10, 0x0, r0, 0x7, 0x0, &(0x7f0000000740)=[{0x4, 0x3, 0x1f, 0xa}, {0x2, 0x0, 0xe, 0x9}, {0x4, 0x2, 0x8}, {0x4, 0x5, 0x5, 0x7}, {0x2, 0x4, 0x10, 0x1}, {0x5, 0x4, 0x0, 0x7}, {0x3, 0x4, 0xa, 0x8}], 0x10, 0x1}, 0x90) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r8, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) eventfd2(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x29, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/19, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@noop, @timestamp_prespec={0x44, 0x2c, 0x80, 0x3, 0x0, [{@private}, {@private}, {@private=0xa010101}, {@private=0xa010101}, {@private=0xa010100}]}]}}}}}}}, 0x0) recvmsg(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x4}}, 0xfe44, 0x0) 100.397654ms ago: executing program 1 (id=4929): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x542, &(0x7f0000000640)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000006008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) socket(0xa, 0x6, 0x0) listen(r0, 0x3) 0s ago: executing program 1 (id=4930): syz_emit_ethernet(0x24a, &(0x7f0000000000)={@broadcast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x214, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1b, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in6=@dev, 0x0, 0x0, 0xff}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x17}, 0x90) rt_sigaction(0x16, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)) close(r1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendto$inet(r6, &(0x7f00000000c0)="1c", 0x88d5, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r8 = dup2(r0, r0) write$tun(r8, &(0x7f0000000240)=ANY=[], 0x46) recvmmsg(r8, &(0x7f00000049c0), 0x0, 0x2000, 0x0) kernel console output (not intermixed with test programs): 1804][T16895] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 278.443863][T16900] /dev/sg0: Can't lookup blockdev [ 278.529291][T16905] /dev/sg0: Can't lookup blockdev [ 278.568513][T16926] loop1: detected capacity change from 0 to 1024 [ 278.572289][T16919] loop3: detected capacity change from 0 to 512 [ 278.583335][T16926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 278.598395][T16928] __nla_validate_parse: 74 callbacks suppressed [ 278.598411][T16928] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4318'. [ 278.598516][T16926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.618300][T16935] loop2: detected capacity change from 0 to 512 [ 278.628937][T16919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.645095][T16928] 1XD: entered promiscuous mode [ 278.650278][T16928] 1XD: left allmulticast mode [ 278.651209][T16919] ext4 filesystem being mounted at /root/syzkaller.fYf0ju/53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.663159][T16939] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4318'. [ 278.677320][T16935] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.4316: corrupted in-inode xattr: invalid ea_ino [ 278.684493][T16939] 0XD: renamed from 31XD [ 278.695334][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.706318][T16935] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4316: couldn't read orphan inode 12 (err -117) [ 278.719916][T16935] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.723739][T16939] 0XD: left promiscuous mode [ 278.737286][T16939] 0XD: entered allmulticast mode [ 278.743264][T15706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.744456][T16939] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 278.775688][ T29] audit: type=1326 audit(1719494712.171:28963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf448dcb29 code=0x0 [ 278.788117][T16942] loop1: detected capacity change from 0 to 512 [ 278.949170][T16945] syzkaller1: entered promiscuous mode [ 278.954788][T16945] syzkaller1: entered allmulticast mode [ 279.034924][T16958] loop1: detected capacity change from 0 to 128 [ 279.466906][T16173] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 279.693059][ T29] audit: type=1326 audit(1719494713.091:28964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.2.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b54f7b29 code=0x7ffc0000 [ 279.716947][ T29] audit: type=1326 audit(1719494713.091:28965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.2.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b54f7b29 code=0x7ffc0000 [ 279.742279][ T29] audit: type=1326 audit(1719494713.141:28966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.2.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b54f7b29 code=0x7ffc0000 [ 279.765956][ T29] audit: type=1326 audit(1719494713.141:28967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.2.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b54f7b29 code=0x7ffc0000 [ 279.789521][ T29] audit: type=1326 audit(1719494713.141:28968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16977 comm="syz.2.4331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b54f7b29 code=0x7ffc0000 [ 279.869123][T16987] loop4: detected capacity change from 0 to 512 [ 279.884407][T16991] loop1: detected capacity change from 0 to 512 [ 279.949534][T16998] loop0: detected capacity change from 0 to 128 [ 279.957292][T16998] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 279.997437][T17002] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4339'. [ 280.008317][T17002] 1XD: entered promiscuous mode [ 280.013566][T17002] 1XD: left allmulticast mode [ 280.027274][T16998] nfs: Unknown parameter '$' [ 280.048973][T17002] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4339'. [ 280.065560][T17002] 0XD: renamed from 31XD [ 280.071967][T17002] 0XD: left promiscuous mode [ 280.076885][T17002] 0XD: entered allmulticast mode [ 280.085509][T17002] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 280.088170][T17007] loop0: detected capacity change from 0 to 512 [ 280.115139][T17009] loop1: detected capacity change from 0 to 128 [ 280.117229][T17007] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.4341: corrupted in-inode xattr: invalid ea_ino [ 280.135367][T17007] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.4341: couldn't read orphan inode 12 (err -117) [ 280.147182][ T29] audit: type=1326 audit(1719494713.541:28969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.3.4339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6be581b29 code=0x0 [ 280.172496][T17007] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.198493][T16986] syzkaller1: entered promiscuous mode [ 280.203990][T16986] syzkaller1: entered allmulticast mode [ 280.228085][T17012] /dev/sg0: Can't lookup blockdev [ 280.305343][T17016] /dev/sg0: Can't lookup blockdev [ 280.344998][ T29] audit: type=1326 audit(1719494713.741:28970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.1.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb51801b29 code=0x7ffc0000 [ 280.409761][T17026] pim6reg: entered allmulticast mode [ 280.415495][T17026] pim6reg: left allmulticast mode [ 280.425561][T17027] loop2: detected capacity change from 0 to 128 [ 280.739036][T17033] loop4: detected capacity change from 0 to 512 [ 280.852119][T17039] loop3: detected capacity change from 0 to 128 [ 280.859304][T17039] FAT-fs (loop3): Unrecognized mount option "00000000000000000000005" or missing value [ 280.925448][T17039] nfs: Unknown parameter '$' [ 280.952111][T15370] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 281.024211][T17045] /dev/sg0: Can't lookup blockdev [ 281.055304][T17048] loop0: detected capacity change from 0 to 128 [ 281.336676][T17058] /dev/sg0: Can't lookup blockdev [ 281.411360][T17063] loop3: detected capacity change from 0 to 1024 [ 281.451811][T17063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 281.482493][T17063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.487862][T17071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4361'. [ 281.516391][T15706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.529449][T17073] loop1: detected capacity change from 0 to 512 [ 281.566962][T17073] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.4363: corrupted in-inode xattr: invalid ea_ino [ 281.580657][T17073] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4363: couldn't read orphan inode 12 (err -117) [ 281.594019][T17073] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.690364][T17050] syzkaller1: entered promiscuous mode [ 281.695913][T17050] syzkaller1: entered allmulticast mode [ 281.823036][T17081] loop3: detected capacity change from 0 to 128 [ 281.940380][T17087] /dev/sg0: Can't lookup blockdev [ 281.982606][T17094] can0: slcan on ptm1. [ 282.025695][T17092] can0 (unregistered): slcan off ptm1. [ 282.065429][T17096] /dev/sg0: Can't lookup blockdev [ 282.072989][T17098] loop0: detected capacity change from 0 to 1024 [ 282.080749][T17098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 282.091244][T17098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.276156][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 282.276169][ T29] audit: type=1400 audit(1719494715.681:28985): avc: denied { create } for pid=17112 comm="syz.4.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 282.364081][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4378'. [ 282.390826][T17108] syzkaller1: entered promiscuous mode [ 282.396664][T17108] syzkaller1: entered allmulticast mode [ 282.486116][T17121] /dev/sg0: Can't lookup blockdev [ 282.518499][T17126] loop0: detected capacity change from 0 to 256 [ 282.591696][T17141] loop0: detected capacity change from 0 to 1024 [ 282.600268][T17141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 282.675093][T17148] loop1: detected capacity change from 0 to 2048 [ 282.683265][T17148] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 282.703266][T17153] loop0: detected capacity change from 0 to 2048 [ 282.719130][ T29] audit: type=1326 audit(1719494716.121:28986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.742913][ T29] audit: type=1326 audit(1719494716.121:28987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.766491][ T29] audit: type=1326 audit(1719494716.121:28988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.790167][ T29] audit: type=1326 audit(1719494716.121:28989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.813755][ T29] audit: type=1326 audit(1719494716.121:28990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.837590][ T29] audit: type=1326 audit(1719494716.121:28991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.861180][ T29] audit: type=1326 audit(1719494716.121:28992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.884746][ T29] audit: type=1326 audit(1719494716.121:28993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.908334][ T29] audit: type=1326 audit(1719494716.121:28994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.0.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7ffc0000 [ 282.959295][T17161] /dev/sg0: Can't lookup blockdev [ 283.045888][T17171] loop2: detected capacity change from 0 to 512 [ 283.076529][T17171] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.4398: attempt to clear invalid blocks 1 len 1 [ 283.096695][T17174] loop0: detected capacity change from 0 to 1024 [ 283.107543][T17174] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.125829][T17171] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4398: bg 0: block 343: padding at end of block bitmap is not set [ 283.141252][T17171] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 283.166879][T17171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4398: invalid indirect mapped block 1819239214 (level 0) [ 283.189026][T17171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.4398: invalid indirect mapped block 1819239214 (level 1) [ 283.204804][T17171] EXT4-fs (loop2): 1 truncate cleaned up [ 283.335716][T17190] 9pnet_fd: Insufficient options for proto=fd [ 283.342795][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4404'. [ 283.370247][T17193] loop2: detected capacity change from 0 to 2048 [ 283.375623][T17195] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4406'. [ 283.417310][T17162] syzkaller1: entered promiscuous mode [ 283.422801][T17162] syzkaller1: entered allmulticast mode [ 283.492145][T17205] loop1: detected capacity change from 0 to 512 [ 283.553118][T17215] loop1: detected capacity change from 0 to 1024 [ 283.562105][T17215] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.597656][T17218] netlink: 'syz.0.4410': attribute type 8 has an invalid length. [ 283.651163][T17228] pim6reg: entered allmulticast mode [ 283.657147][T17228] pim6reg: left allmulticast mode [ 283.881182][T17243] loop1: detected capacity change from 0 to 128 [ 283.930255][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4422'. [ 283.979930][T17249] chnl_net:caif_netlink_parms(): no params data found [ 284.011481][T17249] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.018648][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.026013][T17249] bridge_slave_0: entered allmulticast mode [ 284.032395][T17249] bridge_slave_0: entered promiscuous mode [ 284.039235][T17249] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.046347][T17249] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.053628][T17249] bridge_slave_1: entered allmulticast mode [ 284.060312][T17249] bridge_slave_1: entered promiscuous mode [ 284.077399][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.087944][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.106810][T17249] team0: Port device team_slave_0 added [ 284.113358][T17249] team0: Port device team_slave_1 added [ 284.128945][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.135948][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.162418][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.175226][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.182274][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.208270][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.234719][T17249] hsr_slave_0: entered promiscuous mode [ 284.241003][T17249] hsr_slave_1: entered promiscuous mode [ 284.247495][T17249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.255075][T17249] Cannot create hsr debugfs directory [ 284.260819][T17267] loop4: detected capacity change from 0 to 1024 [ 284.274246][T17269] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4423'. [ 284.283219][T17269] 0XD: renamed from 30XD (while UP) [ 284.326540][T17249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.373448][T17249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.384848][T17275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4426'. [ 284.393894][T17275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4426'. [ 284.402869][T17275] gre0: entered promiscuous mode [ 284.419327][T17249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.474323][T17249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.532968][T17249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.541653][T17249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.550154][T17249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.559509][T17249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.576279][T17249] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.583355][T17249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.590613][T17249] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.597760][T17249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.633332][T17285] loop4: detected capacity change from 0 to 128 [ 284.634489][T17249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.649123][T17287] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 284.657179][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.666100][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.684022][T17285] nfs: Unknown parameter '$' [ 284.693685][T17249] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.715437][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.722543][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.733559][T17292] loop1: detected capacity change from 0 to 128 [ 284.750037][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.757251][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.771652][T17298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4437'. [ 284.780714][T17298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4437'. [ 284.789729][T17298] gre0: entered promiscuous mode [ 284.880616][T17249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.916223][T17315] loop0: detected capacity change from 0 to 512 [ 284.928244][T17315] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.4442: Failed to acquire dquot type 1 [ 284.940389][T17315] EXT4-fs (loop0): 1 truncate cleaned up [ 284.947796][T17315] ext4 filesystem being mounted at /root/syzkaller.SExf5n/142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.962727][T17315] netlink: 'syz.0.4442': attribute type 3 has an invalid length. [ 284.963145][T17249] veth0_vlan: entered promiscuous mode [ 284.990845][T17249] veth1_vlan: entered promiscuous mode [ 285.002636][T17327] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 285.005488][T17249] veth0_macvtap: entered promiscuous mode [ 285.020325][T17328] loop1: detected capacity change from 0 to 128 [ 285.031521][T17249] veth1_macvtap: entered promiscuous mode [ 285.041696][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4443'. [ 285.063417][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.074026][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.083917][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.094383][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.099060][T17334] loop3: detected capacity change from 0 to 128 [ 285.104215][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.111429][T17334] FAT-fs (loop3): Unrecognized mount option "00000000000000000000005" or missing value [ 285.121336][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.139518][T17336] loop0: detected capacity change from 0 to 512 [ 285.140691][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.157550][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.171780][T17249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.181627][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.182320][T17339] loop4: detected capacity change from 0 to 128 [ 285.192161][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.192183][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.218751][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.228548][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.239071][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.250594][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.261362][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.272593][T17249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.283446][T17249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.292375][T17249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.301192][T17249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.310105][T17249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.311504][T17334] nfs: Unknown parameter '$' [ 285.333409][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'. [ 285.342529][T17342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4448'. [ 285.522730][T17365] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4454'. [ 285.531724][T17365] 0XD: renamed from 30XD (while UP) [ 285.543354][T17366] gretap0: entered promiscuous mode [ 285.556912][T17366] 0XD: renamed from gretap0 [ 285.569916][T17366] 0XD: left promiscuous mode [ 285.574823][T17366] 0XD: entered allmulticast mode [ 285.582924][T17366] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 285.619501][T17349] syzkaller1: entered promiscuous mode [ 285.625024][T17349] syzkaller1: entered allmulticast mode [ 285.819857][T17373] loop1: detected capacity change from 0 to 128 [ 285.827005][T17373] FAT-fs (loop1): Unrecognized mount option "00000000000000000000005" or missing value [ 285.885302][T17373] nfs: Unknown parameter '$' [ 285.904369][T17376] loop1: detected capacity change from 0 to 128 [ 285.972874][T17378] gre0: entered promiscuous mode [ 286.045065][T17382] loop1: detected capacity change from 0 to 512 [ 286.067614][T17382] ext4 filesystem being mounted at /root/syzkaller.mYicIe/217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.193965][T17393] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 286.206641][T17393] loop1: detected capacity change from 0 to 512 [ 286.217760][T17393] ext4 filesystem being mounted at /root/syzkaller.mYicIe/220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.334944][T17407] loop0: detected capacity change from 0 to 128 [ 286.404999][T17412] pim6reg: entered allmulticast mode [ 286.413137][T17412] pim6reg: left allmulticast mode [ 286.603954][T17429] loop4: detected capacity change from 0 to 128 [ 286.676883][T17399] syzkaller1: entered promiscuous mode [ 286.682591][T17399] syzkaller1: entered allmulticast mode [ 286.775309][T17442] 0XD: renamed from 30XD (while UP) [ 286.788024][T17444] loop2: detected capacity change from 0 to 128 [ 286.815450][T17446] 0XD: entered promiscuous mode [ 286.820658][T17446] 0XD: left allmulticast mode [ 286.829828][T17446] 1XD: renamed from 30XD [ 286.837281][T17446] 1XD: left promiscuous mode [ 286.842294][T17446] 1XD: entered allmulticast mode [ 286.849391][T17446] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 286.868758][T17448] gre0: entered promiscuous mode [ 286.926323][T17454] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 286.980974][T17456] pim6reg: entered allmulticast mode [ 286.986921][T17456] pim6reg: left allmulticast mode [ 287.232955][T17470] syzkaller1: entered promiscuous mode [ 287.238540][T17470] syzkaller1: entered allmulticast mode [ 287.312680][T17472] loop3: detected capacity change from 0 to 128 [ 287.381603][T17476] gre0: entered promiscuous mode [ 287.387854][T17475] loop0: detected capacity change from 0 to 512 [ 287.408785][T17475] ext4 filesystem being mounted at /root/syzkaller.SExf5n/151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.434953][T17475] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4499: corrupted inode contents [ 287.448129][T17475] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.4499: mark_inode_dirty error [ 287.459609][T17475] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.4499: corrupted inode contents [ 287.472414][T17475] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.4499: mark_inode_dirty error [ 287.531210][T17491] loop3: detected capacity change from 0 to 512 [ 287.592074][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 287.592088][ T29] audit: type=1400 audit(1719494720.991:29049): avc: denied { create } for pid=17499 comm="syz.4.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 287.626925][ T29] audit: type=1400 audit(1719494721.031:29050): avc: denied { write } for pid=17499 comm="syz.4.4505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 287.656648][T17500] loop4: detected capacity change from 0 to 1024 [ 287.685657][T17503] loop0: detected capacity change from 512 to 0 [ 287.698382][T17511] loop1: detected capacity change from 0 to 128 [ 287.841511][T17512] loop3: detected capacity change from 0 to 512 [ 287.877404][T17512] ext4 filesystem being mounted at /root/syzkaller.fYf0ju/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.979190][T17530] loop3: detected capacity change from 0 to 512 [ 288.007768][T17530] ext4 filesystem being mounted at /root/syzkaller.fYf0ju/93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.039402][T17542] 1XD: renamed from 00XD (while UP) [ 288.064699][T17544] loop1: detected capacity change from 0 to 1024 [ 288.073471][T17544] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.115277][T17549] loop3: detected capacity change from 0 to 128 [ 288.122920][T17549] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.131811][T17549] ext4 filesystem being mounted at /root/syzkaller.fYf0ju/95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 288.212023][ T29] audit: type=1326 audit(1719494721.611:29051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7fc00000 [ 288.235761][ T29] audit: type=1326 audit(1719494721.611:29052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb651e7cb29 code=0x7fc00000 [ 288.259744][ T29] audit: type=1326 audit(1719494721.611:29053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7fc00000 [ 288.263951][T15370] bio_check_eod: 28670 callbacks suppressed [ 288.264005][T15370] syz-executor: attempt to access beyond end of device [ 288.264005][T15370] loop0: rw=12288, sector=92, nr_sectors = 4 limit=0 [ 288.283356][ T29] audit: type=1326 audit(1719494721.611:29054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7fc00000 [ 288.298756][T17554] loop1: detected capacity change from 0 to 512 [ 288.302663][ T29] audit: type=1326 audit(1719494721.611:29055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7fc00000 [ 288.356588][ T29] audit: type=1326 audit(1719494721.611:29056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17473 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb651e7cb29 code=0x7fc00000 [ 288.381596][T16029] syz.0.4022: attempt to access beyond end of device [ 288.381596][T16029] loop0: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 288.395493][T17554] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 288.401827][T16029] syz.0.4022: attempt to access beyond end of device [ 288.401827][T16029] loop0: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 288.404121][T17554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 288.426027][T16029] syz.0.4022: attempt to access beyond end of device [ 288.426027][T16029] loop0: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 288.439651][T17554] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 288.440519][T16029] EXT4-fs error (device loop0): ext4_get_inode_loc:4495: inode #2: block 34: comm syz.0.4022: unable to read itable block [ 288.459419][T17554] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 288.471559][T16029] syz.0.4022: attempt to access beyond end of device [ 288.471559][T16029] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 288.490928][T16029] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.499903][T17554] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 288.506625][T16029] EXT4-fs (loop0): I/O error while writing superblock [ 288.513482][T16029] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5731: IO failure [ 288.522419][T17554] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz.1.4521: casefold flag without casefold feature [ 288.523159][T16029] syz.0.4022: attempt to access beyond end of device [ 288.523159][T16029] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 288.548360][T16029] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.557188][T17554] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4521: couldn't read orphan inode 16 (err -117) [ 288.569058][T16029] EXT4-fs (loop0): I/O error while writing superblock [ 288.569073][T16029] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.4022: mark_inode_dirty error [ 288.569181][T16029] syz.0.4022: attempt to access beyond end of device [ 288.569181][T16029] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 288.569202][T16029] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.610223][T16029] EXT4-fs (loop0): I/O error while writing superblock [ 288.617123][T14404] kworker/u8:65: attempt to access beyond end of device [ 288.617123][T14404] loop0: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 288.631809][T14404] kworker/u8:65: attempt to access beyond end of device [ 288.631809][T14404] loop0: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 288.645643][T14404] kworker/u8:65: attempt to access beyond end of device [ 288.645643][T14404] loop0: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 288.660363][T14404] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #3: block 34: comm kworker/u8:65: unable to read itable block [ 288.674378][T14404] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.675735][ T3200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.682657][T14404] EXT4-fs (loop0): I/O error while writing superblock [ 288.699799][T14404] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:65: unable to read itable block [ 288.713798][T14404] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.728052][T14404] EXT4-fs (loop0): I/O error while writing superblock [ 288.737773][T14404] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:65: unable to read itable block [ 288.751794][T14404] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.760283][T14404] EXT4-fs (loop0): I/O error while writing superblock [ 288.769494][T14404] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.778044][T14404] EXT4-fs (loop0): I/O error while writing superblock [ 288.784963][T14404] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.793410][T14404] EXT4-fs (loop0): I/O error while writing superblock [ 288.794659][ T3200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.800247][T14404] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.818754][T14404] EXT4-fs (loop0): I/O error while writing superblock [ 288.825614][T14404] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 288.833992][T14404] EXT4-fs (loop0): I/O error while writing superblock [ 288.853041][T14404] Quota error (device loop0): remove_tree: Can't read quota data block 2 [ 288.891605][T17561] pim6reg: entered allmulticast mode [ 288.900443][T17561] pim6reg: left allmulticast mode [ 288.918301][ T3200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.049915][T15706] EXT4-fs unmount: 31 callbacks suppressed [ 289.049931][T15706] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.071165][ T3200] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.093029][T17570] loop4: detected capacity change from 0 to 128 [ 289.119884][T17570] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.167953][ T3200] bridge_slave_1: left allmulticast mode [ 289.173639][ T3200] bridge_slave_1: left promiscuous mode [ 289.179396][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.206523][ T3200] bridge_slave_0: left allmulticast mode [ 289.212211][ T3200] bridge_slave_0: left promiscuous mode [ 289.212305][T17577] loop3: detected capacity change from 0 to 1024 [ 289.217967][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.231847][T17577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.248993][T17577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.294675][T15706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.414784][T17581] loop1: detected capacity change from 0 to 512 [ 289.448083][ T3200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.458894][ T3200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.472473][ T3200] bond0 (unregistering): Released all slaves [ 289.568700][ T3200] hsr_slave_0: left promiscuous mode [ 289.574401][ T3200] hsr_slave_1: left promiscuous mode [ 289.580377][ T3200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.588246][ T3200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.606220][ T3200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.613670][ T3200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.648086][ T3200] veth1_macvtap: left promiscuous mode [ 289.653645][ T3200] veth0_macvtap: left promiscuous mode [ 289.659721][ T3200] veth1_vlan: left promiscuous mode [ 289.665143][ T3200] veth0_vlan: left promiscuous mode [ 289.818456][ T3200] team0 (unregistering): Port device team_slave_1 removed [ 289.830385][ T3200] team0 (unregistering): Port device team_slave_0 removed [ 289.878607][T17597] __nla_validate_parse: 19 callbacks suppressed [ 289.878623][T17597] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4535'. [ 289.893825][T17597] 0XD: renamed from 31XD (while UP) [ 289.905187][T17600] pim6reg: entered allmulticast mode [ 289.911002][T17601] pim6reg: left allmulticast mode [ 289.971879][T17604] loop4: detected capacity change from 0 to 512 [ 289.991207][T17567] chnl_net:caif_netlink_parms(): no params data found [ 290.038282][T17604] netlink: 'syz.4.4537': attribute type 3 has an invalid length. [ 290.063441][T17567] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.070900][T17567] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.090504][T17567] bridge_slave_0: entered allmulticast mode [ 290.099202][T17567] bridge_slave_0: entered promiscuous mode [ 290.109112][T17608] pim6reg: entered allmulticast mode [ 290.114759][T17567] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.122136][T17567] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.131384][T17567] bridge_slave_1: entered allmulticast mode [ 290.138069][T17567] bridge_slave_1: entered promiscuous mode [ 290.144974][T17608] pim6reg: left allmulticast mode [ 290.191160][T17567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.217331][T17567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.241774][T17567] team0: Port device team_slave_0 added [ 290.248579][T17567] team0: Port device team_slave_1 added [ 290.268474][T17634] loop4: detected capacity change from 0 to 512 [ 290.278236][T17567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.285210][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.311370][T17567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.324510][T17567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.331665][T17567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.357669][T17567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.391527][T17567] hsr_slave_0: entered promiscuous mode [ 290.398144][T17567] hsr_slave_1: entered promiscuous mode [ 290.404086][T17567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.411802][T17567] Cannot create hsr debugfs directory [ 290.480955][T17639] loop3: detected capacity change from 0 to 4096 [ 290.491044][T17639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.505024][T17639] bridge_slave_1: left allmulticast mode [ 290.510969][T17639] bridge_slave_1: left promiscuous mode [ 290.516798][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.528665][T17644] loop1: detected capacity change from 0 to 8192 [ 290.535635][T15706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.539107][T17644] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.596493][T17647] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4548'. [ 290.606061][T17647] 0XD: entered promiscuous mode [ 290.611521][T17647] 0XD: left allmulticast mode [ 290.627335][T17647] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4548'. [ 290.636483][T17647] 0XD: renamed from 00XD [ 290.643859][T17647] 0XD: left promiscuous mode [ 290.648961][T17647] 0XD: entered allmulticast mode [ 290.655950][T17647] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 290.713652][T17657] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 290.744005][T17567] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.753975][T17567] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.763065][T17567] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.772616][T17567] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.811999][T17667] loop1: detected capacity change from 0 to 1024 [ 290.815587][T17567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.824286][T17667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 290.830710][T17567] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.842391][T17667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.864507][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.871608][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.881065][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.881909][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.897163][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.919347][T17567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.929780][T17567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.966911][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'. [ 290.982750][T17567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.056654][T17567] veth0_vlan: entered promiscuous mode [ 291.065501][T17567] veth1_vlan: entered promiscuous mode [ 291.084830][T17567] veth0_macvtap: entered promiscuous mode [ 291.092613][T17567] veth1_macvtap: entered promiscuous mode [ 291.105203][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.115794][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.125651][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.136124][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.146110][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.156782][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.166665][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.177186][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.190040][T17567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.200911][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.211371][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.221268][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.232040][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.242123][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.252627][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.262429][T17567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.273037][T17567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.284405][T17567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.295344][T17567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.304222][T17567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.312980][T17567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.321852][T17567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.324729][T17689] loop1: detected capacity change from 0 to 256 [ 291.432418][T17692] loop0: detected capacity change from 0 to 512 [ 291.444411][T17692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.457255][T17692] ext4 filesystem being mounted at /root/syzkaller.bpSFse/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.478985][T17567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.543855][T17700] loop3: detected capacity change from 0 to 512 [ 291.565004][T17700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.579965][T17700] ext4 filesystem being mounted at /root/syzkaller.fYf0ju/106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.603383][T15706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.664095][T17716] loop0: detected capacity change from 0 to 1024 [ 291.689538][T17719] loop2: detected capacity change from 0 to 512 [ 291.691687][T17716] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 291.710682][T17696] syzkaller1: entered promiscuous mode [ 291.716230][T17696] syzkaller1: entered allmulticast mode [ 291.725316][T17716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.760744][T17567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.845503][T17730] loop0: detected capacity change from 0 to 512 [ 291.877374][T17733] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4573'. [ 291.887521][T17730] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.4570: corrupted in-inode xattr: invalid ea_ino [ 291.901015][T17733] 0XD: entered promiscuous mode [ 291.901587][T17730] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.4570: couldn't read orphan inode 12 (err -117) [ 291.906142][T17733] 0XD: left allmulticast mode [ 291.924737][T17730] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.933948][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4574'. [ 291.946215][T17736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4574'. [ 291.956061][T17733] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4573'. [ 291.970817][T17733] 1XD: renamed from 30XD [ 291.978646][T17733] 1XD: left promiscuous mode [ 291.983698][T17733] 1XD: entered allmulticast mode [ 291.989799][T17740] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 291.990230][T17733] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 292.042566][T17742] loop1: detected capacity change from 0 to 512 [ 292.061058][T17742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.073893][T17742] ext4 filesystem being mounted at /root/syzkaller.mYicIe/250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.098823][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.126291][T17755] loop4: detected capacity change from 0 to 1024 [ 292.232897][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4586'. [ 292.241877][T17767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4586'. [ 292.318434][T17773] loop4: detected capacity change from 0 to 128 [ 292.338261][T17765] syzkaller1: entered promiscuous mode [ 292.343969][T17765] syzkaller1: entered allmulticast mode [ 292.417159][T17775] loop4: detected capacity change from 0 to 512 [ 292.739736][T17567] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 292.817072][T17802] loop2: detected capacity change from 0 to 128 [ 292.828973][T17802] FAT-fs (loop2): Unrecognized mount option "nosumtail=0" or missing value [ 292.840958][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 292.840971][ T29] audit: type=1326 audit(1719494726.078:29134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4095cb29 code=0x7ffc0000 [ 292.870804][ T29] audit: type=1326 audit(1719494726.078:29135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4095cb29 code=0x7ffc0000 [ 292.894401][ T29] audit: type=1326 audit(1719494726.078:29136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c4095cb29 code=0x7ffc0000 [ 292.918183][ T29] audit: type=1326 audit(1719494726.078:29137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4095cb29 code=0x7ffc0000 [ 292.941875][ T29] audit: type=1326 audit(1719494726.078:29138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c4095cb29 code=0x7ffc0000 [ 292.976353][ T29] audit: type=1326 audit(1719494726.133:29139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4095cb29 code=0x7ffc0000 [ 293.000030][ T29] audit: type=1326 audit(1719494726.133:29140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c40953ba7 code=0x7ffc0000 [ 293.023581][ T29] audit: type=1326 audit(1719494726.133:29141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c408f8559 code=0x7ffc0000 [ 293.025858][T17807] loop2: detected capacity change from 0 to 512 [ 293.047115][ T29] audit: type=1326 audit(1719494726.133:29142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c40953ba7 code=0x7ffc0000 [ 293.047201][ T29] audit: type=1326 audit(1719494726.133:29143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.0.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c408f8559 code=0x7ffc0000 [ 293.114903][T17807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.136736][T17807] ext4 filesystem being mounted at /root/syzkaller.3xQaLe/26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.149346][T17804] netlink: 'syz.0.4599': attribute type 1 has an invalid length. [ 293.195533][T17249] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.249129][T17820] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 293.357031][T17812] syzkaller1: entered promiscuous mode [ 293.362615][T17812] syzkaller1: entered allmulticast mode [ 293.383885][T17831] loop2: detected capacity change from 0 to 512 [ 293.396151][T17831] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.4610: corrupted in-inode xattr: invalid ea_ino [ 293.411778][T17833] gretap0: entered promiscuous mode [ 293.421796][T17831] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4610: couldn't read orphan inode 12 (err -117) [ 293.435670][T17831] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.436796][T17833] 0XD: renamed from gretap0 [ 293.466394][T17833] 0XD: left promiscuous mode [ 293.471394][T17833] 0XD: entered allmulticast mode [ 293.478781][T17833] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 293.584073][T17839] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 293.670374][T17843] loop4: detected capacity change from 0 to 512 [ 294.267646][T17249] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 294.369926][T17854] loop4: detected capacity change from 0 to 512 [ 294.378823][T17860] pim6reg: entered allmulticast mode [ 294.384732][T17860] pim6reg: left allmulticast mode [ 294.400337][T17867] /dev/sg0: Can't lookup blockdev [ 294.470604][T17872] syz.0.4624[17872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.470661][T17872] syz.0.4624[17872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.521132][T17876] loop4: detected capacity change from 0 to 8192 [ 294.551144][T17883] 0XD: entered promiscuous mode [ 294.556291][T17883] 0XD: left allmulticast mode [ 294.566629][T17883] 1XD: renamed from 30XD [ 294.573353][T17883] 1XD: left promiscuous mode [ 294.578253][T17883] 1XD: entered allmulticast mode [ 294.584791][T17883] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 294.616408][T17876] loop4: detected capacity change from 0 to 764 [ 294.624026][T17876] iso9660: Unknown parameter './file0' [ 294.768897][T17892] loop4: detected capacity change from 0 to 4096 [ 294.807449][T17896] /dev/sg0: Can't lookup blockdev [ 294.847223][T17899] loop4: detected capacity change from 0 to 512 [ 294.888261][T17899] netlink: 'syz.4.4635': attribute type 3 has an invalid length. [ 294.938334][T17905] loop2: detected capacity change from 0 to 512 [ 294.953932][T17905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.975133][T17905] ext4 filesystem being mounted at /root/syzkaller.3xQaLe/36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.003573][T17905] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4638: corrupted inode contents [ 295.021772][T17905] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.4638: mark_inode_dirty error [ 295.034187][T17905] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4638: corrupted inode contents [ 295.059879][T17905] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.4638: mark_inode_dirty error [ 295.103957][T17916] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 295.277198][T17924] loop2: detected capacity change from 512 to 0 [ 295.321608][T17926] loop4: detected capacity change from 0 to 128 [ 295.336237][T17928] __nla_validate_parse: 7 callbacks suppressed [ 295.336248][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4645'. [ 295.354784][T17928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17928 comm=syz.0.4645 [ 295.456166][T17932] pim6reg: entered allmulticast mode [ 295.463866][T17932] pim6reg: left allmulticast mode [ 295.484757][T17934] /dev/sg0: Can't lookup blockdev [ 295.520423][T17937] loop3: detected capacity change from 0 to 512 [ 295.539188][T17937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.552540][T17937] ext4 filesystem being mounted at /root/syzkaller.fYf0ju/118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.568059][T17937] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.4648: corrupted inode contents [ 295.580174][T17937] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.4648: mark_inode_dirty error [ 295.591839][T17937] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.4648: corrupted inode contents [ 295.603933][T17937] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.4648: mark_inode_dirty error [ 295.639067][T17943] loop0: detected capacity change from 0 to 1024 [ 295.647169][T17943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.657592][T17943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.670759][T17937] loop3: detected capacity change from 512 to 0 [ 295.677495][T17937] bio_check_eod: 27 callbacks suppressed [ 295.677509][T17937] syz.3.4648: attempt to access beyond end of device [ 295.677509][T17937] loop3: rw=12288, sector=92, nr_sectors = 4 limit=0 [ 295.697237][T17567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.702343][T15706] syz-executor: attempt to access beyond end of device [ 295.702343][T15706] loop3: rw=12288, sector=92, nr_sectors = 4 limit=0 [ 295.725520][T15706] syz-executor: attempt to access beyond end of device [ 295.725520][T15706] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 295.741485][T15706] syz-executor: attempt to access beyond end of device [ 295.741485][T15706] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 295.755150][T15706] syz-executor: attempt to access beyond end of device [ 295.755150][T15706] loop3: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 295.768731][T15706] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 295.781950][T15706] syz-executor: attempt to access beyond end of device [ 295.781950][T15706] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 295.795399][T15706] buffer_io_error: 4 callbacks suppressed [ 295.795411][T15706] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 295.813200][T15706] EXT4-fs (loop3): I/O error while writing superblock [ 295.820040][T15706] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 295.829002][T15706] syz-executor: attempt to access beyond end of device [ 295.829002][T15706] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 295.842479][T15706] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 295.856940][T17249] syz-executor: attempt to access beyond end of device [ 295.856940][T17249] loop2: rw=12288, sector=92, nr_sectors = 4 limit=0 [ 295.857758][T15706] EXT4-fs (loop3): I/O error while writing superblock [ 295.877313][T15706] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 295.889331][T17249] syz-executor: attempt to access beyond end of device [ 295.889331][T17249] loop2: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 295.905242][T17249] syz-executor: attempt to access beyond end of device [ 295.905242][T17249] loop2: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 295.907409][T17955] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4657'. [ 295.918947][T15706] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 295.930097][T17249] EXT4-fs error (device loop2): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 295.936350][T15706] EXT4-fs (loop3): I/O error while writing superblock [ 295.950718][T17249] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 295.960467][T17955] 0XD: entered promiscuous mode [ 295.964600][T17249] EXT4-fs (loop2): I/O error while writing superblock [ 295.969557][T17955] 0XD: left allmulticast mode [ 295.976361][T17249] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5731: IO failure [ 295.977361][T17249] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 295.982400][ T3200] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #3: block 34: comm kworker/u8:6: unable to read itable block [ 295.990867][T17249] EXT4-fs (loop2): I/O error while writing superblock [ 296.011145][ T3200] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 296.012434][T17249] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 296.019169][ T3200] EXT4-fs (loop3): I/O error while writing superblock [ 296.031643][T17249] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 296.038964][T17955] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4657'. [ 296.053543][T17249] EXT4-fs (loop2): I/O error while writing superblock [ 296.058818][T17955] 0XD: renamed from 00XD [ 296.064216][T14404] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4480: inode #3: block 34: comm kworker/u8:65: unable to read itable block [ 296.069633][ T3200] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:6: unable to read itable block [ 296.075491][T14404] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 296.090227][ T3200] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 296.102502][T14404] EXT4-fs (loop2): I/O error while writing superblock [ 296.130552][T17955] 0XD: left promiscuous mode [ 296.135759][T17955] 0XD: entered allmulticast mode [ 296.141250][ T3200] EXT4-fs (loop3): I/O error while writing superblock [ 296.152047][ T3200] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:6: unable to read itable block [ 296.154262][T14404] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:65: unable to read itable block [ 296.180516][ T3200] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 296.182218][T17955] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 296.191696][ T3200] EXT4-fs (loop3): I/O error while writing superblock [ 296.211419][T14404] EXT4-fs (loop2): I/O error while writing superblock [ 296.218338][T14404] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:65: unable to read itable block [ 296.233742][T14404] EXT4-fs (loop2): I/O error while writing superblock [ 296.234241][T15706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.240578][T14404] EXT4-fs (loop2): I/O error while writing superblock [ 296.257303][ T3200] EXT4-fs (loop3): I/O error while writing superblock [ 296.264871][T14404] EXT4-fs (loop2): I/O error while writing superblock [ 296.271811][T14404] EXT4-fs (loop2): I/O error while writing superblock [ 296.282762][T15706] EXT4-fs (loop3): I/O error while writing superblock [ 296.291907][T17963] /dev/sg0: Can't lookup blockdev [ 296.299724][T14404] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.311782][T17969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4661'. [ 296.379106][T14404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.449325][T17983] tmpfs: Unsupported parameter 'huge' [ 296.472524][T14404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.512468][T17991] pim6reg: entered allmulticast mode [ 296.518829][T17991] pim6reg: left allmulticast mode [ 296.549909][T14404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.681632][T17975] chnl_net:caif_netlink_parms(): no params data found [ 296.729073][T17994] GUP no longer grows the stack in syz.4.4667 (17994): 20004000-2000a000 (20002000) [ 296.738493][T17994] CPU: 1 PID: 17994 Comm: syz.4.4667 Tainted: G W 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 296.750193][T17994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 296.760306][T17994] Call Trace: [ 296.763585][T17994] [ 296.766515][T17994] dump_stack_lvl+0xf2/0x150 [ 296.771129][T17994] dump_stack+0x15/0x20 [ 296.775293][T17994] __get_user_pages+0xb97/0xf10 [ 296.780243][T17994] ? finish_task_switch+0xb5/0x2b0 [ 296.785351][T17994] get_user_pages_remote+0x1df/0x790 [ 296.790644][T17994] __access_remote_vm+0x15b/0x580 [ 296.795748][T17994] access_remote_vm+0x34/0x50 [ 296.800480][T17994] proc_pid_cmdline_read+0x3e9/0x670 [ 296.805849][T17994] vfs_readv+0x3f5/0x660 [ 296.810090][T17994] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 296.815903][T17994] __x64_sys_preadv+0x100/0x1c0 [ 296.820793][T17994] x64_sys_call+0x1d82/0x2d70 [ 296.825590][T17994] do_syscall_64+0xc9/0x1c0 [ 296.830155][T17994] ? clear_bhb_loop+0x55/0xb0 [ 296.834836][T17994] ? clear_bhb_loop+0x55/0xb0 [ 296.839568][T17994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.845450][T17994] RIP: 0033:0x7fcf448dcb29 [ 296.849849][T17994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.869446][T17994] RSP: 002b:00007fcf43b3d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 296.877878][T17994] RAX: ffffffffffffffda RBX: 00007fcf44a6b070 RCX: 00007fcf448dcb29 [ 296.885838][T17994] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 000000000000000a [ 296.893810][T17994] RBP: 00007fcf4495d756 R08: 0000000000000000 R09: 0000000000000000 [ 296.901857][T17994] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 296.909836][T17994] R13: 000000000000006e R14: 00007fcf44a6b070 R15: 00007ffe6d5bcc48 [ 296.917804][T17994] [ 296.936760][T17975] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.943848][T17975] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.953368][T17975] bridge_slave_0: entered allmulticast mode [ 296.959971][T17975] bridge_slave_0: entered promiscuous mode [ 296.966826][T17975] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.973932][T17975] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.981214][T17975] bridge_slave_1: entered allmulticast mode [ 296.987600][T17975] bridge_slave_1: entered promiscuous mode [ 296.994060][T14404] bridge_slave_1: left allmulticast mode [ 296.999724][T14404] bridge_slave_1: left promiscuous mode [ 297.005648][T14404] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.014863][T14404] bridge_slave_0: left allmulticast mode [ 297.021218][T14404] bridge_slave_0: left promiscuous mode [ 297.027013][T14404] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.107669][T18011] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 297.149486][T18013] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.175863][T14404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.188035][T14404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.200067][T14404] bond0 (unregistering): Released all slaves [ 297.213750][T18013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4674'. [ 297.231229][T18015] /dev/sg0: Can't lookup blockdev [ 297.239138][T17975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.249826][T17975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.275576][T17975] team0: Port device team_slave_0 added [ 297.281838][T18013] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 297.297264][T18023] loop4: detected capacity change from 0 to 128 [ 297.305035][T17975] team0: Port device team_slave_1 added [ 297.313428][T14404] hsr_slave_0: left promiscuous mode [ 297.319173][T14404] hsr_slave_1: left promiscuous mode [ 297.326164][T14404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.333638][T14404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.341456][T14404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.348979][T14404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.358592][T14404] veth1_macvtap: left promiscuous mode [ 297.364097][T14404] veth0_macvtap: left promiscuous mode [ 297.365382][T18023] nfs: Unknown parameter '$' [ 297.369670][T14404] veth1_vlan: left promiscuous mode [ 297.379685][T14404] veth0_vlan: left promiscuous mode [ 297.435857][T18030] loop4: detected capacity change from 0 to 512 [ 297.469814][T14404] team0 (unregistering): Port device team_slave_1 removed [ 297.479956][T14404] team0 (unregistering): Port device team_slave_0 removed [ 297.556031][T17975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.563096][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.588990][T17975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.610617][T17975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.615659][T18038] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 297.617625][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.651077][T17975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.682419][T17975] hsr_slave_0: entered promiscuous mode [ 297.690128][T17975] hsr_slave_1: entered promiscuous mode [ 297.703666][T17975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.711362][T17975] Cannot create hsr debugfs directory [ 297.712759][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4683'. [ 297.772810][T18003] chnl_net:caif_netlink_parms(): no params data found [ 298.047492][T18003] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.054621][T18003] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.081829][T18058] loop1: detected capacity change from 0 to 128 [ 298.089875][T18003] bridge_slave_0: entered allmulticast mode [ 298.097722][T18058] FAT-fs (loop1): Unrecognized mount option "00000000000000000000005" or missing value [ 298.110778][T18003] bridge_slave_0: entered promiscuous mode [ 298.122787][T18003] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.130064][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.138732][T18003] bridge_slave_1: entered allmulticast mode [ 298.145220][T18003] bridge_slave_1: entered promiscuous mode [ 298.168056][T18003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.173308][T18058] nfs: Unknown parameter '$' [ 298.179974][T18003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.207090][T18003] team0: Port device team_slave_0 added [ 298.214915][T18003] team0: Port device team_slave_1 added [ 298.217518][T18061] loop1: detected capacity change from 0 to 1764 [ 298.228625][T18061] iso9660: Unknown parameter '18446744073709551615' [ 298.236461][T18003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.243384][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.269735][T18003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.284450][T14404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.295711][T18003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.302760][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.329315][T18003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.359037][T18003] hsr_slave_0: entered promiscuous mode [ 298.365228][T18003] hsr_slave_1: entered promiscuous mode [ 298.371108][T18003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.373938][T18062] loop1: detected capacity change from 0 to 1024 [ 298.378712][T18003] Cannot create hsr debugfs directory [ 298.392704][T14404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.404795][T18062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.440271][T17975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.454172][T14404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.470720][T17975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.484701][T17975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.500360][T14404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.502281][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.520029][T17975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.587924][T17975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.595764][T18068] loop1: detected capacity change from 0 to 512 [ 298.604847][T14404] bridge_slave_0: left allmulticast mode [ 298.610588][T14404] bridge_slave_0: left promiscuous mode [ 298.616345][T14404] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.617623][T18068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.636046][T18068] ext4 filesystem being mounted at /root/syzkaller.mYicIe/277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.658776][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.699033][T18074] loop4: detected capacity change from 0 to 2048 [ 298.744263][T18074] loop4: p1 p2 p3 [ 298.748649][T18074] loop4: p3 size 2164260864 extends beyond EOD, truncated [ 298.782823][T18080] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.811499][T14404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.822163][T14404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.832523][T14404] bond0 (unregistering): Released all slaves [ 298.854783][T18081] pim6reg: entered allmulticast mode [ 298.863625][T18083] pim6reg: entered allmulticast mode [ 298.871721][T17975] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.879158][T18075] pim6reg: left allmulticast mode [ 298.893886][T18083] pim6reg: left allmulticast mode [ 298.918305][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.925402][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.934493][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.941670][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.992568][T14404] hsr_slave_0: left promiscuous mode [ 299.003860][T14404] hsr_slave_1: left promiscuous mode [ 299.027242][T14404] veth1_macvtap: left promiscuous mode [ 299.032724][T14404] veth0_macvtap: left promiscuous mode [ 299.038386][T14404] veth1_vlan: left promiscuous mode [ 299.043662][T14404] veth0_vlan: left promiscuous mode [ 299.135892][T14404] team0 (unregistering): Port device team_slave_1 removed [ 299.146106][T14404] team0 (unregistering): Port device team_slave_0 removed [ 299.194932][T18093] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4696'. [ 299.214257][T18093] 0XD: renamed from 01XD (while UP) [ 299.223348][T18093] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 299.246978][T17975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.255903][T18099] loop1: detected capacity change from 0 to 512 [ 299.268046][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 299.268059][ T29] audit: type=1326 audit(1719494732.004:29481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.4.4696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf448dcb29 code=0x0 [ 299.276754][T18003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.309192][T18099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.324901][T18003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.332016][T18099] ext4 filesystem being mounted at /root/syzkaller.mYicIe/280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.333718][T18003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 299.357450][T18003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 299.365266][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.390957][T18110] pim6reg: entered allmulticast mode [ 299.403523][T18110] pim6reg: left allmulticast mode [ 299.435912][T18003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.450376][T18003] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.458238][T18115] loop1: detected capacity change from 0 to 128 [ 299.472687][T17975] veth0_vlan: entered promiscuous mode [ 299.483916][T18003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.494298][T18003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.506272][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.513361][ T3151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.524621][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.531131][T18117] tmpfs: Unsupported parameter 'huge' [ 299.531707][ T3151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.564291][T17975] veth1_vlan: entered promiscuous mode [ 299.588820][T17975] veth0_macvtap: entered promiscuous mode [ 299.605139][T17975] veth1_macvtap: entered promiscuous mode [ 299.616320][T18121] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 299.645136][T18003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.657066][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.667525][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.677362][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.687787][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.697606][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.708054][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.718017][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.728500][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.740244][T17975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.749973][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.760417][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.770259][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.780781][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.790598][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.801119][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.810933][T17975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.821422][T17975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.833403][T17975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.848502][T17975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.857382][T17975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.866266][T17975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.875048][T17975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.979755][T18003] veth0_vlan: entered promiscuous mode [ 299.991111][T18003] veth1_vlan: entered promiscuous mode [ 300.026345][T18003] veth0_macvtap: entered promiscuous mode [ 300.037695][T18003] veth1_macvtap: entered promiscuous mode [ 300.061290][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.071773][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.081691][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.092193][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.102150][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.112719][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.122554][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.133115][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.142949][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.153395][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.165703][T18003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.176493][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.187124][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.197037][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.207665][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.217707][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.228168][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.237995][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.248488][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.258322][T18003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.268738][T18003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.280721][T18003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.291567][T18003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.300433][T18003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.309231][T18003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.317952][T18003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.346818][T18162] netlink: 'syz.1.4707': attribute type 9 has an invalid length. [ 300.405499][T18169] /dev/sg0: Can't lookup blockdev [ 300.530862][T18180] loop3: detected capacity change from 0 to 128 [ 300.609091][T18183] loop4: detected capacity change from 0 to 512 [ 300.734445][T18187] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4714'. [ 300.743571][T18187] 1XD: renamed from 30XD (while UP) [ 300.751120][T18187] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 300.772551][ T29] audit: type=1326 audit(1719494733.407:29482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18186 comm="syz.4.4714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf448dcb29 code=0x0 [ 301.369767][ T29] audit: type=1326 audit(1719494733.951:29483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18191 comm="syz.1.4717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb51801b29 code=0x0 [ 301.403943][T18193] loop3: detected capacity change from 0 to 512 [ 301.421410][T18193] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 301.431566][T18193] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 301.441473][T18193] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.4716: Failed to acquire dquot type 1 [ 301.459433][T18193] EXT4-fs (loop3): 1 truncate cleaned up [ 301.465572][T18193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.478534][T18193] ext4 filesystem being mounted at /root/syzkaller.PhurW5/1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.492464][T18193] netlink: 'syz.3.4716': attribute type 3 has an invalid length. [ 301.519536][T18003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.579066][T18200] loop3: detected capacity change from 0 to 128 [ 301.637177][ T29] audit: type=1326 audit(1719494734.200:29484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18201 comm="syz.3.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a286eb29 code=0x7ffc0000 [ 301.669750][ T29] audit: type=1326 audit(1719494734.200:29485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18201 comm="syz.3.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a286eb29 code=0x7ffc0000 [ 301.693366][ T29] audit: type=1326 audit(1719494734.200:29486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18201 comm="syz.3.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a286eb29 code=0x7ffc0000 [ 301.712811][T18206] loop4: detected capacity change from 0 to 512 [ 301.717511][ T29] audit: type=1326 audit(1719494734.219:29487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18201 comm="syz.3.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a286eb29 code=0x7ffc0000 [ 301.747278][ T29] audit: type=1326 audit(1719494734.219:29488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18201 comm="syz.3.4719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63a286eb29 code=0x7ffc0000 [ 301.854994][T18210] /dev/sg0: Can't lookup blockdev [ 302.259391][T18217] pim6reg: entered allmulticast mode [ 302.265317][T18217] pim6reg: left allmulticast mode [ 302.336765][T18221] ip6erspan0: entered promiscuous mode [ 302.509497][T18230] loop1: detected capacity change from 0 to 128 [ 302.545844][T18231] loop2: detected capacity change from 0 to 128 [ 302.564773][T18233] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4730'. [ 302.573825][T18233] 1XD: renamed from 30XD (while UP) [ 302.582205][T18233] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 302.641291][T18235] pim6reg: entered allmulticast mode [ 302.647139][T18235] pim6reg: left allmulticast mode [ 302.833415][T18255] pim6reg: entered allmulticast mode [ 302.839156][T18255] pim6reg: left allmulticast mode [ 302.892121][T18259] loop3: detected capacity change from 0 to 512 [ 302.900682][T18259] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.909779][T18259] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 302.919412][T18259] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 302.924396][T18264] loop4: detected capacity change from 0 to 128 [ 302.929074][T18259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 302.942686][T18259] System zones: 0-2, 18-18, 34-34 [ 302.948065][T18259] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 302.962833][T18259] EXT4-fs (loop3): 1 truncate cleaned up [ 302.968775][T18259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.993556][T18259] EXT4-fs error (device loop3): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz.3.4738: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 303.014446][T18259] EXT4-fs error (device loop3) in ext4_delete_entry:2747: Corrupt filesystem [ 303.024271][T18259] EXT4-fs warning (device loop3): ext4_rename_delete:3738: inode #2: comm syz.3.4738: Deleting old file: nlink 4, error=-117 [ 303.026646][T18270] pim6reg: entered allmulticast mode [ 303.043971][T18003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.046525][T18270] pim6reg: left allmulticast mode [ 303.532296][T18283] loop1: detected capacity change from 0 to 512 [ 303.540345][T18283] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.547233][T18283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 303.558478][T18283] EXT4-fs (loop1): 1 truncate cleaned up [ 303.564479][T18283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.757923][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.802196][T18297] pim6reg: entered allmulticast mode [ 303.808214][T18297] pim6reg: left allmulticast mode [ 303.915416][T18301] loop1: detected capacity change from 0 to 512 [ 303.935549][T18301] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.4751: Failed to acquire dquot type 1 [ 303.947314][T18301] EXT4-fs (loop1): 1 truncate cleaned up [ 303.953304][T18301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.965852][T18301] ext4 filesystem being mounted at /root/syzkaller.mYicIe/296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.979497][T18301] netlink: 'syz.1.4751': attribute type 3 has an invalid length. [ 304.022410][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.114394][T18321] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4757'. [ 304.123467][T18321] 0XD: renamed from gretap0 (while UP) [ 304.130838][T18321] 0XD: entered allmulticast mode [ 304.136691][T18321] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 304.212545][T18331] pim6reg: entered allmulticast mode [ 304.218462][T18331] pim6reg: left allmulticast mode [ 304.257082][T18332] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4760'. [ 304.266150][T18332] 0XD: renamed from 31XD (while UP) [ 304.357656][T18336] loop1: detected capacity change from 0 to 512 [ 304.368212][T18336] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.4763: Failed to acquire dquot type 1 [ 304.379968][T18336] EXT4-fs (loop1): 1 truncate cleaned up [ 304.385980][T18336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.398547][T18336] ext4 filesystem being mounted at /root/syzkaller.mYicIe/301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.412838][T18336] netlink: 'syz.1.4763': attribute type 3 has an invalid length. [ 304.433874][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.492219][T18342] loop2: detected capacity change from 0 to 512 [ 304.503496][T18342] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.4766: corrupted in-inode xattr: invalid ea_ino [ 304.517046][T18342] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4766: couldn't read orphan inode 12 (err -117) [ 304.529333][T18342] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.583224][T18354] loop1: detected capacity change from 0 to 1024 [ 304.591544][T18354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.602685][T18354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.623309][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.765176][T18366] loop1: detected capacity change from 0 to 128 [ 304.771721][T18366] FAT-fs (loop1): Unrecognized mount option "00000000000000000000005" or missing value [ 304.830895][T18366] nfs: Unknown parameter '$' [ 304.879359][T18371] IPv6: sit1: Disabled Multicast RS [ 304.908511][T18373] loop1: detected capacity change from 0 to 512 [ 304.921217][T18373] __quota_error: 424 callbacks suppressed [ 304.921230][T18373] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 304.937084][T18373] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 304.946984][T18373] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.4775: Failed to acquire dquot type 1 [ 304.959204][T18373] EXT4-fs (loop1): 1 truncate cleaned up [ 304.965532][T18373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.978094][T18373] ext4 filesystem being mounted at /root/syzkaller.mYicIe/311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.992091][T18373] netlink: 'syz.1.4775': attribute type 3 has an invalid length. [ 305.005718][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.116772][T18385] loop1: detected capacity change from 0 to 8192 [ 305.124934][T18385] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.193839][T18392] loop3: detected capacity change from 0 to 128 [ 305.270088][ T29] audit: type=1400 audit(1719494737.551:29909): avc: denied { accept } for pid=18400 comm="syz.1.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.304978][T18403] loop4: detected capacity change from 0 to 512 [ 305.314195][T18405] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4788'. [ 305.323257][T18405] 0XD: renamed from 31XD (while UP) [ 305.330282][T18405] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 305.350337][ T29] audit: type=1326 audit(1719494737.625:29910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18404 comm="syz.1.4788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb51801b29 code=0x0 [ 305.375186][T18403] netlink: 'syz.4.4787': attribute type 3 has an invalid length. [ 305.399058][T17975] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 305.478137][ T29] audit: type=1400 audit(1719494737.745:29911): avc: denied { getopt } for pid=18408 comm="syz.2.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 305.498011][ T29] audit: type=1400 audit(1719494737.745:29912): avc: denied { ioctl } for pid=18408 comm="syz.2.4789" path="socket:[70558]" dev="sockfs" ino=70558 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.524909][ T29] audit: type=1400 audit(1719494737.745:29913): avc: denied { connect } for pid=18408 comm="syz.2.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 305.604700][T18416] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 305.724542][T18434] loop2: detected capacity change from 0 to 512 [ 305.733377][T18434] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.4799: corrupted in-inode xattr: invalid ea_ino [ 305.746966][T18434] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4799: couldn't read orphan inode 12 (err -117) [ 305.759576][T18434] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.770350][T18438] loop4: detected capacity change from 0 to 512 [ 305.782387][T17975] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 305.831115][T18438] netlink: 'syz.4.4800': attribute type 3 has an invalid length. [ 305.847419][T18440] loop2: detected capacity change from 0 to 2048 [ 305.863593][T18440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.877000][T18440] ext4 filesystem being mounted at /root/syzkaller.T7qCjI/19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.877394][ T29] audit: type=1400 audit(1719494738.114:29914): avc: denied { create } for pid=18443 comm="syz.4.4802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 305.910588][ T29] audit: type=1400 audit(1719494738.142:29915): avc: denied { ioctl } for pid=18443 comm="syz.4.4802" path="socket:[70634]" dev="sockfs" ino=70634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 305.936558][ T29] audit: type=1400 audit(1719494738.142:29916): avc: denied { bind } for pid=18443 comm="syz.4.4802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 306.025038][T18440] loop2: detected capacity change from 2048 to 64 [ 306.173066][T18458] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 306.175599][T18440] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 18440 comm: syz.2.4801) [ 306.267796][T18471] loop1: detected capacity change from 0 to 512 [ 306.270507][T18467] loop3: detected capacity change from 0 to 512 [ 306.276772][T18471] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.4811: corrupted in-inode xattr: invalid ea_ino [ 306.293979][T18471] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4811: couldn't read orphan inode 12 (err -117) [ 306.297313][T18467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.306549][T18471] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.320464][T18467] ext4 filesystem being mounted at /root/syzkaller.PhurW5/19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.351501][T18003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.766632][T13693] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 306.859737][T17975] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.870746][T18441] bio_check_eod: 51 callbacks suppressed [ 306.870759][T18441] kmmpd-loop2: attempt to access beyond end of device [ 306.870759][T18441] loop2: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 306.889910][T18441] buffer_io_error: 13 callbacks suppressed [ 306.889922][T18441] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 306.965821][T18489] loop4: detected capacity change from 0 to 2048 [ 307.000019][T18489] loop4: p1 < > p4 [ 307.004179][T18489] loop4: p4 size 8388608 extends beyond EOD, truncated [ 307.015896][T18491] loop1: detected capacity change from 0 to 512 [ 307.023489][T18491] ext4: Unknown parameter 'nouser_xattr' [ 307.077194][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 307.108012][T18494] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.153899][T18496] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4820'. [ 307.163970][T18496] 1XD: renamed from 30XD (while UP) [ 307.171785][T18496] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 307.194435][T10487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.263273][T10487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.306688][T10487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.360933][T10487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.375524][T18510] loop3: detected capacity change from 0 to 512 [ 307.384234][T18510] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.4824: corrupted in-inode xattr: invalid ea_ino [ 307.398916][T18510] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4824: couldn't read orphan inode 12 (err -117) [ 307.403763][T18498] chnl_net:caif_netlink_parms(): no params data found [ 307.411504][T18510] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.448916][T18003] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 307.458839][T18498] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.466039][T18498] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.473310][T18498] bridge_slave_0: entered allmulticast mode [ 307.480212][T18498] bridge_slave_0: entered promiscuous mode [ 307.490891][T18498] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.498010][T18498] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.505543][T18498] bridge_slave_1: entered allmulticast mode [ 307.512041][T18498] bridge_slave_1: entered promiscuous mode [ 307.536342][T18498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.549208][T18498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.563739][T10487] bridge_slave_1: left allmulticast mode [ 307.569393][T10487] bridge_slave_1: left promiscuous mode [ 307.575075][T10487] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.582952][T10487] bridge_slave_0: left allmulticast mode [ 307.588634][T10487] bridge_slave_0: left promiscuous mode [ 307.594260][T10487] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.613684][T18530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4829'. [ 307.696277][T10487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.706835][T10487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.716736][T10487] bond0 (unregistering): Released all slaves [ 307.732241][T18498] team0: Port device team_slave_0 added [ 307.739484][T18498] team0: Port device team_slave_1 added [ 307.759117][T18498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.766079][T18498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.792012][T18498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.805244][T18498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.812233][T18498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.838275][T18498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.854107][T10487] hsr_slave_0: left promiscuous mode [ 307.859773][T10487] hsr_slave_1: left promiscuous mode [ 307.868301][T10487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.875924][T10487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.883792][T10487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.891269][T10487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.901132][T18547] loop4: detected capacity change from 0 to 128 [ 307.901168][T10487] veth1_macvtap: left promiscuous mode [ 307.912920][T10487] veth0_macvtap: left promiscuous mode [ 307.918498][T10487] veth1_vlan: left promiscuous mode [ 307.923767][T10487] veth0_vlan: left promiscuous mode [ 308.121316][T18551] nfs: Unknown parameter '$' [ 308.151771][T10487] team0 (unregistering): Port device team_slave_1 removed [ 308.180273][T18553] loop1: detected capacity change from 0 to 512 [ 308.212143][T10487] team0 (unregistering): Port device team_slave_0 removed [ 308.244802][T18553] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.4835: corrupted in-inode xattr: invalid ea_ino [ 308.266999][T18553] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.4835: couldn't read orphan inode 12 (err -117) [ 308.281670][T18553] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.311996][T18498] hsr_slave_0: entered promiscuous mode [ 308.318167][T18498] hsr_slave_1: entered promiscuous mode [ 308.318193][T13693] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 308.332761][T18498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.340385][T18498] Cannot create hsr debugfs directory [ 308.407575][T18562] loop1: detected capacity change from 0 to 164 [ 308.418030][T18562] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 308.514958][T18558] syzkaller1: entered promiscuous mode [ 308.520510][T18558] syzkaller1: entered allmulticast mode [ 308.698405][T18577] loop1: detected capacity change from 0 to 512 [ 308.731821][T18498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 308.739818][T18577] EXT4-fs (loop1): 1 truncate cleaned up [ 308.746017][T18577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.760557][T18498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 308.773333][T18498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 308.786599][T18498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.828837][T18498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.844562][T18498] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.855364][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.862489][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.887322][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.894427][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.943622][T13693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.959535][T18498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.029962][T18498] veth0_vlan: entered promiscuous mode [ 309.039448][T18498] veth1_vlan: entered promiscuous mode [ 309.053569][T18596] loop1: detected capacity change from 0 to 8192 [ 309.056898][T18498] veth0_macvtap: entered promiscuous mode [ 309.061981][T18596] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.068070][T18498] veth1_macvtap: entered promiscuous mode [ 309.089404][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.100047][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.109953][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.120472][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.130302][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.140725][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.150554][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.161043][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.170884][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.181307][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.192394][T18498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.203126][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.213576][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.223553][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.234058][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.243979][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.254418][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.264240][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.274742][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.284613][T18498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.295092][T18498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.307177][T18498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.317096][T18498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.325998][T18498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.334760][T18498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.343485][T18498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.359001][T18604] loop1: detected capacity change from 0 to 128 [ 309.368549][T18604] FAT-fs (loop1): bread failed, FSINFO block (sector = 4095) [ 309.462044][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4853'. [ 309.592508][T18625] loop2: detected capacity change from 0 to 128 [ 309.804185][T18630] loop4: detected capacity change from 0 to 512 [ 309.811701][T18632] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 309.873369][T18630] netlink: 'syz.4.4856': attribute type 3 has an invalid length. [ 309.934240][T18634] pim6reg: entered allmulticast mode [ 309.940159][T18634] pim6reg: left allmulticast mode [ 310.388270][T18664] loop2: detected capacity change from 0 to 512 [ 310.396662][T18664] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 310.403244][T18664] EXT4-fs (loop2): mount failed [ 310.460735][T18664] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 310.492299][T18664] Invalid ELF header magic: != ELF [ 310.502610][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 310.502623][ T29] audit: type=1400 audit(1719494742.369:29949): avc: denied { module_load } for pid=18663 comm="syz.2.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 310.543367][T18669] loop1: detected capacity change from 0 to 512 [ 310.562798][T18669] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 310.572950][T18669] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 310.582886][T18669] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.4870: Failed to acquire dquot type 1 [ 310.609238][T18669] EXT4-fs (loop1): 1 truncate cleaned up [ 310.616646][T18669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.633454][T18669] ext4 filesystem being mounted at /root/syzkaller.mYicIe/339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.650135][T18669] netlink: 'syz.1.4870': attribute type 3 has an invalid length. [ 310.740229][T18688] pim6reg: entered allmulticast mode [ 310.751684][T18688] pim6reg: left allmulticast mode [ 310.769165][T18672] chnl_net:caif_netlink_parms(): no params data found [ 310.801763][T18672] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.808856][T18672] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.817232][T18672] bridge_slave_0: entered allmulticast mode [ 310.823766][T18672] bridge_slave_0: entered promiscuous mode [ 310.831901][T18672] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.839167][T18672] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.847606][T18672] bridge_slave_1: entered allmulticast mode [ 310.854503][T18672] bridge_slave_1: entered promiscuous mode [ 310.894258][T10482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.913310][T18672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.938371][T18672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.950787][T10482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.001250][T18672] team0: Port device team_slave_0 added [ 311.013614][T18672] team0: Port device team_slave_1 added [ 311.034063][ T29] audit: type=1326 audit(1719494742.877:29950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18709 comm="syz.3.4879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63a286eb29 code=0x0 [ 311.063696][T10482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.077053][T18672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.084001][T18672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.109944][T18672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.126811][T18672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.133813][T18672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.160066][T18672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.182762][T10482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.194250][T18719] IPVS: Unknown mcast interface: syzkaller1 [ 311.209099][T18721] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.219251][T18672] hsr_slave_0: entered promiscuous mode [ 311.225495][T18672] hsr_slave_1: entered promiscuous mode [ 311.231322][T18672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.238912][T18672] Cannot create hsr debugfs directory [ 311.256235][T18723] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4884'. [ 311.265201][T18723] 0XD: renamed from gretap0 (while UP) [ 311.272463][T18723] 0XD: entered allmulticast mode [ 311.292667][ T29] audit: type=1400 audit(1719494743.117:29951): avc: denied { bind } for pid=18726 comm="syz.1.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.342455][T10482] bridge_slave_1: left allmulticast mode [ 311.348209][T10482] bridge_slave_1: left promiscuous mode [ 311.353867][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.363838][T10482] bridge_slave_0: left allmulticast mode [ 311.369588][T10482] bridge_slave_0: left promiscuous mode [ 311.375414][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.413612][T18736] loop1: detected capacity change from 0 to 512 [ 311.436076][T18736] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 311.446191][T18736] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 311.456150][T18736] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.4888: Failed to acquire dquot type 1 [ 311.468053][T18736] EXT4-fs (loop1): 1 truncate cleaned up [ 311.474112][T18736] ext4 filesystem being mounted at /root/syzkaller.mYicIe/346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.489254][T10482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.490087][T18736] netlink: 'syz.1.4888': attribute type 3 has an invalid length. [ 311.507527][T10482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.518984][T10482] bond0 (unregistering): Released all slaves [ 311.649950][T10482] hsr_slave_0: left promiscuous mode [ 311.655681][T10482] hsr_slave_1: left promiscuous mode [ 311.661447][T10482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.668886][T10482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.676765][T10482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.684377][T10482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.694273][T10482] veth1_macvtap: left promiscuous mode [ 311.699796][T10482] veth0_macvtap: left promiscuous mode [ 311.705347][T10482] veth1_vlan: left promiscuous mode [ 311.710607][T10482] veth0_vlan: left promiscuous mode [ 311.788149][T10482] team0 (unregistering): Port device team_slave_1 removed [ 311.798792][T10482] team0 (unregistering): Port device team_slave_0 removed [ 311.967305][ T29] audit: type=1400 audit(1719494743.735:29952): avc: denied { write } for pid=18747 comm="syz.3.4892" lport=47913 faddr=::ffff:10.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 311.990540][ T29] audit: type=1400 audit(1719494743.735:29953): avc: denied { setopt } for pid=18747 comm="syz.3.4892" lport=47913 faddr=::ffff:10.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 312.027752][T18672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.036324][T18672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.047914][T18672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.057203][T18672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.091360][T18672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.112471][T18672] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.130266][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.137357][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.160827][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.167931][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.181039][T18757] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.259185][T18772] loop2: detected capacity change from 0 to 128 [ 312.263355][T18672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.278858][T18772] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:65535 [ 312.285719][T18772] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 312.356521][T18672] veth0_vlan: entered promiscuous mode [ 312.370356][T18672] veth1_vlan: entered promiscuous mode [ 312.389458][T18672] veth0_macvtap: entered promiscuous mode [ 312.401600][T18672] veth1_macvtap: entered promiscuous mode [ 312.429577][T18789] loop2: detected capacity change from 0 to 1024 [ 312.432478][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.446399][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.456393][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.459981][T18789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.466826][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.466846][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.466859][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.505768][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.516189][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.526072][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.536499][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.549179][T18672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.574810][T18790] dummy0: entered promiscuous mode [ 312.587925][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.598480][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.608418][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.618907][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.628770][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.639258][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.649192][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.659729][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.669625][T18672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.680058][T18672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.696304][T18672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.706890][T18672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.715854][T18672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.724541][T18672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.733301][T18672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.800549][T18806] loop2: detected capacity change from 0 to 512 [ 312.827974][T18810] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.835528][T18808] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.851476][T18806] netlink: 'syz.2.4906': attribute type 3 has an invalid length. [ 312.924854][T18823] loop2: detected capacity change from 0 to 1024 [ 313.122340][T18840] loop1: detected capacity change from 0 to 128 [ 313.157858][T18838] loop2: detected capacity change from 0 to 2048 [ 313.221617][T18842] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.315405][T18856] loop1: detected capacity change from 0 to 512 [ 313.323531][T18853] loop2: detected capacity change from 0 to 512 [ 313.334282][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4928'. [ 313.339316][T18853] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 313.344557][T18856] ext4 filesystem being mounted at /root/syzkaller.mYicIe/361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.353152][T18853] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.4927: Failed to acquire dquot type 1 [ 313.371829][T18856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=18856 comm=syz.1.4929 [ 313.377229][T18853] EXT4-fs (loop2): 1 truncate cleaned up [ 313.397737][T18853] ext4 filesystem being mounted at /root/syzkaller.avOucG/19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.413585][ C0] ================================================================== [ 313.415322][T18853] netlink: 'syz.2.4927': attribute type 3 has an invalid length. [ 313.421766][ C0] BUG: KCSAN: data-race in wg_packet_send_staged_packets / wg_packet_send_staged_packets [ 313.439239][ C0] [ 313.441546][ C0] read to 0xffff88811225eb28 of 4 bytes by interrupt on cpu 1: [ 313.449073][ C0] wg_packet_send_staged_packets+0x60e/0xac0 [ 313.455050][ C0] wg_packet_send_keepalive+0xe2/0x100 [ 313.460590][ C0] wg_expired_send_persistent_keepalive+0x3c/0x50 [ 313.466998][ C0] call_timer_fn+0x3a/0x300 [ 313.471490][ C0] __run_timer_base+0x417/0x640 [ 313.476328][ C0] run_timer_softirq+0x31/0x70 [ 313.481081][ C0] handle_softirqs+0xc3/0x280 [ 313.485752][ C0] irq_exit_rcu+0x3e/0x90 [ 313.490075][ C0] sysvec_apic_timer_interrupt+0x37/0x80 [ 313.495697][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.501668][ C0] [ 313.503976][ C0] write to 0xffff88811225eb28 of 4 bytes by interrupt on cpu 0: [ 313.511587][ C0] wg_packet_send_staged_packets+0x6e5/0xac0 [ 313.517564][ C0] wg_packet_send_keepalive+0xe2/0x100 [ 313.523018][ C0] wg_expired_send_persistent_keepalive+0x3c/0x50 [ 313.529426][ C0] call_timer_fn+0x3a/0x300 [ 313.533914][ C0] __run_timer_base+0x417/0x640 [ 313.538751][ C0] run_timer_softirq+0x31/0x70 [ 313.543502][ C0] handle_softirqs+0xc3/0x280 [ 313.548170][ C0] irq_exit_rcu+0x3e/0x90 [ 313.552489][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 313.558108][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.564082][ C0] __tsan_read4+0xe5/0x180 [ 313.568492][ C0] __crc32c_le_base+0x12b/0x520 [ 313.573339][ C0] chksum_update+0x32/0x50 [ 313.577748][ C0] crypto_shash_update+0x4a/0x60 [ 313.582675][ C0] ext4_handle_dirty_dirblock+0x271/0x350 [ 313.588384][ C0] ext4_delete_entry+0x30a/0x390 [ 313.593322][ C0] ext4_rmdir+0x3de/0x600 [ 313.597656][ C0] vfs_rmdir+0x26d/0x320 [ 313.601902][ C0] do_rmdir+0x194/0x320 [ 313.606052][ C0] __x64_sys_unlinkat+0xa4/0xb0 [ 313.610894][ C0] x64_sys_call+0x2637/0x2d70 [ 313.615563][ C0] do_syscall_64+0xc9/0x1c0 [ 313.620061][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.625944][ C0] [ 313.628249][ C0] value changed: 0x00000001 -> 0x00000000 [ 313.633948][ C0] [ 313.636259][ C0] Reported by Kernel Concurrency Sanitizer on: [ 313.642410][ C0] CPU: 0 PID: 13693 Comm: syz-executor Tainted: G W 6.10.0-rc5-syzkaller-00035-gafcd48134c58 #0 [ 313.654198][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 313.664262][ C0] ================================================================== [ 313.715342][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 316.581400][T10482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.125874][T10482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.201744][T10482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.267547][T10482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.319470][T10482] bridge_slave_1: left allmulticast mode [ 319.325211][T10482] bridge_slave_1: left promiscuous mode [ 319.330846][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.338520][T10482] bridge_slave_0: left allmulticast mode [ 319.344180][T10482] bridge_slave_0: left promiscuous mode [ 319.349800][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.440502][T10482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.451036][T10482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.460968][T10482] bond0 (unregistering): Released all slaves [ 319.580849][T10482] hsr_slave_0: left promiscuous mode [ 319.586594][T10482] hsr_slave_1: left promiscuous mode [ 319.592452][T10482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.599996][T10482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.607424][T10482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.615148][T10482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.624214][T10482] veth1_macvtap: left promiscuous mode [ 319.629670][T10482] veth0_macvtap: left promiscuous mode [ 319.635425][T10482] veth1_vlan: left promiscuous mode [ 319.640770][T10482] veth0_vlan: left promiscuous mode [ 319.715351][T10482] team0 (unregistering): Port device team_slave_1 removed [ 319.725225][T10482] team0 (unregistering): Port device team_slave_0 removed [ 320.776488][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 320.776501][ T29] audit: type=1400 audit(1719494751.867:29954): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=37508 daddr=10.128.0.102 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1