last executing test programs: 1.780287865s ago: executing program 3 (id=971): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x5, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x21}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0x58}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000001000000fc010000000000000000000000000000000004004e2300000a00000000000000ae87a613273128"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000003000000000000000000000001000000000000ff000c001500"/52], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r4, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 1.756346629s ago: executing program 3 (id=973): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x124b, &(0x7f0000001880)="$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") r0 = open(0x0, 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x3, 0x7a00, 0x0, 0x3) 1.697160647s ago: executing program 3 (id=975): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="646f5a772c648b74732c646f6e66732c6769643d0000000000000000", @ANYRESHEX=0x0, @ANYBLOB=',dots,nodots,umask=00000000000000000004263,check=strict,allow_utime=00000000000000000000001,dots,dots,umask=00000000000000000077777,nodots,dots,tz=UTC,nodots,dots,showexec,nodots,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) 1.594450783s ago: executing program 1 (id=977): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5452, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)='R'}) 1.529206934s ago: executing program 1 (id=981): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x2, [0x0, 0x0]}, 0xc) 1.519929485s ago: executing program 3 (id=983): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5412, &(0x7f0000001200)) 1.507348437s ago: executing program 1 (id=984): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x5, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x21}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0x58}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000001000000fc010000000000000000000000000000000004004e2300000a00000000000000ae87a613273128"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000003000000000000000000000001000000000000ff000c001500"/52], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r4, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) 1.480981871s ago: executing program 3 (id=985): r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374", 0x0, 0xfffffffd, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000", 0x2c}], 0x1}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x80080400) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x9a, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2500000011008188040fc7ec59acbc0413a1f848100000005e140602000000000e0013000f", 0x25}], 0x1}, 0x0) lseek(r1, 0x0, 0x0) 1.445016696s ago: executing program 0 (id=986): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x3, 0x3, 0x3, 0x6, 0x2, 0x4, 0x6b, {0x7f, 0x6, "beacfe46fd18176d"}, 0x6, 0x80, 0x1f, 0x1f, 0x1, "ad"}}, 0x1a) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000000c2b52ecfb3f8c5ab2ebcaa4f7e1770ec561280833bdfb41ec9271f8158fdd23ba0389743060f21acf44647d2b325198644406c8ef09ce95697015a51524daf6ad2c05ddca05c1db1218275e5b06ad1cc097cc739f7277be9b1da0d6e08841aa66e6a5b258e586d17f2cfd72cb002b5d880f9d58f84051148523a13c439445490087044e6204119255c40c23cd5c356e1c94bc90c69315fd6a07a89e2baa94e6e2eaec9d72eda0b374340ab70c1e908890a42570fc416ab9", @ANYRES16=r7, @ANYBLOB="010000000000000000001900000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000008000a0006ab7a00080006001300000008001100ff03000000000000060bccb9b1f564bf43741e29201c605f134a1ca571360a0ec947b334db2f4c5c1b90a48a1192f1619eabce451a093fb3d66efeed766d7a9dbca0877b6a8729658fab090d8afcf79fe1a1d6733df2841900"/120], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x80ce, 0x10001, 0xfff, {{0x1f, 0x4, 0x3, 0x15, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0x4, [{@local, 0x1}, {@remote}, {@empty, 0x7f}, {@local, 0x4}, {@loopback}]}, @end, @rr={0x7, 0x27, 0xb4, [@dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, @local, @broadcast, @loopback, @multicast1, @private=0xa010101]}, @generic={0x86, 0x3, '\b'}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0xef, 0x9, 0x184d, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x40, 0x10, 0x1, 0x2}}) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f00000003c0)={@empty, @broadcast, 0x0}, &(0x7f0000000400)=0xc) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r12}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000440)={0x0, @local}, &(0x7f0000000480)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x80, 0x10000, 0x9, {{0x8, 0x4, 0x3, 0x1c, 0x20, 0x65, 0x0, 0x20, 0x4, 0x0, @empty, @remote, {[@generic={0x89, 0xa, "3db162ec0ebc989a"}]}}}}}) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r15, 0x107, 0x1, &(0x7f0000001e40)={r16, 0x3, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30010000", @ANYRES16=r7, @ANYBLOB="000828bd7000fcdbdf25060000000c000180080003000400000018000180140002006d6163767461703000000000000000003000018008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000300f60e15c7140002006e6574706369300000000000000000000c00018008000100", @ANYRES32=r9, @ANYBLOB="2c000180140002006e7230000000000000000000000000001400020070696d726567310000000000000000002c00018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="080003000400000008000100", @ANYRES32=r14, @ANYBLOB="080003000100000064000180080003000100000008000100", @ANYRESOCT=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r16, @ANYBLOB="140002006e690000663000000000000000000000140002f24d460077673d0000000000000000000800000000000000010000000800020003000000ee298e60c9b7701e598ee011d4a9805e96f077a72ed3bdf1e52e00"], 0x130}, 0x1, 0x0, 0x0, 0x200440c8}, 0x4000000) 1.42091639s ago: executing program 1 (id=988): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x248, 0x5802, 0x294, 0x248, 0x294, 0x368, 0x378, 0x378, 0x368, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x248, 0x52020000, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x33, 0x0, [@mcast1, @private1, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @dev, @private0, @remote, @private0, @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @rand_addr=' \x01\x00', @private0]}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "6823a8073abe74485b00370f703dfe28d67dfbb0108a1897279b2d90e4db"}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"7118"}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(r3, &(0x7f0000000140)='./bus\x00', 0x0) 1.310934347s ago: executing program 0 (id=990): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) personality(0x500006) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) brk(0x20ffc004) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010102}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000000000000100100000e"], 0x24, 0x500}}], 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffd) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 1.287964561s ago: executing program 0 (id=991): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x8000400) r3 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000080)='nomand\x00', &(0x7f00000000c0)=':', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") creat(&(0x7f0000000480)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a0000000000001801000020207825000000000040e4114b371e718aafb59579f1072020207b1af8ff00000000bca100000000000047010000f8ffffffb702000008000000b50a00000000000085000000780000009500000000000000f8c49600f4ecbc9bb92c1fc7d32d2dac65c60fba3ff20c3c241ae623e8320cd79ce7b08dc4660d47da509b30377e2c77ad94"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000040)={@local, @multicast1, @multicast1}, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x920) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="4dac800402000000000200"/20, 0x14, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x0, 0x20, 0x0, 0x34a}, &(0x7f0000000100), &(0x7f0000000480)) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010058000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100000008000b40000000003400048030000180080001006e617495f70002800800044000000000080002400000000a080003400000000d08000140000000000900010073797a3000000000140000001100010000000000000000000000000afcd40629516f9fa17d31c4de0b78b465bedc0e681dd0d1682a66c2d81f1d6a564547db"], 0xd0}}, 0x0) 1.013601603s ago: executing program 0 (id=994): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="646f5a772c648b74732c646f6e66732c6769643d0000000000000000", @ANYRESHEX=0x0, @ANYBLOB=',dots,nodots,umask=00000000000000000004263,check=strict,allow_utime=00000000000000000000001,dots,dots,umask=00000000000000000077777,nodots,dots,tz=UTC,nodots,dots,showexec,nodots,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) 865.157956ms ago: executing program 0 (id=996): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5412, &(0x7f0000001200)) 796.473666ms ago: executing program 0 (id=997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f00000002c0), 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 622.731574ms ago: executing program 4 (id=1001): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x3, 0x3, 0x3, 0x6, 0x2, 0x4, 0x6b, {0x7f, 0x6, "beacfe46fd18176d"}, 0x6, 0x80, 0x1f, 0x1f, 0x1, "ad"}}, 0x1a) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000000c2b52ecfb3f8c5ab2ebcaa4f7e1770ec561280833bdfb41ec9271f8158fdd23ba0389743060f21acf44647d2b325198644406c8ef09ce95697015a51524daf6ad2c05ddca05c1db1218275e5b06ad1cc097cc739f7277be9b1da0d6e08841aa66e6a5b258e586d17f2cfd72cb002b5d880f9d58f84051148523a13c439445490087044e6204119255c40c23cd5c356e1c94bc90c69315fd6a07a89e2baa94e6e2eaec9d72eda0b374340ab70c1e908890a42570fc416ab9", @ANYRES16=r7, @ANYBLOB="010000000000000000001900000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000008000a0006ab7a00080006001300000008001100ff03000000000000060bccb9b1f564bf43741e29201c605f134a1ca571360a0ec947b334db2f4c5c1b90a48a1192f1619eabce451a093fb3d66efeed766d7a9dbca0877b6a8729658fab090d8afcf79fe1a1d6733df2841900"/120], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x80ce, 0x10001, 0xfff, {{0x1f, 0x4, 0x3, 0x15, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5, [@empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0x4, [{@local, 0x1}, {@remote}, {@empty, 0x7f}, {@local, 0x4}, {@loopback}]}, @end, @rr={0x7, 0x27, 0xb4, [@dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, @local, @broadcast, @loopback, @multicast1, @private=0xa010101]}, @generic={0x86, 0x3, '\b'}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0xef, 0x9, 0x184d, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x40, 0x10, 0x1, 0x2}}) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f00000003c0)={@empty, @broadcast, 0x0}, &(0x7f0000000400)=0xc) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r12}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000440)={0x0, @local}, &(0x7f0000000480)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x80, 0x10000, 0x9, {{0x8, 0x4, 0x3, 0x1c, 0x20, 0x65, 0x0, 0x20, 0x4, 0x0, @empty, @remote, {[@generic={0x89, 0xa, "3db162ec0ebc989a"}]}}}}}) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r15, 0x107, 0x1, &(0x7f0000001e40)={r16, 0x3, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30010000", @ANYRES16=r7, @ANYBLOB="000828bd7000fcdbdf25060000000c000180080003000400000018000180140002006d6163767461703000000000000000003000018008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000300f60e15c7140002006e6574706369300000000000000000000c00018008000100", @ANYRES32=r9, @ANYBLOB="2c000180140002006e7230000000000000000000000000001400020070696d726567310000000000000000002c00018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="080003000400000008000100", @ANYRES32=r14, @ANYBLOB="080003000100000064000180080003000100000008000100", @ANYRESOCT=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r16, @ANYBLOB="140002006e690000663000000000000000000000140002f24d460077673d0000000000000000000800000000000000010000000800020003000000ee298e60c9b7701e598ee011d4a9805e96f077a72ed3bdf1e52e00"], 0x130}, 0x1, 0x0, 0x0, 0x200440c8}, 0x4000000) 606.116616ms ago: executing program 3 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010000000000005a0000022088d0255c00000000000400000000ac1414bb6738c39a9f8ef71397dc4c6856865f4bc474c2d4d00e6016de8a02f84aaca754b5a8ea3a9ff60b11936e2d25e27b6c727a968ecd6c56d22f62dbbbf49e6aeda7000929cd622087ecc50d18e08a8cdc8bca5cd51c06954daf4e1f9b870cb7e78441ba6ee4c4cab0f2be8ef7b621bcfcabb633bd440c50d71deaddf795c86b02b91fc1fcdbaa6bf00b775f007246fbfe11ba05"], 0x24}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000000), 0x4) 478.791556ms ago: executing program 1 (id=1004): socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$eJzs3UFv2+YZAOBXjtN6HlAM21AUQZqybg8JkDqS3Dowehg0mbbZyqJAykWCHYqicYagTjs0G7B4h66XbjvsJ+zQ6/5E/8Ru+w297zQPpCTHTmzZS1K7CJ5HiPmJfMnv/WiBr6lQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0eiuNputRvSy/tat5Hjd1SLfnLJ8sr3vDk2m9BvRqP7F3Fy8Npr12i8fLX61+rEQl0fPLsdcNZmL3Z+++rP3fzE7M1l/SkJn4sHD3c8+2dnZ/vK8Ezkn62k/K/Nss7OeJlmZJyvLy80bG2tlspb10vJ2OUw3k26RdoZ5kVztXktaKytLSbp4O9/qr692eulk5s132s3mcvLB4iDtFGXev/HBYtndyHq9rL9ex1SLq5ibyW+/KD7Mhskw7Wwmyd17O9tLJyVZBbVOE9Q+KajdbLdbrXa7tfzeyns3m83ZdnMuDs1oPiYOrZI0m7OTF21j/Eo/9b4+4F9PsxI/mJlDz+LP03+zz+vQDc9sZlz/oxdZ9GMrbkVy5KMbq1FEHpvHLB/7LuJPdeNGOrXfg/V/UuVfe7T4UvVjYW787Mpx9f+YXM7u8SAexm58Fp/ETuzEdnx57hmd7WM90uhHFmXkkcVmdOo5yXhOEiuxHMvRjI9jI9aijCTWIotepFHG7ShjGGn9iupGEWl0Yhh5FJHE1ejGtUiiFSuxEkuRRBqLcTvy2Ip+rMdqdOqt3I179X5fmpLjflDrNEHtKUGTYv7S+HU5+8QfBNPr/839+v+Puj48ePsMihM/Dhcmjed7AIdnsDep/7G399+9ynlnBAAAADxvjfrd98aVl/afr2W99DfnnBUAAADwPNWXIV+uJher1uvRqM7/m+edFgAAAPAcNeLK+F2A+Xhj1Jp8EsqbAAAAAPCCqP///0o1ma9ab0TD+T8AAAC8aP766B77u3HkPXbLwUxEzEZE4+vBrbcb9ztVXOf+hdF6Fx7f4nDtUuOV8UbqyfLs+Fk3vdwY3/1y/yaY348nd0+613+jKC4+awIRM+OYN++Mpnf2l9S9zK9lvXSxm/feb0Wn88rMML01/MPn9/4YUfX+t/7mK424e29ne/HTL3bu1Ll8XW3l6/vju7k3/o9cfh+vj2JefzmeGPFuNC7WH8QY9zs/6rd5cPzjsUyG9JNT9PnNJGZhfjSdPzz+uarP1uJxo59vvDxe/5lG/s0k+K2rb40mR2TRnpJFvS/aB/f/Y/viVFnEWydnsXRSFkvPmAXAebm7X4UO192L+/X/ibr7FEe5s6nu38TVUczVS/WBdfbSEUf05pFH9L0Lj9XYp69u/4xro5hrk+Djamw15r/v99uq+/22WuHbY/ste5Mdcv93cWPm4e479+rY7c/b7aXl5rvN5nvtuFgPYzypMv2P2gPAYQv19f/TvmPn6IgLES9Nave78eYo4tFZdVWT9ivez/cvKViMT+OL2Ik7cb3+tEF9xcGR/c4fuAzheiyMkz36rHX+wDe8XD/hrG4UO/nb5TSxo6+XAYAXycIJdXi//k++i28SUZfQUf2/fuC8e+6I8+7DtXz62fHBWg4A/DDS4vvG/PAvjaLIBh+3VlZaneFGmhR598OkyFbX0yTrD9Oiu9Hpr6fJoMiHeTfvVY2PstW0TMqtwSAvhslaXiSDvMxu/SqyXpqMv/q9TDc7/WHWLQe9tFOmSTfvDzvdYbKald1ksPXrXlZ+tbe3V61cDtJutpZ1O8Ms7ydlvlV008UkKdN0HLiRFkm2mvaH2VpWNfvJoMhejuJ28lHe29pMk9W07BbZYJgXdTaTvrL+Wl5s1ptdPO+dDQA/Eg8e7n72yc7O9pdHN+bi2EV149/TVx81znuMAMBh06r0E1efAQAAAAAAAAAAAAAA5+KEz/89faPx2JyZiPih+nrhGntfnUlfkw94+O082fj2wJzkR5DPmTfO+cAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEf4XwAAAP//pPJP3Q==") (async) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="00000000c0000000ffff0000000b00209500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xd0, &(0x7f00000003c0)=""/208}, 0x21) 456.102769ms ago: executing program 4 (id=1005): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4c, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xd, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 378.004601ms ago: executing program 2 (id=1007): socketpair(0x27, 0x1, 0xba, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x6cc, 0x6b9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet(0x2, 0x0, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x1) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @private}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 0x200, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='vlan1\x00', 0x3, 0x8, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039040000001b2ebaf8a9114d5b00", @ANYRES32=r9, @ANYBLOB="00000000000000001800128008000100677265000c00028008000100", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010080200"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800128008000100677265000c00028008000600e0000002"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) 337.821798ms ago: executing program 1 (id=1008): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000007000000f015b71300000000364000000700000095000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x84}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001c40), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, 0xfffffffffffffffc) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665002000000c000580050019"], 0x4c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local, 0x3}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7, 0xffffff7d}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="09d9eaf0267ae7216e281050047785c8a520ccde94d58d42a40073d88649a7520d055b3264bd8cca4f6e633308094ac1d87fc6956d8b7e109ed97004a6ee26546a9f6675a9ddfea296ceaf076a4c2877da310b794509a854688273bfad0dc711c09d25bb4727404d6ba2ce30e3b464d774", @ANYRES64=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 336.767647ms ago: executing program 4 (id=1009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000100)=[{}], 0x1, 0x9d) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004380)=[{&(0x7f00000031c0)="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", 0x6c1}], 0x1}}], 0x2, 0x0) 224.696575ms ago: executing program 2 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000780)=ANY=[], 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x1, 0x10000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x422f, 0x22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f00000002c0)=""/108}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900), 0x88}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000640)}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000deffffff85000000bf0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000700)={@dev, 0x0}, &(0x7f0000000740)=0x14) r4 = fsopen(&(0x7f0000001680)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000080)='MS{O', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x88}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r4) close(r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf2508000000300002802c000380100001800800010007000000040003000800018004000300100001800800020047504c00040003008c00018014000200766c616e3100000000000000000000001400020074756e6c3000000000000000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140001c3", @ANYRES32=r3, @ANYBLOB="1400020073797a6b616c6c6572310000000000001400020076657468305f746f5f68737200000000140002006e657464657673696d30000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x24000010}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x4, 0x422f, 0x22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000280), &(0x7f00000002c0)=""/108}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000480)={r0, 0x7, 0x3f, 0xc0000000000}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x422f, 0x22}, 0x48) 181.685611ms ago: executing program 2 (id=1011): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e10fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="380000001900010000000000000000000a000000000000000036000008001e00df"], 0x38}, 0x1, 0x0, 0x0, 0x4048007}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x40, 0x8, 0x0, 0x21e, 0x10001, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x4f8}, 0x108208, 0x5, 0x1, 0x5, 0x7, 0x6b86, 0x400, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, r1, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='\x00') sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 168.615444ms ago: executing program 2 (id=1012): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000780)=ANY=[], 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x1, 0x10000000000000, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x8848, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 149.549967ms ago: executing program 4 (id=1013): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$isdn(0x22, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_io_uring_setup(0x68c4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000002c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) getpgid(0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r5, 0x1, 0x0, 0x0, {0x2}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14}, {0x14, 0x2}]}]}]}]}, 0x54}}, 0x0) 87.509336ms ago: executing program 4 (id=1014): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002100)=""/105, 0x69) r0 = getuid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @loopback}, 0x0) r3 = socket(0x1d, 0x80000, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) inotify_init() lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r2, r4, 0x0, 0x10000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 86.678916ms ago: executing program 2 (id=1015): io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x8}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)={0x0, 0x6, [@random="e4522a52f929", @remote, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @empty]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) personality(0x400000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3622bb55fa097e6d) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 33.900354ms ago: executing program 4 (id=1016): r0 = syz_io_uring_setup(0x2047e5, &(0x7f0000000000)={0x0, 0x9850, 0x200, 0x1, 0x268}, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_setup(0x17c1, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x2, 0x0, 0x29e, 0x0, r0}) socket(0x29, 0x1, 0x1) (async) socket(0x29, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) gettid() (async) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000c000780060005404e2400000500040000b6ad7107000100060000001400078008000640000000000800134000000000050005000a00000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000c000780060005404e2400000500040000b6ad7107000100060000001400078008000640000000000800134000000000050005000a00000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='afs_protocol_error\x00', r3}, 0xffffffc1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='afs_protocol_error\x00', r3}, 0xffffffc1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) mknod(&(0x7f0000000600)='./file0\x00', 0xc000, 0x200) (async) mknod(&(0x7f0000000600)='./file0\x00', 0xc000, 0x200) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1, 0x66b, &(0x7f0000000900)="$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") io_setup(0x206, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000380), 0x4880) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000280)="b9f8514d9235e978bdcc82cbf9effbc72c871f306fa519f7f3754ad10ee2ed74e86b2a9b1359ea64ea", &(0x7f00000004c0)=""/140, 0x0, &(0x7f0000000500), 0xe38, r5}, 0x38) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x13, 0x0, 0x0, 0x1ffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="01000000000000000000010000001400020077673200000000000000000000000000340008803000008024000100975c9d81c983c8205a2ea12a99530d685ed3f287df9ee781254b899f8ed925ae9f0923c23c62f53c"], 0x5c}, 0x1, 0x0, 0x0, 0x895}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r6, 0x0) (async) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r6, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 0s ago: executing program 2 (id=1017): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{0x45, 0x0, 0x1}, {0x15, 0x0, 0x1, 0x40000}, {0x0, 0x4}, {0x6}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x413, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x95}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0189436, &(0x7f0000000040)) dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x100, 0x0) getdents64(r0, &(0x7f0000000380)=""/101, 0x65) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000308010200000000000000000000000006a4444000000000140004800800024000000007f1ff0140000000050500030001000000"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan1\x00'}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2196, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1842446ee8e065ea0000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000400000850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000036da71e0b702150095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcb}, 0x48) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000039000100000000000000000003000000080002"], 0x1c}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): =rawip_socket permissive=1 [ 49.701928][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.721420][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.731422][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.742051][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.767643][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.769345][ T4853] loop0: detected capacity change from 0 to 1024 [ 49.776313][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.791665][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.801518][ T4704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.812044][ T4704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.830666][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.845706][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.853399][ T4853] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.860522][ T4704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.872405][ T4704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.881121][ T4704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.889942][ T4704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.900888][ T4853] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.915588][ T4853] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.933096][ T4860] tipc: Enabling of bearer rejected, failed to enable media [ 49.950492][ T4853] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.404: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.982227][ T4853] EXT4-fs (loop0): 1 orphan inode deleted [ 49.989237][ T4853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.004611][ T29] audit: type=1400 audit(1719343127.825:4647): avc: denied { bind } for pid=4862 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.025290][ T4867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'. [ 50.052734][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 50.078898][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.103687][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 18: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.127002][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.149495][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.153287][ T4878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'. [ 50.188590][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 21: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.201943][ T4878] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=4878 comm=syz.1.412 [ 50.219373][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 22: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.247683][ T4853] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 23: comm syz.0.404: path /root/syzkaller.b2AMST/93/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 50.289772][ T4887] loop1: detected capacity change from 0 to 764 [ 50.296520][ T3076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.307262][ T29] audit: type=1400 audit(1719343128.125:4648): avc: denied { mount } for pid=4886 comm="syz.1.415" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.313311][ T4887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'. [ 50.361473][ T4891] loop4: detected capacity change from 0 to 512 [ 50.363647][ T29] audit: type=1400 audit(1719343128.175:4649): avc: denied { unmount } for pid=3074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.399513][ T4891] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 50.406047][ T4891] EXT4-fs (loop4): mount failed [ 50.425750][ T4899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4899 comm=syz.1.418 [ 50.465759][ T4901] loop4: detected capacity change from 0 to 256 [ 50.501035][ T29] audit: type=1326 audit(1719343128.315:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 50.528115][ T29] audit: type=1326 audit(1719343128.345:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 50.551650][ T29] audit: type=1326 audit(1719343128.345:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 50.575224][ T29] audit: type=1326 audit(1719343128.345:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.1.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 50.651947][ T4905] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.659791][ T4905] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 50.671240][ T29] audit: type=1400 audit(1719343128.465:4654): avc: denied { write } for pid=4896 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 50.738092][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 50.949930][ T4913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 50.989387][ T4917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.425'. [ 51.003554][ T4917] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=4917 comm=syz.2.425 [ 51.032111][ T4919] loop3: detected capacity change from 0 to 2048 [ 51.619164][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 51.812681][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 51.852612][ T4962] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=4962 comm=syz.4.438 [ 51.865777][ T4962] process 'syz.4.438' launched '/dev/fd/10' with NULL argv: empty string added [ 51.895602][ T4966] loop4: detected capacity change from 0 to 512 [ 51.902801][ T4966] EXT4-fs: Ignoring removed bh option [ 51.908606][ T4966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.920702][ T4966] EXT4-fs (loop4): 1 orphan inode deleted [ 51.926512][ T4966] EXT4-fs (loop4): 1 truncate cleaned up [ 51.932743][ T4966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.949868][ T4970] loop2: detected capacity change from 0 to 1024 [ 51.950637][ T4966] EXT4-fs error (device loop4): ext4_check_all_de:655: inode #12: block 7: comm syz.4.439: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 51.958257][ T4970] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (47082!=20869) [ 51.976281][ T4966] EXT4-fs (loop4): Remounting filesystem read-only [ 51.984713][ T4970] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.001902][ T4970] JBD2: no valid journal superblock found [ 52.007686][ T4970] EXT4-fs (loop2): Could not load journal inode [ 52.030452][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.072393][ T4972] Unsupported ieee802154 address type: 0 [ 52.079938][ T4972] program syz.2.442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.089308][ T4974] 9pnet_fd: Insufficient options for proto=fd [ 52.141630][ T4984] netlink: 'syz.4.447': attribute type 3 has an invalid length. [ 52.165767][ T4986] loop4: detected capacity change from 0 to 512 [ 52.172402][ T4986] devtmpfs: Unknown parameter 'errors' [ 52.172648][ T4988] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=4988 comm=syz.2.449 [ 52.501753][ T5019] loop0: detected capacity change from 0 to 2048 [ 52.511223][ T5021] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=5021 comm=syz.2.461 [ 52.619158][ T5046] loop2: detected capacity change from 0 to 128 [ 52.654414][ T5053] loop1: detected capacity change from 0 to 256 [ 52.662949][ T5053] FAT-fs (loop1): Unrecognized mount option "doZw" or missing value [ 52.710645][ T5063] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=5063 comm=syz.0.475 [ 52.725675][ T5065] loop2: detected capacity change from 0 to 512 [ 52.764964][ T5073] loop0: detected capacity change from 0 to 1024 [ 52.780884][ T5073] ext4: Unknown parameter 'obj_role' [ 52.785637][ T5076] loop3: detected capacity change from 0 to 128 [ 52.800120][ T5076] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.813261][ T5076] ext4 filesystem being mounted at /root/syzkaller.qTfIoe/8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.857518][ T4704] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.884670][ T5087] xt_ecn: cannot match TCP bits for non-tcp packets [ 52.949385][ T5093] program syz.1.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.004847][ T5097] loop2: detected capacity change from 0 to 256 [ 53.012755][ T5097] FAT-fs (loop2): Unrecognized mount option "doZw" or missing value [ 53.041369][ T5105] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3 sclass=netlink_xfrm_socket pid=5105 comm=syz.1.490 [ 53.373899][ T5124] loop2: detected capacity change from 0 to 512 [ 53.386889][ T5124] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.495: casefold flag without casefold feature [ 53.399665][ T5124] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.495: couldn't read orphan inode 15 (err -117) [ 53.414097][ T5124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.520289][ T3931] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.550223][ T5147] loop1: detected capacity change from 0 to 1024 [ 53.567226][ T5147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.608181][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.854633][ T5178] loop3: detected capacity change from 0 to 256 [ 53.882711][ T4704] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 53.890329][ T4704] FAT-fs (loop3): Filesystem has been set read-only [ 53.900906][ T4704] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 53.917674][ T5186] ipip0: entered promiscuous mode [ 53.972695][ T5190] loop0: detected capacity change from 0 to 1024 [ 53.984084][ T5190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.038630][ T3076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.107254][ T5214] loop0: detected capacity change from 0 to 256 [ 54.122947][ T5206] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 54.188921][ T5206] loop1: detected capacity change from 0 to 512 [ 54.287023][ T5222] bond0: (slave bond_slave_0): Releasing backup interface [ 54.462417][ T5230] Driver unsupported XDP return value 0 on prog (id 120) dev N/A, expect packet loss! [ 54.529259][ T5242] __nla_validate_parse: 52 callbacks suppressed [ 54.529275][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 54.576094][ T5248] loop0: detected capacity change from 0 to 256 [ 54.596895][ T3076] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 54.604439][ T3076] FAT-fs (loop0): Filesystem has been set read-only [ 54.611201][ T3076] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 54.724653][ T5257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.542'. [ 54.862482][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.929211][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.979222][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.997449][ T5271] loop2: detected capacity change from 0 to 1024 [ 55.020462][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.038023][ T5271] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 55.138365][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 55.198025][ T28] bond0 (unregistering): Released all slaves [ 55.216123][ T4466] kernel write not supported for file bpf-prog (pid: 4466 comm: kworker/1:8) [ 55.227737][ T28] tipc: Left network mode [ 55.238080][ T5262] chnl_net:caif_netlink_parms(): no params data found [ 55.273998][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.281205][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.288547][ T5262] bridge_slave_0: entered allmulticast mode [ 55.294866][ T5262] bridge_slave_0: entered promiscuous mode [ 55.302081][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.309252][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.322119][ T5262] bridge_slave_1: entered allmulticast mode [ 55.328912][ T5262] bridge_slave_1: entered promiscuous mode [ 55.338258][ T28] hsr_slave_0: left promiscuous mode [ 55.344041][ T28] hsr_slave_1: left promiscuous mode [ 55.345339][ T5301] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 55.362435][ T28] veth1_macvtap: left promiscuous mode [ 55.368104][ T28] veth0_macvtap: left promiscuous mode [ 55.373836][ T28] veth1_vlan: left promiscuous mode [ 55.379134][ T28] veth0_vlan: left promiscuous mode [ 55.483484][ T5296] ipip0: entered promiscuous mode [ 55.493686][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 55.521174][ T5262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.540763][ T5262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.560284][ T5262] team0: Port device team_slave_0 added [ 55.566931][ T5262] team0: Port device team_slave_1 added [ 55.582053][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.589106][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.615391][ T5262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.627596][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.634754][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.660864][ T5262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.687159][ T5262] hsr_slave_0: entered promiscuous mode [ 55.693254][ T5262] hsr_slave_1: entered promiscuous mode [ 55.694248][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 55.707860][ T5262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.715434][ T5262] Cannot create hsr debugfs directory [ 55.738226][ T5321] loop2: detected capacity change from 0 to 256 [ 55.745863][ T5321] FAT-fs (loop2): Unrecognized mount option "doZw" or missing value [ 55.807992][ T5321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'. [ 55.945080][ T50] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 55.957489][ T5334] bond_slave_0: entered promiscuous mode [ 55.963168][ T5334] bond_slave_1: entered promiscuous mode [ 55.969149][ T5333] bond_slave_0: left promiscuous mode [ 55.974652][ T5333] bond_slave_1: left promiscuous mode [ 56.009811][ T5262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.018974][ T5262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.027587][ T5262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.036418][ T5262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.079782][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.089574][ T5345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.567'. [ 56.106091][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.116417][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.123526][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.134436][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.141663][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.152646][ T5350] netlink: 5 bytes leftover after parsing attributes in process `syz.2.569'. [ 56.213887][ T5262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.247595][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 56.299210][ T5262] veth0_vlan: entered promiscuous mode [ 56.307738][ T5262] veth1_vlan: entered promiscuous mode [ 56.323191][ T5262] veth0_macvtap: entered promiscuous mode [ 56.331458][ T5262] veth1_macvtap: entered promiscuous mode [ 56.342937][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.353410][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.363366][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.373787][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.383587][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.394510][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.405650][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.416524][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.427143][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.437152][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.447672][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.457605][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.468051][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.479194][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.488294][ T5372] all: renamed from bridge_slave_0 (while UP) [ 56.500089][ T5262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.508880][ T5262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.517734][ T5262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.526586][ T5262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.545427][ T5372] netlink: 'syz.1.573': attribute type 29 has an invalid length. [ 56.554614][ T5372] netlink: 'syz.1.573': attribute type 29 has an invalid length. [ 56.603595][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 56.603609][ T29] audit: type=1400 audit(1719343134.415:4780): avc: denied { ioctl } for pid=5375 comm="syz.0.545" path="socket:[11719]" dev="sockfs" ino=11719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.637154][ T5378] loop0: detected capacity change from 0 to 512 [ 56.650489][ T5378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.663476][ T5378] ext4 filesystem being mounted at /root/syzkaller.tObF5n/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.682623][ T5262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.722260][ T53] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 56.734904][ T5383] bond_slave_1: entered promiscuous mode [ 56.741999][ T5382] bond_slave_1: left promiscuous mode [ 56.748157][ T5389] netlink: 'syz.0.576': attribute type 8 has an invalid length. [ 56.775888][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.840738][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.880934][ T29] audit: type=1400 audit(1719343134.695:4781): avc: denied { execmem } for pid=5394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.978691][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.068694][ T5411] loop0: detected capacity change from 0 to 8192 [ 57.076148][ T5411] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 57.261770][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.325667][ T5426] loop0: detected capacity change from 0 to 128 [ 57.417428][ T5426] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.439320][ T5426] ext4 filesystem being mounted at /root/syzkaller.tObF5n/6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.439919][ T28] bridge_slave_1: left allmulticast mode [ 57.457098][ T28] bridge_slave_1: left promiscuous mode [ 57.462783][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.497787][ T28] bridge_slave_0: left allmulticast mode [ 57.503444][ T28] bridge_slave_0: left promiscuous mode [ 57.509170][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.598384][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.607571][ T5262] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.617080][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.627735][ T28] bond0 (unregistering): Released all slaves [ 57.661713][ T5437] loop0: detected capacity change from 0 to 1024 [ 57.662973][ T5435] loop1: detected capacity change from 0 to 2048 [ 57.687473][ T5437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0102] [ 57.695747][ T5437] System zones: 0-1, 3-12 [ 57.701676][ T5435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.703600][ T5437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.727728][ T28] hsr_slave_0: left promiscuous mode [ 57.733206][ T5437] EXT4-fs error (device loop0): __ext4_remount:6503: comm syz.0.588: Abort forced by user [ 57.743412][ T5437] EXT4-fs (loop0): Remounting filesystem read-only [ 57.743858][ T28] hsr_slave_1: left promiscuous mode [ 57.755816][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.763242][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.771347][ T5262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.782898][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.790423][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.801029][ T28] veth1_macvtap: left promiscuous mode [ 57.806721][ T28] veth0_macvtap: left promiscuous mode [ 57.812289][ T28] veth1_vlan: left promiscuous mode [ 57.817560][ T28] veth0_vlan: left promiscuous mode [ 57.883868][ T29] audit: type=1326 audit(1719343135.695:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 57.907462][ T29] audit: type=1326 audit(1719343135.695:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 57.932952][ T28] team0 (unregistering): Port device team_slave_1 removed [ 57.937891][ T29] audit: type=1326 audit(1719343135.755:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 57.963460][ T29] audit: type=1326 audit(1719343135.755:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 57.986793][ T29] audit: type=1326 audit(1719343135.755:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 58.010603][ T29] audit: type=1326 audit(1719343135.755:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 58.034058][ T29] audit: type=1326 audit(1719343135.755:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 58.057656][ T29] audit: type=1326 audit(1719343135.755:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5447 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56efbf2d39 code=0x7ffc0000 [ 58.083078][ T28] team0 (unregistering): Port device team_slave_0 removed [ 58.139293][ T5449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 58.165142][ T5403] chnl_net:caif_netlink_parms(): no params data found [ 58.179066][ T5418] chnl_net:caif_netlink_parms(): no params data found [ 58.212658][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.235131][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.242297][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.249608][ T5403] bridge_slave_0: entered allmulticast mode [ 58.256249][ T5403] bridge_slave_0: entered promiscuous mode [ 58.263223][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.270361][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.277760][ T5403] bridge_slave_1: entered allmulticast mode [ 58.284139][ T5403] bridge_slave_1: entered promiscuous mode [ 58.298967][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.306062][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.313254][ T5418] bridge_slave_0: entered allmulticast mode [ 58.319688][ T5418] bridge_slave_0: entered promiscuous mode [ 58.332070][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.339170][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.346477][ T5418] bridge_slave_1: entered allmulticast mode [ 58.352881][ T5418] bridge_slave_1: entered promiscuous mode [ 58.365785][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.373338][ T5466] loop1: detected capacity change from 0 to 512 [ 58.376225][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.397459][ T5466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.410089][ T5466] ext4 filesystem being mounted at /root/syzkaller.7ih1Ci/136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.423389][ T5466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.424514][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.447698][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.463322][ T5403] team0: Port device team_slave_0 added [ 58.470223][ T5403] team0: Port device team_slave_1 added [ 58.489381][ T5418] team0: Port device team_slave_0 added [ 58.506582][ T5418] team0: Port device team_slave_1 added [ 58.517670][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.524637][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.550755][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.563875][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.570873][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.575121][ T5479] loop1: detected capacity change from 0 to 512 [ 58.596787][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.614551][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.621590][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.631455][ T5479] EXT4-fs (loop1): Unsupported encryption level 9 [ 58.647499][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.668061][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.675075][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.701162][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.734821][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.771480][ T5487] sg_write: data in/out 2004049728/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 58.771480][ T5487] program syz.1.600 not setting count and/or reply_len properly [ 58.804251][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.830337][ T5403] hsr_slave_0: entered promiscuous mode [ 58.836718][ T5403] hsr_slave_1: entered promiscuous mode [ 58.844790][ T5418] hsr_slave_0: entered promiscuous mode [ 58.850909][ T5418] hsr_slave_1: entered promiscuous mode [ 58.857196][ T5418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.864752][ T5418] Cannot create hsr debugfs directory [ 58.893195][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.914168][ T5507] capability: warning: `syz.0.605' uses 32-bit capabilities (legacy support in use) [ 58.923798][ T5507] program syz.0.605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.992126][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.063168][ T28] bridge_slave_1: left allmulticast mode [ 59.069015][ T28] bridge_slave_1: left promiscuous mode [ 59.074720][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.087242][ T28] bridge_slave_0: left allmulticast mode [ 59.092906][ T28] bridge_slave_0: left promiscuous mode [ 59.098637][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.099085][ T5512] loop4: detected capacity change from 0 to 164 [ 59.120869][ T5512] Unsupported NM flag settings (8) [ 59.188364][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.198589][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.208600][ T28] bond0 (unregistering): Released all slaves [ 59.358858][ T28] hsr_slave_0: left promiscuous mode [ 59.364657][ T28] hsr_slave_1: left promiscuous mode [ 59.365723][ T5527] loop4: detected capacity change from 0 to 2048 [ 59.376631][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.384081][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.391688][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.399258][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.401815][ T5527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.421439][ T28] veth1_macvtap: left promiscuous mode [ 59.427195][ T28] veth0_macvtap: left promiscuous mode [ 59.432709][ T28] veth1_vlan: left promiscuous mode [ 59.438075][ T28] veth0_vlan: left promiscuous mode [ 59.558811][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.759931][ T5532] chnl_net:caif_netlink_parms(): no params data found [ 59.793176][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.801567][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.808912][ T5532] bridge_slave_0: entered allmulticast mode [ 59.815573][ T5532] bridge_slave_0: entered promiscuous mode [ 59.823259][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.830872][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.838154][ T5532] bridge_slave_1: entered allmulticast mode [ 59.844791][ T5532] bridge_slave_1: entered promiscuous mode [ 59.862870][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.873939][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.894411][ T5532] team0: Port device team_slave_0 added [ 59.902782][ T5532] team0: Port device team_slave_1 added [ 59.924297][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.931402][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.957332][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.970836][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.977833][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.004116][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.018243][ T5418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.045808][ T5418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.057030][ T5418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.070526][ T5418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.092463][ T5550] loop0: detected capacity change from 0 to 8192 [ 60.093010][ T5532] hsr_slave_0: entered promiscuous mode [ 60.101320][ T5550] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.115616][ T5532] hsr_slave_1: entered promiscuous mode [ 60.122220][ T5532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.129875][ T5550] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1042) [ 60.138578][ T5550] FAT-fs (loop0): Filesystem has been set read-only [ 60.145222][ T5532] Cannot create hsr debugfs directory [ 60.160845][ T5403] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.184670][ T5403] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.195704][ T5403] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.210964][ T5403] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.290102][ T28] batman_adv: batadv1: Removing interface: netdevsim0 [ 60.301225][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.321526][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.329817][ T5418] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.340703][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.347751][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.363040][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.370553][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.391392][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.400793][ T28] bridge_slave_1: left allmulticast mode [ 60.406470][ T28] bridge_slave_1: left promiscuous mode [ 60.412095][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.419785][ T28] bridge_slave_0: left allmulticast mode [ 60.425404][ T28] bridge_slave_0: left promiscuous mode [ 60.431112][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.548930][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.558219][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.567472][ T28] bond0 (unregistering): Released all slaves [ 60.586780][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.593849][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.602661][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.609714][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.634348][ T5403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.681098][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.697711][ T28] hsr_slave_0: left promiscuous mode [ 60.703406][ T28] hsr_slave_1: left promiscuous mode [ 60.709571][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.717292][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.780197][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.831941][ T5418] veth0_vlan: entered promiscuous mode [ 60.840374][ T5418] veth1_vlan: entered promiscuous mode [ 60.854494][ T5418] veth0_macvtap: entered promiscuous mode [ 60.862361][ T5418] veth1_macvtap: entered promiscuous mode [ 60.875724][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.886222][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.896082][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.906518][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.917333][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.931597][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.942064][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.951911][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.962436][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.973943][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.982184][ T5403] veth0_vlan: entered promiscuous mode [ 60.993351][ T5418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.002303][ T5418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.011362][ T5418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.020516][ T5418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.034287][ T5403] veth1_vlan: entered promiscuous mode [ 61.063631][ T5532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.084497][ T5403] veth0_macvtap: entered promiscuous mode [ 61.091786][ T5532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.101275][ T5403] veth1_macvtap: entered promiscuous mode [ 61.110539][ T5532] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.119956][ T5532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.139060][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.149569][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.159468][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.169958][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.179855][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.190424][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.202345][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.210970][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.221742][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.231729][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.242203][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.252048][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.262475][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.274343][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.289169][ T5403] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.298005][ T5403] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.306768][ T5403] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.315456][ T5403] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.331361][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 61.340757][ T5595] loop1: detected capacity change from 0 to 512 [ 61.368770][ T5595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.382020][ T5595] ext4 filesystem being mounted at /root/syzkaller.7ih1Ci/149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.384706][ T5604] dummy0: entered promiscuous mode [ 61.431337][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 61.468989][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 61.483564][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.514459][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 61.518913][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.539954][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.566191][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.573272][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.603748][ T4502] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.611089][ T4502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.619855][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 61.619868][ T29] audit: type=1326 audit(1719343139.415:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.640558][ T5623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'. [ 61.649722][ T29] audit: type=1326 audit(1719343139.415:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.684752][ T29] audit: type=1326 audit(1719343139.415:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.708510][ T29] audit: type=1326 audit(1719343139.415:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.731969][ T29] audit: type=1326 audit(1719343139.415:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.756557][ T29] audit: type=1326 audit(1719343139.425:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.780593][ T29] audit: type=1326 audit(1719343139.425:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.805648][ T29] audit: type=1326 audit(1719343139.425:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.829144][ T29] audit: type=1326 audit(1719343139.425:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.854076][ T29] audit: type=1326 audit(1719343139.425:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5619 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 61.993316][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.058306][ T5643] loop1: detected capacity change from 0 to 1024 [ 62.159134][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.262067][ T5532] veth0_vlan: entered promiscuous mode [ 62.291872][ T5532] veth1_vlan: entered promiscuous mode [ 62.417877][ T5667] loop2: detected capacity change from 0 to 256 [ 62.430050][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.443847][ T5532] veth0_macvtap: entered promiscuous mode [ 62.464192][ T5667] FAT-fs (loop2): Unrecognized mount option "doZw" or missing value [ 62.485886][ T5532] veth1_macvtap: entered promiscuous mode [ 62.504540][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.515818][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.525778][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.536371][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.547175][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.558002][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.567891][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.578344][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.589319][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.598648][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.609312][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.619467][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.631019][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.641818][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.652559][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.662402][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.672953][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.684537][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.698232][ T5532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.707049][ T5532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.715794][ T5532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.724635][ T5532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.741705][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 62.751929][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 62.861769][ T5694] all: renamed from bridge_slave_0 (while UP) [ 62.943514][ T5694] netlink: 'syz.4.614': attribute type 29 has an invalid length. [ 62.956866][ T5694] netlink: 'syz.4.614': attribute type 29 has an invalid length. [ 63.075761][ T5726] netlink: 'syz.0.642': attribute type 13 has an invalid length. [ 63.083784][ T5726] netlink: 152 bytes leftover after parsing attributes in process `syz.0.642'. [ 63.109429][ T5726] erspan0: refused to change device tx_queue_len [ 63.115824][ T5726] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 63.252804][ T5726] loop0: detected capacity change from 0 to 2048 [ 63.316768][ T5726] loop0: p1 < > p4 [ 63.327452][ T5726] loop0: p4 size 8388608 extends beyond EOD, truncated [ 63.407093][ T5726] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 63.421397][ T5735] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 63.439853][ T5735] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 63.449076][ T5735] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 63.467363][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 64.045292][ T5800] loop4: detected capacity change from 0 to 512 [ 64.084206][ T5802] loop3: detected capacity change from 0 to 1024 [ 64.099739][ T5800] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.101149][ T5802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.107716][ T5800] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 64.134030][ T5818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'. [ 64.145026][ T5812] loop0: detected capacity change from 0 to 256 [ 64.163740][ T5800] System zones: 0-1, 15-15, 18-18, 34-34 [ 64.176182][ T5800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.182608][ T5800] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 64.197221][ T5800] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 64.204833][ T5800] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.647: bg 0: block 40: padding at end of block bitmap is not set [ 64.219259][ T5800] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 64.225725][ T5825] program syz.2.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.228535][ T5800] EXT4-fs (loop4): 1 truncate cleaned up [ 64.243245][ T5800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.262864][ T5800] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.647: corrupted xattr block 19: bad e_name length [ 64.276467][ T5800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 64.285547][ T5800] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.647: corrupted xattr block 19: bad e_name length [ 64.300031][ T5800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 64.309916][ T5800] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.647: corrupted xattr block 19: bad e_name length [ 64.324572][ T5800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 64.364090][ T5532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.433906][ T5839] loop4: detected capacity change from 0 to 512 [ 64.442644][ T5839] ext4: Unknown parameter 'dont_measure' [ 64.494908][ T5845] loop0: detected capacity change from 0 to 2048 [ 64.503989][ T5845] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 64.513926][ T5845] EXT4-fs (loop0): group descriptors corrupted! [ 64.618795][ T5849] gretap0: entered promiscuous mode [ 64.637450][ T5849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.660883][ T5849] 0ªX¹¦D: renamed from gretap0 [ 64.667454][ T5849] 0ªX¹¦D: left promiscuous mode [ 64.672455][ T5849] 0ªX¹¦D: entered allmulticast mode [ 64.686176][ T5849] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 64.733897][ T5855] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 64.892064][ T5403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.945797][ T5869] all: renamed from bridge_slave_0 (while UP) [ 64.962196][ T5869] netlink: 'syz.3.661': attribute type 29 has an invalid length. [ 64.973355][ T5869] netlink: 'syz.3.661': attribute type 29 has an invalid length. [ 64.979902][ T5871] loop2: detected capacity change from 0 to 256 [ 64.995870][ T5871] FAT-fs (loop2): Directory bread(block 64) failed [ 65.002591][ T5871] FAT-fs (loop2): Directory bread(block 65) failed [ 65.009249][ T5871] FAT-fs (loop2): Directory bread(block 66) failed [ 65.016124][ T5871] FAT-fs (loop2): Directory bread(block 67) failed [ 65.022845][ T5871] FAT-fs (loop2): Directory bread(block 68) failed [ 65.029692][ T5871] FAT-fs (loop2): Directory bread(block 69) failed [ 65.037720][ T5871] FAT-fs (loop2): Directory bread(block 70) failed [ 65.044272][ T5871] FAT-fs (loop2): Directory bread(block 71) failed [ 65.050991][ T5871] FAT-fs (loop2): Directory bread(block 72) failed [ 65.057519][ T5871] FAT-fs (loop2): Directory bread(block 73) failed [ 65.075447][ T5873] loop0: detected capacity change from 0 to 256 [ 65.191801][ T5783] bio_check_eod: 15 callbacks suppressed [ 65.191816][ T5783] kworker/u8:16: attempt to access beyond end of device [ 65.191816][ T5783] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 65.219911][ T5880] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 65.507773][ T5783] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 65.527370][ T5902] bond_slave_0: entered promiscuous mode [ 65.533322][ T5902] bond_slave_1: entered promiscuous mode [ 65.542739][ T5901] bond_slave_0: left promiscuous mode [ 65.548160][ T5901] bond_slave_1: left promiscuous mode [ 65.655870][ T5914] netlink: 'syz.2.679': attribute type 49 has an invalid length. [ 65.664008][ T5914] netlink: 'syz.2.679': attribute type 49 has an invalid length. [ 65.712356][ T5917] loop2: detected capacity change from 0 to 8192 [ 65.720489][ T5917] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.735296][ T5917] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1042) [ 65.743960][ T5917] FAT-fs (loop2): Filesystem has been set read-only [ 65.861436][ T5925] loop2: detected capacity change from 0 to 2048 [ 65.907878][ T5925] Alternate GPT is invalid, using primary GPT. [ 65.914168][ T5925] loop2: p1 p2 p3 [ 66.092607][ T5927] loop1: detected capacity change from 0 to 512 [ 66.115202][ T5927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.129074][ T5927] ext4 filesystem being mounted at /root/syzkaller.7ih1Ci/158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.148345][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.320350][ T5946] loop4: detected capacity change from 0 to 512 [ 66.329413][ T5946] EXT4-fs: Ignoring removed i_version option [ 66.336153][ T5783] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 66.350383][ T5942] bond_slave_0: entered promiscuous mode [ 66.356076][ T5942] bond_slave_1: entered promiscuous mode [ 66.362702][ T5946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102] [ 66.375303][ T5951] netlink: 'syz.1.690': attribute type 13 has an invalid length. [ 66.383075][ T5951] __nla_validate_parse: 9 callbacks suppressed [ 66.383089][ T5951] netlink: 152 bytes leftover after parsing attributes in process `syz.1.690'. [ 66.399365][ T5946] System zones: 1-12 [ 66.403534][ T5946] EXT4-fs error (device loop4): __ext4_iget:4906: inode #11: block 393240: comm syz.4.688: invalid block [ 66.433798][ T5946] EXT4-fs (loop4): Remounting filesystem read-only [ 66.460727][ T5946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.505826][ T5946] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 66.514420][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.523723][ T5954] loop1: detected capacity change from 0 to 2048 [ 66.527753][ T5951] erspan0: refused to change device tx_queue_len [ 66.536654][ T5951] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 66.556020][ T5941] bond_slave_0: left promiscuous mode [ 66.561436][ T5941] bond_slave_1: left promiscuous mode [ 66.582811][ T5954] loop1: p1 < > p4 [ 66.594005][ T5954] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.666177][ T5951] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 66.684770][ T5954] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 66.694821][ T5954] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.704047][ T5954] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 66.715615][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 66.768457][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 66.768471][ T29] audit: type=1326 audit(1719343144.585:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.799909][ T29] audit: type=1326 audit(1719343144.585:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.823412][ T29] audit: type=1326 audit(1719343144.585:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.846994][ T29] audit: type=1326 audit(1719343144.585:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.870549][ T29] audit: type=1326 audit(1719343144.585:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.894451][ T29] audit: type=1326 audit(1719343144.585:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.918175][ T29] audit: type=1326 audit(1719343144.595:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.941582][ T29] audit: type=1326 audit(1719343144.595:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.965407][ T29] audit: type=1326 audit(1719343144.615:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 66.989190][ T29] audit: type=1326 audit(1719343144.615:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6d2593d39 code=0x7ffc0000 [ 67.153275][ T5977] loop1: detected capacity change from 0 to 512 [ 67.167853][ T5977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.181132][ T5977] ext4 filesystem being mounted at /root/syzkaller.7ih1Ci/161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.199294][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.528959][ T6005] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 67.536768][ T6005] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.707'. [ 67.612361][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 67.643899][ T6024] syz_tun: entered promiscuous mode [ 67.651641][ T6024] batadv_slave_0: entered promiscuous mode [ 67.755947][ C1] hrtimer: interrupt took 23516 ns [ 67.774909][ T6031] 9pnet_fd: Insufficient options for proto=fd [ 67.811667][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.888115][ T6041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.715'. [ 67.974228][ T6047] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 67.981958][ T6047] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.719'. [ 68.010805][ T6049] loop4: detected capacity change from 0 to 512 [ 68.034329][ T6049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.056731][ T6049] ext4 filesystem being mounted at /root/syzkaller.fOhkKJ/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.231720][ T6066] loop0: detected capacity change from 0 to 128 [ 68.256881][ T6068] all: renamed from bridge_slave_0 (while UP) [ 68.257464][ T5532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.273590][ T6066] FAT-fs (loop0): bogus logical sector size 12 [ 68.279835][ T6066] FAT-fs (loop0): Can't find a valid FAT filesystem [ 68.294970][ T6068] netlink: 'syz.2.725': attribute type 29 has an invalid length. [ 68.302909][ T6068] netlink: 'syz.2.725': attribute type 29 has an invalid length. [ 68.327396][ T6075] loop4: detected capacity change from 0 to 1024 [ 68.337800][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.389180][ T6085] loop2: detected capacity change from 0 to 1024 [ 68.399563][ T5532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.409463][ T6085] EXT4-fs: Mount option(s) incompatible with ext3 [ 68.554443][ T6099] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 68.562244][ T6099] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.734'. [ 68.643690][ T6109] loop0: detected capacity change from 0 to 8192 [ 68.653601][ T6109] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.672157][ T6109] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 1042) [ 68.680850][ T6109] FAT-fs (loop0): Filesystem has been set read-only [ 68.741217][ T5783] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 68.760300][ T6112] bond_slave_0: entered promiscuous mode [ 68.766174][ T6112] bond_slave_1: entered promiscuous mode [ 68.775730][ T6111] bond_slave_0: left promiscuous mode [ 68.781198][ T6111] bond_slave_1: left promiscuous mode [ 68.827104][ T6120] all: renamed from bridge_slave_0 (while UP) [ 68.841025][ T6120] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 68.849844][ T6120] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 69.178158][ T6134] loop4: detected capacity change from 0 to 512 [ 69.212074][ T6134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.224752][ T6134] ext4 filesystem being mounted at /root/syzkaller.fOhkKJ/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.273845][ T5532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.318050][ T6153] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 69.325711][ T6153] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.748'. [ 69.360700][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.751'. [ 69.397444][ T6210] loop2: detected capacity change from 0 to 256 [ 69.404683][ T6210] FAT-fs (loop2): Unrecognized mount option "doZw" or missing value [ 69.426052][ T6214] loop4: detected capacity change from 0 to 256 [ 69.433902][ T6212] all: renamed from bridge_slave_0 (while UP) [ 69.444360][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 69.462532][ T6212] netlink: 'syz.1.753': attribute type 29 has an invalid length. [ 69.472982][ T6212] netlink: 'syz.1.753': attribute type 29 has an invalid length. [ 69.503531][ T5418] cgroup: fork rejected by pids controller in /syz2 [ 69.518510][ T5418] syz_tun (unregistering): left promiscuous mode [ 69.560770][ T6222] loop4: detected capacity change from 0 to 512 [ 69.569168][ T6222] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.575700][ T6222] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.758: corrupted in-inode xattr: bad e_name length [ 69.589779][ T6222] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.758: couldn't read orphan inode 15 (err -117) [ 69.602626][ T6222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.650688][ T5532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.736171][ T6231] loop1: detected capacity change from 0 to 512 [ 69.743625][ T6231] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.767173][ T6231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 69.775116][ T6231] System zones: 1-12 [ 69.779749][ T6231] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.759: casefold flag without casefold feature [ 69.792594][ T6231] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.759: couldn't read orphan inode 15 (err -117) [ 69.805140][ T6231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.875739][ T5764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.955469][ T6245] loop0: detected capacity change from 0 to 256 [ 69.963770][ T6245] FAT-fs (loop0): Unrecognized mount option "doZw" or missing value [ 69.975802][ T5764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.090469][ T5764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.184879][ T5764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.249676][ T6263] all: renamed from bridge_slave_0 (while UP) [ 70.275248][ T6263] netlink: 'syz.0.769': attribute type 29 has an invalid length. [ 70.313057][ T5764] bridge_slave_1: left allmulticast mode [ 70.318776][ T5764] bridge_slave_1: left promiscuous mode [ 70.324415][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.333036][ T5764] bridge_slave_0: left allmulticast mode [ 70.338732][ T5764] bridge_slave_0: left promiscuous mode [ 70.344424][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.459147][ T5764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.472177][ T5764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.484301][ T5764] bond0 (unregistering): Released all slaves [ 70.505286][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.532803][ T6250] chnl_net:caif_netlink_parms(): no params data found [ 70.565789][ T5764] batadv_slave_0: left promiscuous mode [ 70.582560][ T5764] hsr_slave_0: left promiscuous mode [ 70.595746][ T5764] hsr_slave_1: left promiscuous mode [ 70.604075][ T5764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.611605][ T5764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.620145][ T5764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.627665][ T5764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.647841][ T5764] veth1_macvtap: left promiscuous mode [ 70.650193][ T6285] loop1: detected capacity change from 0 to 2048 [ 70.653339][ T5764] veth0_macvtap: left promiscuous mode [ 70.665383][ T5764] veth1_vlan: left promiscuous mode [ 70.670774][ T5764] veth0_vlan: left promiscuous mode [ 70.678828][ T6285] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.690155][ T6285] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.701429][ T6285] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 70.710601][ T6285] System zones: 0-19 [ 70.715224][ T6285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.730133][ T6281] loop3: detected capacity change from 0 to 256 [ 70.750458][ T6281] FAT-fs (loop3): codepage cp866 not found [ 70.756834][ T3074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.795515][ T5764] team0 (unregistering): Port device team_slave_1 removed [ 70.806034][ T5764] team0 (unregistering): Port device team_slave_0 removed [ 70.865636][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.872939][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.883469][ T6250] bridge_slave_0: entered allmulticast mode [ 70.890451][ T6250] bridge_slave_0: entered promiscuous mode [ 70.900534][ T6304] team0: Port device netdevsim1 added [ 70.907864][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.915016][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.923299][ T6250] bridge_slave_1: entered allmulticast mode [ 70.929935][ T6250] bridge_slave_1: entered promiscuous mode [ 70.971020][ T6250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.982165][ T6250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.999776][ T6250] team0: Port device team_slave_0 added [ 71.006377][ T6250] team0: Port device team_slave_1 added [ 71.023100][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.030124][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.056316][ T6250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.123305][ T6320] loop3: detected capacity change from 0 to 512 [ 71.130803][ T6320] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.232588][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.239600][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.265690][ T6250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.286581][ T6320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 71.294526][ T6320] System zones: 1-12 [ 71.311823][ T6320] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.784: casefold flag without casefold feature [ 71.324901][ T6320] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.784: couldn't read orphan inode 15 (err -117) [ 71.338127][ T6320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.405756][ T6250] hsr_slave_0: entered promiscuous mode [ 71.434045][ T6250] hsr_slave_1: entered promiscuous mode [ 71.442584][ T6250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.451811][ T6250] Cannot create hsr debugfs directory [ 71.466566][ T6326] __nla_validate_parse: 5 callbacks suppressed [ 71.466584][ T6326] netlink: 48 bytes leftover after parsing attributes in process `syz.4.786'. [ 71.502082][ T6326] loop4: detected capacity change from 0 to 512 [ 71.519160][ T6326] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 71.533564][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 71.576540][ T6331] loop0: detected capacity change from 0 to 512 [ 71.584135][ T6331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.607077][ T6331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.619878][ T6331] ext4 filesystem being mounted at /root/syzkaller.tObF5n/65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.635055][ T6331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.653496][ T6335] loop4: detected capacity change from 0 to 256 [ 71.714266][ T6339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.789'. [ 71.724430][ T6339] batman_adv: batadv0: Adding interface: veth1_vlan [ 71.731100][ T6339] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.758318][ T6339] batman_adv: batadv0: Interface activated: veth1_vlan [ 71.764583][ T6341] loop0: detected capacity change from 0 to 1024 [ 71.774949][ T6341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.813719][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.793'. [ 71.838652][ T6250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.845106][ T5403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.854680][ T5262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.865855][ T6250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.874894][ T6250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.887023][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'. [ 71.896438][ T6250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.933361][ T6360] loop3: detected capacity change from 0 to 512 [ 71.952121][ T6360] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 71.963829][ T6360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 71.973295][ T6360] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.990753][ T6360] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.794: attempt to clear invalid blocks 1024 len 1 [ 71.992252][ T6250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.012815][ T6360] EXT4-fs (loop3): Remounting filesystem read-only [ 72.018661][ T6250] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.032129][ T6360] EXT4-fs (loop3): 1 truncate cleaned up [ 72.039115][ T6360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 72.066885][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.074030][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.092793][ T6367] all: renamed from bridge_slave_0 (while UP) [ 72.101727][ T6360] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 72.114175][ T6368] loop0: detected capacity change from 0 to 128 [ 72.121252][ T6360] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 72.138126][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.138345][ T6368] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.145236][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.153527][ T6368] vhci_hcd: invalid port number 219 [ 72.165030][ T6368] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 72.228454][ T6368] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 72.269009][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.804'. [ 72.275486][ T6250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.296943][ T6385] tmpfs: Bad value for 'mpol' [ 72.307119][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 72.307136][ T29] audit: type=1400 audit(1719343150.115:5487): avc: denied { mounton } for pid=6384 comm="syz.1.804" path="/root/syzkaller.7ih1Ci/182/file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 72.374563][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.807'. [ 72.420501][ T6250] veth0_vlan: entered promiscuous mode [ 72.426024][ T6403] loop4: detected capacity change from 0 to 512 [ 72.452216][ T6250] veth1_vlan: entered promiscuous mode [ 72.461048][ T6403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.468906][ T6250] veth0_macvtap: entered promiscuous mode [ 72.478001][ T6403] ext4 filesystem being mounted at /root/syzkaller.fOhkKJ/33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.485241][ T6250] veth1_macvtap: entered promiscuous mode [ 72.506552][ T5532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.518862][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.529354][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.539307][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.549920][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.559865][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.570399][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.580293][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.590703][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.601641][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.612536][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.623111][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.633281][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.643820][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.653686][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.664126][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.674018][ T6250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.684468][ T6250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.695588][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.715995][ T6250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.724729][ T6250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.733709][ T6250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.742763][ T6250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.754845][ T6422] loop1: detected capacity change from 0 to 128 [ 72.765511][ T6422] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.780982][ T6422] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.815894][ T29] audit: type=1400 audit(1719343150.625:5488): avc: denied { setopt } for pid=6421 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.838061][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.816'. [ 72.869728][ T6202] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.922125][ T6443] loop4: detected capacity change from 0 to 164 [ 72.925717][ T6445] loop2: detected capacity change from 0 to 512 [ 72.939520][ T6447] syz_tun: entered promiscuous mode [ 72.945534][ T6443] Unable to read rock-ridge attributes [ 72.951470][ T29] audit: type=1326 audit(1719343150.755:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 72.974864][ T29] audit: type=1326 audit(1719343150.755:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 72.998478][ T29] audit: type=1326 audit(1719343150.765:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 73.022725][ T29] audit: type=1326 audit(1719343150.765:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 73.026389][ T6443] Unable to read rock-ridge attributes [ 73.046221][ T29] audit: type=1326 audit(1719343150.765:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 73.075429][ T29] audit: type=1326 audit(1719343150.765:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 73.077759][ T6447] batadv_slave_0: entered promiscuous mode [ 73.099033][ T29] audit: type=1326 audit(1719343150.765:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 73.130149][ T29] audit: type=1326 audit(1719343150.765:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03df207d39 code=0x7ffc0000 [ 73.134286][ T6443] Unable to read rock-ridge attributes [ 73.160487][ T6445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.163945][ T6443] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.173133][ T6445] ext4 filesystem being mounted at /root/syzkaller.NVbgNv/2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.202546][ T6250] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.209488][ T6443] Unable to read rock-ridge attributes [ 73.219564][ T6443] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.232538][ T6443] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 73.256802][ T6459] usb usb7: usbfs: process 6459 (syz.2.826) did not claim interface 5 before use [ 73.270096][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.827'. [ 73.282859][ T6462] Unable to read rock-ridge attributes [ 73.292039][ T6459] loop2: detected capacity change from 0 to 1024 [ 73.300116][ T6459] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.307053][ T6459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.335488][ T6459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.338441][ T6467] loop3: detected capacity change from 0 to 128 [ 73.357123][ T6467] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.369536][ T6467] ext4 filesystem being mounted at /root/syzkaller.ZFd7qE/32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.382307][ T6250] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.386282][ T6467] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.830: bg 0: bad block bitmap checksum [ 73.424847][ T5262] syz_tun (unregistering): left promiscuous mode [ 73.455181][ T5403] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.513330][ T6488] loop2: detected capacity change from 0 to 1024 [ 73.524063][ T6488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.548017][ T6488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.553145][ T6491] loop3: detected capacity change from 0 to 1024 [ 73.567286][ T6250] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.571179][ T6491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.621180][ T5403] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.639794][ T6496] loop2: detected capacity change from 0 to 512 [ 73.650433][ T6198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.756673][ T6496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.757658][ T6198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.790032][ T6496] ext4 filesystem being mounted at /root/syzkaller.NVbgNv/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.869233][ T6198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.920673][ T6250] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.937061][ T6198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.027928][ T6525] loop2: detected capacity change from 0 to 1024 [ 74.043005][ T6525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.049778][ T6505] chnl_net:caif_netlink_parms(): no params data found [ 74.101546][ T6198] bridge_slave_1: left allmulticast mode [ 74.107277][ T6198] bridge_slave_1: left promiscuous mode [ 74.112964][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.122142][ T6198] bridge_slave_0: left allmulticast mode [ 74.127859][ T6198] bridge_slave_0: left promiscuous mode [ 74.133596][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.145802][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.200163][ T6250] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.276734][ T6547] loop2: detected capacity change from 0 to 256 [ 74.284260][ T6547] FAT-fs (loop2): Unrecognized mount option "doZw" or missing value [ 74.429806][ T6198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.439987][ T6198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.450276][ T6198] bond0 (unregistering): Released all slaves [ 74.463882][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.850'. [ 74.525834][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.533062][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.558798][ T6505] bridge_slave_0: entered allmulticast mode [ 74.581803][ T6559] loop4: detected capacity change from 0 to 512 [ 74.589513][ T6505] bridge_slave_0: entered promiscuous mode [ 74.597441][ T6559] ext4: Unknown parameter 'smackfsdef' [ 74.605032][ T6198] batadv_slave_0: left promiscuous mode [ 74.623999][ T6198] hsr_slave_0: left promiscuous mode [ 74.631208][ T6198] hsr_slave_1: left promiscuous mode [ 74.638627][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.646085][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.653625][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.661126][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.670257][ T6198] dummy0: left promiscuous mode [ 74.673668][ T6502] syz.3.838 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 74.675123][ T6198] veth1_macvtap: left promiscuous mode [ 74.686069][ T6502] CPU: 1 PID: 6502 Comm: syz.3.838 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 74.691424][ T6198] veth0_macvtap: left promiscuous mode [ 74.691469][ T6198] veth1_vlan: left promiscuous mode [ 74.701391][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 74.701407][ T6502] Call Trace: [ 74.701414][ T6502] [ 74.701421][ T6502] dump_stack_lvl+0xf2/0x150 [ 74.701450][ T6502] dump_stack+0x15/0x20 [ 74.701483][ T6502] dump_header+0x83/0x2d0 [ 74.701502][ T6502] oom_kill_process+0x33e/0x4c0 [ 74.707085][ T6198] veth0_vlan: left promiscuous mode [ 74.712114][ T6502] out_of_memory+0x9af/0xbe0 [ 74.756053][ T6502] mem_cgroup_out_of_memory+0x13e/0x190 [ 74.761687][ T6502] try_charge_memcg+0x745/0xcd0 [ 74.766607][ T6502] ? _raw_spin_unlock+0x26/0x50 [ 74.771447][ T6502] ? radix_tree_lookup+0xf9/0x150 [ 74.776474][ T6502] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 74.782627][ T6502] __read_swap_cache_async+0x2b9/0x520 [ 74.788093][ T6502] swap_cluster_readahead+0x276/0x3f0 [ 74.793708][ T6502] swapin_readahead+0xe2/0x7a0 [ 74.798495][ T6502] ? __filemap_get_folio+0x420/0x5b0 [ 74.803823][ T6502] ? swap_cache_get_folio+0x6e/0x210 [ 74.809140][ T6502] do_swap_page+0x3bc/0x1840 [ 74.813740][ T6502] ? cgroup_rstat_updated+0x99/0x550 [ 74.819023][ T6502] ? __rcu_read_lock+0x36/0x50 [ 74.824237][ T6502] handle_mm_fault+0x809/0x2a80 [ 74.829342][ T6502] ? mas_walk+0x204/0x320 [ 74.833679][ T6502] exc_page_fault+0x3b9/0x650 [ 74.838349][ T6502] asm_exc_page_fault+0x26/0x30 [ 74.843193][ T6502] RIP: 0033:0x7ff6d247338e [ 74.847602][ T6502] Code: 4c 39 d1 74 b9 48 85 c9 0f 84 fc 01 00 00 83 c0 01 44 39 d8 75 de 8b 0c 24 81 e1 ff 1f 00 00 4c 89 14 cf 80 7c 24 1e 00 75 32 <80> 3d 33 ad 2a 00 00 74 29 48 89 ee 48 8b 0d 17 ad 2a 00 31 c0 48 [ 74.867220][ T6502] RSP: 002b:00007ffe70482a60 EFLAGS: 00010246 [ 74.873311][ T6502] RAX: 00000000814d329f RBX: 00007ff6d3253720 RCX: 0000000000000000 [ 74.881297][ T6502] RDX: 0000000000000001 RSI: 000000000000129f RDI: 00007ff6d270e000 [ 74.889266][ T6502] RBP: ffffffff814d329f R08: 0000000000000644 R09: 0000000000000008 [ 74.897232][ T6502] R10: 00000000814d329f R11: 00000000814d32a3 R12: ffffffff814d37c8 [ 74.905223][ T6502] R13: 00007ff6d2722038 R14: 0000000000013b63 R15: 00007ff6d1e1d000 [ 74.913276][ T6502] ? folio_clear_dirty_for_io+0x28/0x3e0 [ 74.918946][ T6502] ? folio_redirty_for_writepage+0x1cf/0x2f0 [ 74.924923][ T6502] [ 74.928116][ T6502] memory: usage 307196kB, limit 307200kB, failcnt 245 [ 74.935093][ T6502] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 74.943044][ T6502] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 74.950438][ T6502] Memory cgroup stats for /syz3: [ 74.950611][ T6502] cache 8192 [ 74.959102][ T6502] rss 8192 [ 74.962124][ T6502] shmem 0 [ 74.965068][ T6502] mapped_file 0 [ 74.968577][ T6502] dirty 0 [ 74.971567][ T6502] writeback 0 [ 74.974916][ T6502] workingset_refault_anon 80 [ 74.979521][ T6502] workingset_refault_file 136 [ 74.984186][ T6502] swap 188416 [ 74.987503][ T6502] swapcached 8192 [ 74.991233][ T6502] pgpgin 37424 [ 74.994680][ T6502] pgpgout 37420 [ 74.998189][ T6502] pgfault 54392 [ 75.001649][ T6502] pgmajfault 80 [ 75.005100][ T6502] inactive_anon 0 [ 75.008852][ T6502] active_anon 0 [ 75.012315][ T6502] inactive_file 4096 [ 75.016394][ T6502] active_file 4096 [ 75.020181][ T6502] unevictable 0 [ 75.023698][ T6502] hierarchical_memory_limit 314572800 [ 75.029189][ T6502] hierarchical_memsw_limit 9223372036854771712 [ 75.035331][ T6502] total_cache 8192 [ 75.039090][ T6502] total_rss 8192 [ 75.042624][ T6502] total_shmem 0 [ 75.046274][ T6502] total_mapped_file 0 [ 75.050386][ T6502] total_dirty 0 [ 75.053848][ T6502] total_writeback 0 [ 75.057755][ T6502] total_workingset_refault_anon 80 [ 75.062861][ T6502] total_workingset_refault_file 136 [ 75.068368][ T6502] total_swap 188416 [ 75.072231][ T6502] total_swapcached 8192 [ 75.076601][ T6502] total_pgpgin 37424 [ 75.080507][ T6502] total_pgpgout 37420 [ 75.084472][ T6502] total_pgfault 54392 [ 75.088497][ T6502] total_pgmajfault 80 [ 75.092468][ T6502] total_inactive_anon 0 [ 75.096649][ T6502] total_active_anon 0 [ 75.100630][ T6502] total_inactive_file 4096 [ 75.105101][ T6502] total_active_file 4096 [ 75.109384][ T6502] total_unevictable 0 [ 75.113406][ T6502] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.838,pid=6502,uid=0 [ 75.128219][ T6502] Memory cgroup out of memory: Killed process 6502 (syz.3.838) total-vm:80884kB, anon-rss:580kB, file-rss:9344kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 75.321432][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 75.335682][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 75.386017][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.393240][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.404406][ T6505] bridge_slave_1: entered allmulticast mode [ 75.411098][ T6505] bridge_slave_1: entered promiscuous mode [ 75.431644][ T6505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.444110][ T6505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.502707][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 75.505617][ T6594] loop2: detected capacity change from 0 to 256 [ 75.518289][ T6594] FAT-fs (loop2): Unrecognized mount option "doZw" or missing value [ 75.532363][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 75.532772][ T6591] loop4: detected capacity change from 0 to 256 [ 75.551405][ T6591] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿ0xffffffffffffffff01777777777777777777777¿ÄØR¢ˆ“~© ]Ñôf õ5¢Ä6㇄yeð 0x00000020 [ 83.899545][ T7134] [ 83.901857][ T7134] Reported by Kernel Concurrency Sanitizer on: [ 83.907988][ T7134] CPU: 0 PID: 7134 Comm: syz.4.1016 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 83.918046][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.928174][ T7134] ================================================================== [ 83.940278][ T7134] syz.4.1016: attempt to access beyond end of device [ 83.940278][ T7134] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164