last executing test programs: 7.595001749s ago: executing program 1 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x6}}], 0x1, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000440)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r5, @ANYBLOB="00006b746769643d0092", @ANYRESOCT, @ANYRES32, @ANYRESOCT=r4], 0x1, 0x1fe, &(0x7f0000000240)="$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") fchown(r0, r1, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) unshare(0x22020600) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x18) flock(r6, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r8, &(0x7f0000000000), 0x100000008) write$binfmt_misc(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="73797a301092861266c871f3c6dbb68a8189049a812ff0102a073336a6e265904a03a39b9b4070834f2b9b09e0ac6a3458b84ac920fbae0ff34b4a9db464eed0cf42812ed5764d52ce5120ac9f2a4743aa3fd748e1d7df55a561e5844e2c358004a8b468d1ca67304172f57f306d303fe00e214d"], 0x18) ioctl$EVIOCSABS20(r8, 0x40084503, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket(0x0, 0x0, 0x0) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x50}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x64b}, {&(0x7f00000007c0)=""/154, 0xb8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7.473019468s ago: executing program 1 (id=3129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r2, &(0x7f0000000200)="d8f96c9d59fd664b1c9295171742c298ff8590b3e7f2b12e04ad9fa2cb1b44185d5f249d06153c38c2f94bf3151b0f09f76931f1e3ac189401d7564e3b9fdeeea10df9879d049ebe16f0392cfe79b3b16a4e4d3ba4ffffe3044d76150ab91a496b1fe5b4467fde10eb4efcc36aa2cf6098f4d8b5ab478fbe0d339cd780c87eed680cd2ee59175a8b16eb5c973cdb4a54e3335125b0560a75956e085b909bb0686690ad879b3fe27d9874f294295660f3a8c9dba4018c43bfb64dfc", 0xbb, 0x4000000, &(0x7f0000000040)={0xa, 0x4e21, 0xa9f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xaee}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x58}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r8, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r10, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r10}}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty}}}], 0x20}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', r6}, 0x90) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000001f0000000000000004000000852000000100000018130000", @ANYRES32=r1, @ANYBLOB="000000000000001d8c40cd325f744ef25b618b9bf700852000000300000018540000ef00000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x1f, &(0x7f00000001c0)=""/31, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r1, r1, r1, r1], 0x0, 0x10, 0x4363}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000680)=r11, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000cac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 7.345336428s ago: executing program 1 (id=3131): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000000200)="d8f96c9d59fd664b1c9295171742c298ff8590b3e7f2b12e04ad9fa2cb1b44185d5f249d06153c38c2f94bf3151b0f09f76931f1e3ac189401d7564e3b9fdeeea10df9879d049ebe16f0392cfe79b3b16a4e4d3ba4ffffe3044d76150ab91a496b1fe5b4467fde10eb4efcc36aa2cf6098f4d8b5ab478fbe0d339cd780c87eed680cd2ee59175a8b16eb5c973cdb4a54e3335125b0560a75956e085b909bb0686690ad879b3fe27d9874f294295660f3a8c9dba4018c43bfb64dfc", 0xbb, 0x4000000, &(0x7f0000000040)={0xa, 0x4e21, 0xa9f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xaee}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40489}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x58}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x3, 0x6, @random="cea0300a1672"}, 0x10) r8 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) close(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r11}}, 0x48) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240), r11, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r13, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r13}}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x0) 7.177040414s ago: executing program 1 (id=3134): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) sigaltstack(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x5000) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffb, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="08aad841e6aca3111930419a06bc"], 0x14}, 0x1, 0x0, 0x0, 0x4000980}, 0x80) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 7.083231548s ago: executing program 1 (id=3136): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x40082, 0x1c4, 0x40}, 0x18) r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000010c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000001400), &(0x7f0000001440)=ANY=[], 0x386, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000014c0)='system.posix_acl_access\x00', &(0x7f0000001500), 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x11f7, &(0x7f00000024c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000008060103000000000000000000000400050001000700000005000100070000001728d4fd51faa704fcdf23dd579dcad37814e8870c33e9f7e842addeebcaa7ac7cfb496f3c087745c0a1151aae86da9bf07ca6399c43fdca4b06c63fcb4c25d7f90080ebdf766d8f5f7de7552334968e1fdcd06f6e9439d86d53b25be1357e4a2f8d450dfcd7fd9fe40d4ca3bde4994e0ed9ee90cbee3596727bad70c720350d7d"], 0x24}}, 0x0) execveat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000001240)=[&(0x7f0000000840)='/dev/ttyS3\x00', &(0x7f0000001040)='vfat\x00', &(0x7f0000001080)='\x00', 0x0], 0x400) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0xa) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, @dstopts]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xce, &(0x7f0000000440)=""/206}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket(0x10, 0x3, 0x0) 6.913014595s ago: executing program 1 (id=3137): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e25, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x8, {@local}}}], 0x28}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x0, &(0x7f00000009c0)={0x11, 0x0, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, 0x0, 0x0) 4.195275543s ago: executing program 3 (id=3185): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x48}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f8) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) r7 = epoll_create1(0x0) r8 = socket(0x2, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) sendfile(r6, r6, 0x0, 0x100000000) sendfile(r5, r5, 0x0, 0x80000004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) socket$inet6_tcp(0xa, 0x1, 0x0) 3.937287403s ago: executing program 3 (id=3186): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c02", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c"], 0x23c}}, 0x0) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x11210800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) 3.067779797s ago: executing program 3 (id=3214): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a30"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x1e) 2.20784366s ago: executing program 3 (id=3238): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x2c040081, 0x0, 0x0) 1.982726344s ago: executing program 3 (id=3242): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 1.832127248s ago: executing program 3 (id=3248): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='sys_exit\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x3, 0x1000, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0xfce1}}, 0x0) r4 = io_uring_setup(0x2f24, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000340)) ioctl$PIO_UNIMAP(r5, 0x560c, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0x8003000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.711559696s ago: executing program 2 (id=3252): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x38}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) 920.704658ms ago: executing program 0 (id=3263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1, {[@generic={0x0, 0x5, "af5d37"}, @generic={0x0, 0xb, "429390187214417bc5"}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r4}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0x0, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x158, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xffffff00}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x83}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x82}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xbd}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x180}}, 0x0) 890.969603ms ago: executing program 0 (id=3264): socket$packet(0x11, 0x0, 0x300) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, 0x35, 0x1, 0x0, 0x0, {0x2}, [@nested={0x46, 0x0, 0x0, 0x1, [@generic="2b8271efa06a6b1a33e1360a18c6ef249da016306489b04bd6a4eae89fdaeb106966f699be66cf95d3e83266403c2f2eea", @generic="2d505f4a372de93f43c04ec71f84caa2ec"]}]}, 0x5c}}, 0x0) 848.531319ms ago: executing program 0 (id=3266): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 841.75506ms ago: executing program 2 (id=3267): r0 = socket(0x2c, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x11b, 0x4, 0x0, 0x7a9bd347011c1783) munmap(&(0x7f0000031000/0x3000)=nil, 0x3000) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000380)=ANY=[], 0x4b0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r2, 0x114, 0x0, 0x0, 0x20000000) 831.214772ms ago: executing program 0 (id=3268): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x6}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 802.164666ms ago: executing program 0 (id=3269): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 800.541137ms ago: executing program 2 (id=3270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x20) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xffff, 0x1, [0x0]}, 0xa) 780.8348ms ago: executing program 0 (id=3271): r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x10000, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) io_setup(0x9, &(0x7f0000000b80)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, '-&&\x89\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xc4}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x0, @dev, 0x0, "20f0ddf9a66acb"}]}}}}}}}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) unshare(0x42000000) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 770.601611ms ago: executing program 2 (id=3272): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) 725.950638ms ago: executing program 2 (id=3274): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "9d5df4c0f0777a4b9efd1f0760a3ad46b6a654e8ee7732c0ecd4cc65dd4c94582724acdb9b7d17f39af7217984b2543fcff94f1413102a8e1d4f3d607a038b87"}, 0x44) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c0002"], 0x48}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv4_delroute={0x24, 0x19, 0x20, 0x70bd25, 0x25dfdbfe, {0x2, 0x14, 0x80, 0x81, 0xfc, 0x1, 0xfd, 0xb, 0x2300}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 706.283451ms ago: executing program 2 (id=3275): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0200", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c"], 0x23c}}, 0x0) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x11210800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) 288.821706ms ago: executing program 4 (id=3289): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x48}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f8) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) r7 = epoll_create1(0x0) r8 = socket(0x2, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) sendfile(r6, r6, 0x0, 0x100000000) sendfile(r5, r5, 0x0, 0x80000004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) socket$inet6_tcp(0xa, 0x1, 0x0) 80.532608ms ago: executing program 4 (id=3290): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = dup(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0xa) 67.64018ms ago: executing program 4 (id=3291): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="24002d800400020000000000050001"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x4c00, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000ddffffffff200000d808000300", @ANYRES32=r1, @ANYBLOB="2c002d8008"], 0x48}}, 0x0) 54.803741ms ago: executing program 4 (id=3292): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 29.932155ms ago: executing program 4 (id=3293): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000000}, 0x0, 0x100, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 0s ago: executing program 4 (id=3294): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) ppoll(&(0x7f0000000200)=[{r2}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0055bb", @ANYRES16=r3, @ANYBLOB="01030000000000000000080000000500030000000000"], 0x1c}}, 0x20044085) (async, rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="24002d800400020000000000050001"], 0x40}}, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r8, @ANYBLOB="01000000000000ebffff2000000009001f0070687930000000000c000500000000000000000005002000010000000c0001000000aaaaaaaaaaaa0c0005"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120000, 0x0, @perf_config_ext, 0x101}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f00000002c0)=ANY=[], 0xc1) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x10, r0, 0x0) (rerun: 64) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r10, 0x10d, 0x8c, 0x0, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r7) kernel console output (not intermixed with test programs): s:9248kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 186.821401][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2710'. [ 186.896978][ T1531] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.912413][ T1531] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 186.925610][ T1531] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.925610][ T1531] [ 186.935351][ T1531] EXT4-fs (loop0): Total free blocks count 0 [ 186.941555][ T1531] EXT4-fs (loop0): Free/Dirty block details [ 186.948474][ T1531] EXT4-fs (loop0): free_blocks=2415919104 [ 186.954198][ T1531] EXT4-fs (loop0): dirty_blocks=8192 [ 186.959668][ T1531] EXT4-fs (loop0): Block reservation details [ 186.965706][ T1531] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 186.975087][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 186.975104][ T29] audit: type=1326 audit(1719282471.487:11975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.2711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fcaad5d39 code=0x0 [ 187.015045][T11529] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 2048 with max blocks 2048 with error 28 [ 187.061748][T11536] 9pnet_fd: Insufficient options for proto=fd [ 187.089173][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2712'. [ 187.143875][ T29] audit: type=1400 audit(1719282471.687:11976): avc: denied { create } for pid=11537 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 187.185154][T11084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.248873][ T29] audit: type=1326 audit(1719282471.797:11977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11547 comm="syz.3.2716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20b1e9fd39 code=0x0 [ 187.264937][T11553] x_tables: duplicate underflow at hook 2 [ 187.280830][T11552] netlink: 'syz.2.2715': attribute type 3 has an invalid length. [ 187.301806][T11552] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.336946][T11558] loop1: detected capacity change from 0 to 512 [ 187.344366][T11558] EXT4-fs: Mount option(s) incompatible with ext2 [ 187.459525][ T29] audit: type=1326 audit(1719282472.007:11978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d0b27d39 code=0x7ffc0000 [ 187.483197][ T29] audit: type=1326 audit(1719282472.007:11979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d0b27d39 code=0x7ffc0000 [ 187.507699][ T29] audit: type=1326 audit(1719282472.007:11980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d0b27d39 code=0x7ffc0000 [ 187.531437][ T29] audit: type=1326 audit(1719282472.007:11981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d0b27d39 code=0x7ffc0000 [ 187.557515][ T29] audit: type=1326 audit(1719282472.007:11982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d0b27d39 code=0x7ffc0000 [ 187.581924][ T29] audit: type=1326 audit(1719282472.087:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6d0b27d39 code=0x7ffc0000 [ 187.634727][ T29] audit: type=1326 audit(1719282472.137:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11557 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d0b27d39 code=0x7ffc0000 [ 187.662096][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'. [ 187.671191][T11561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2722'. [ 187.692984][T11561] vlan2: entered allmulticast mode [ 187.698859][T11561] team0: entered allmulticast mode [ 187.703992][T11561] team_slave_0: entered allmulticast mode [ 187.709852][T11561] team_slave_1: entered allmulticast mode [ 187.764933][T11568] loop1: detected capacity change from 0 to 2048 [ 187.795987][T11568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.022123][T11582] loop2: detected capacity change from 0 to 764 [ 188.042539][T11582] rock: directory entry would overflow storage [ 188.048835][T11582] rock: sig=0x4654, size=5, remaining=4 [ 188.074758][T11575] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.098129][T11575] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 188.110729][T11575] EXT4-fs (loop1): This should not happen!! Data will be lost [ 188.110729][T11575] [ 188.120387][T11575] EXT4-fs (loop1): Total free blocks count 0 [ 188.127054][T11575] EXT4-fs (loop1): Free/Dirty block details [ 188.133039][T11575] EXT4-fs (loop1): free_blocks=2415919104 [ 188.138777][T11575] EXT4-fs (loop1): dirty_blocks=8192 [ 188.144139][T11575] EXT4-fs (loop1): Block reservation details [ 188.150285][T11575] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 188.174482][T11584] loop3: detected capacity change from 0 to 512 [ 188.188915][T11575] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 188.212422][T11584] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2727: bg 0: block 127: padding at end of block bitmap is not set [ 188.292309][T11584] EXT4-fs (loop3): Remounting filesystem read-only [ 188.334683][T11584] EXT4-fs (loop3): 1 truncate cleaned up [ 188.367974][T11584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.405930][T11584] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 188.412872][T11584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.446942][T11589] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 188.454710][T11589] netlink: 'syz.4.2730': attribute type 2 has an invalid length. [ 188.486690][T11589] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 188.494461][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 188.628781][T11612] ip6_vti0: entered promiscuous mode [ 188.635242][T11612] vlan2: entered promiscuous mode [ 188.643184][T11612] ip6_vti0: left promiscuous mode [ 188.988116][T11617] pim6reg: entered allmulticast mode [ 188.996815][T11617] Cannot find add_set index 0 as target [ 189.004093][T11617] pim6reg: left allmulticast mode [ 189.204656][T11626] x_tables: duplicate underflow at hook 2 [ 189.407186][T11641] team_slave_1: entered allmulticast mode [ 189.440353][T11642] loop0: detected capacity change from 0 to 1024 [ 189.466766][T11641] bridge0: port 3(veth0) entered blocking state [ 189.473179][T11641] bridge0: port 3(veth0) entered disabled state [ 189.489486][T11641] veth0: entered allmulticast mode [ 189.495246][T11641] veth0: entered promiscuous mode [ 189.497044][T11642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.501478][T11641] bridge0: port 3(veth0) entered blocking state [ 189.519363][T11641] bridge0: port 3(veth0) entered forwarding state [ 189.540923][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2749'. [ 189.584687][T11653] loop4: detected capacity change from 0 to 1024 [ 189.610110][T11653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.661784][T11660] random: crng reseeded on system resumption [ 189.671545][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.774496][T11665] netlink: 'syz.1.2752': attribute type 32 has an invalid length. [ 189.782507][T11665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2752'. [ 189.793085][T11665] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 189.929133][T11668] loop0: detected capacity change from 0 to 2048 [ 189.948403][T11668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.057325][T11694] loop2: detected capacity change from 0 to 1024 [ 190.218089][T11694] loop2: detected capacity change from 0 to 8192 [ 190.247287][T11697] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.278957][T11697] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 190.291495][T11697] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.291495][T11697] [ 190.301792][T11697] EXT4-fs (loop0): Total free blocks count 0 [ 190.307829][T11697] EXT4-fs (loop0): Free/Dirty block details [ 190.313807][T11697] EXT4-fs (loop0): free_blocks=2415919104 [ 190.319638][T11697] EXT4-fs (loop0): dirty_blocks=8192 [ 190.324964][T11697] EXT4-fs (loop0): Block reservation details [ 190.331543][T11697] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 190.355783][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.361704][T11697] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 190.429670][T11704] loop2: detected capacity change from 0 to 1024 [ 190.584830][T11708] loop4: detected capacity change from 0 to 512 [ 190.597528][T11704] loop2: detected capacity change from 0 to 8192 [ 190.606981][T11708] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2764: bg 0: block 127: padding at end of block bitmap is not set [ 190.622618][T11708] EXT4-fs (loop4): Remounting filesystem read-only [ 190.643110][T11708] EXT4-fs (loop4): 1 truncate cleaned up [ 190.673167][T11708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.694852][T11708] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 190.712926][T11717] loop0: detected capacity change from 0 to 128 [ 190.719713][T11708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.733851][T11717] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.747159][T11717] ext4 filesystem being mounted at /root/syzkaller.0MjnHM/367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.825946][ T8] net_ratelimit: 16 callbacks suppressed [ 190.826012][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.858909][ T6170] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.883294][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2770'. [ 190.902287][T11723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.076855][T11737] loop0: detected capacity change from 0 to 1024 [ 191.127863][T11737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.173873][T11732] loop3: detected capacity change from 0 to 8192 [ 191.193196][T11018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.209333][T11732] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.216558][T11749] loop4: detected capacity change from 0 to 2048 [ 191.235808][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.255473][T11749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.276297][T11732] loop3: detected capacity change from 0 to 128 [ 191.282537][T11018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.324906][T11018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.352179][T11763] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2779: bg 0: block 234: padding at end of block bitmap is not set [ 191.386837][T11763] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 722 with error 117 [ 191.400012][T11763] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.400012][T11763] [ 191.413764][T11018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.449457][T11040] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 722 with max blocks 8 with error 28 [ 191.462664][T11040] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.462664][T11040] [ 191.472556][T11040] EXT4-fs (loop4): Total free blocks count 0 [ 191.478679][T11040] EXT4-fs (loop4): Free/Dirty block details [ 191.479417][T11739] chnl_net:caif_netlink_parms(): no params data found [ 191.484562][T11040] EXT4-fs (loop4): free_blocks=0 [ 191.496976][T11040] EXT4-fs (loop4): dirty_blocks=16 [ 191.502085][T11040] EXT4-fs (loop4): Block reservation details [ 191.532786][T11787] loop0: detected capacity change from 0 to 512 [ 191.545407][T11789] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 191.558532][T11787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.571419][T11787] ext4 filesystem being mounted at /root/syzkaller.0MjnHM/378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.573783][T11739] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.591711][T11739] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.600420][T11739] bridge_slave_0: entered allmulticast mode [ 191.607605][T11739] bridge_slave_0: entered promiscuous mode [ 191.614494][T11739] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.621614][T11739] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.628889][T11739] bridge_slave_1: entered allmulticast mode [ 191.635202][T11739] bridge_slave_1: entered promiscuous mode [ 191.655553][T11739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.668178][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.669287][T11739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.677544][ T908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.697177][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.705428][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.714401][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.723876][T11018] bridge_slave_1: left allmulticast mode [ 191.730128][T11018] bridge_slave_1: left promiscuous mode [ 191.735748][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.743668][T11018] bridge_slave_0: left allmulticast mode [ 191.750075][T11018] bridge_slave_0: left promiscuous mode [ 191.755915][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.800456][T11802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.809712][T11802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.819334][T11804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11804 comm=syz.0.2789 [ 191.833324][T11802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.842727][T11802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.879458][T11018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.884465][T11807] loop4: detected capacity change from 0 to 2048 [ 191.896356][T11807] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.896565][T11018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.911878][T11807] EXT4-fs (loop4): stripe (54975) is not aligned with cluster size (16), stripe is disabled [ 191.924107][T11018] bond0 (unregistering): Released all slaves [ 191.927511][T11807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.947358][T11807] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2794: bg 0: block 234: padding at end of block bitmap is not set [ 191.962102][T11807] EXT4-fs (loop4): Remounting filesystem read-only [ 191.978871][T11739] team0: Port device team_slave_0 added [ 191.985590][T11739] team0: Port device team_slave_1 added [ 191.992302][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.018967][T11018] hsr_slave_0: left promiscuous mode [ 192.025082][T11018] hsr_slave_1: left promiscuous mode [ 192.032380][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.039940][T11018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.050386][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.058569][T11018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.071896][T11819] netlink: 'syz.3.2799': attribute type 28 has an invalid length. [ 192.079832][T11819] netlink: 'syz.3.2799': attribute type 2 has an invalid length. [ 192.088376][T11819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2799'. [ 192.093263][T11018] team0: left allmulticast mode [ 192.103023][T11018] team_slave_0: left allmulticast mode [ 192.108599][T11018] team_slave_1: left allmulticast mode [ 192.114189][T11018] veth1_macvtap: left promiscuous mode [ 192.118372][T11821] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.119716][T11018] veth0_macvtap: left promiscuous mode [ 192.132434][T11018] veth1_vlan: left promiscuous mode [ 192.138148][T11018] veth0_vlan: left promiscuous mode [ 192.244486][T11018] team0 (unregistering): Port device team_slave_1 removed [ 192.255445][T11018] team0 (unregistering): Port device team_slave_0 removed [ 192.298672][T11739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.305808][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.332346][T11739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.357967][T11739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.364988][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.391677][T11739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.418869][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.432172][T11739] hsr_slave_0: entered promiscuous mode [ 192.440376][T11739] hsr_slave_1: entered promiscuous mode [ 192.450019][T11739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.459067][T11739] Cannot create hsr debugfs directory [ 192.560005][T11840] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.630537][T11846] loop0: detected capacity change from 0 to 512 [ 192.649862][T11846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.667355][T11846] ext4 filesystem being mounted at /root/syzkaller.0MjnHM/383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.681941][T11846] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2810: corrupted xattr block 32: invalid header [ 192.698522][T11846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 192.708029][T11846] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2810: corrupted xattr block 32: invalid header [ 192.722751][T11846] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2810: corrupted xattr block 32: invalid header [ 192.737735][T11846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 192.750699][T11859] loop3: detected capacity change from 0 to 2048 [ 192.759386][T11846] EXT4-fs error (device loop0): ext4_get_inode_usage:901: inode #15: comm syz.0.2810: corrupted xattr block 32: invalid header [ 192.767867][T11859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.787282][T11859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.810739][T11739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.819269][T11739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.830227][T11739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.841482][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2815'. [ 192.842172][T11739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.856753][T11859] loop3: detected capacity change from 0 to 512 [ 192.864020][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.888365][T11859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.906309][T11739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.912381][T11859] ext4 filesystem being mounted at /root/syzkaller.eH2EER/37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.928591][T11859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.941034][T11739] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.975194][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.982329][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.995175][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.002289][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.020241][T11867] bond0: entered promiscuous mode [ 193.025441][T11867] bond_slave_0: entered promiscuous mode [ 193.031274][T11867] bond_slave_1: entered promiscuous mode [ 193.039601][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 193.039614][ T29] audit: type=1400 audit(1719282477.587:12224): avc: denied { write } for pid=11866 comm="syz.1.2817" path="socket:[38692]" dev="sockfs" ino=38692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.091186][T11739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.101703][T11739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.300039][T11739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.311692][T11888] loop1: detected capacity change from 0 to 512 [ 193.321869][T11888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.389197][T11888] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.397355][T11888] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2820: bg 0: block 248: padding at end of block bitmap is not set [ 193.412706][T11888] Quota error (device loop1): write_blk: dquota write failed [ 193.420182][T11888] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 193.430209][T11888] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.2820: Failed to acquire dquot type 1 [ 193.443614][T11888] EXT4-fs (loop1): 1 truncate cleaned up [ 193.450062][T11888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.465560][T11888] EXT4-fs error (device loop1): __ext4_remount:6503: comm syz.1.2820: Abort forced by user [ 193.466013][ T29] audit: type=1400 audit(1719282478.017:12225): avc: denied { ioctl } for pid=11877 comm="syz.1.2820" path="/dev/mISDNtimer" dev="devtmpfs" ino=223 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.511906][T11888] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 193.514958][T11897] loop0: detected capacity change from 0 to 2048 [ 193.532926][T11899] loop4: detected capacity change from 0 to 256 [ 193.542129][T11899] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.550373][T11739] veth0_vlan: entered promiscuous mode [ 193.558828][T11888] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 193.566654][T11739] veth1_vlan: entered promiscuous mode [ 193.570000][T11888] ext4 filesystem being remounted at /root/syzkaller.Gr5biU/314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.595782][ T3109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.620766][T11897] loop0: unable to read partition table [ 193.632569][T11888] netlink: 'syz.1.2820': attribute type 2 has an invalid length. [ 193.642731][T11888] Quota error (device loop1): write_blk: dquota write failed [ 193.643201][T11739] veth0_macvtap: entered promiscuous mode [ 193.650177][T11888] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 193.656561][T11897] loop0: partition table beyond EOD, truncated [ 193.656636][T11897] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 193.680985][T11888] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.2820: Failed to acquire dquot type 1 [ 193.695469][ T3109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.708927][ T29] audit: type=1400 audit(1719282478.257:12226): avc: denied { create } for pid=11877 comm="syz.1.2820" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 193.738366][T11739] veth1_macvtap: entered promiscuous mode [ 193.748799][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.759281][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.769721][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.780162][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.789983][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.801005][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.810831][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.821302][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.832901][T11739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.836677][T11897] loop0: detected capacity change from 0 to 1024 [ 193.841627][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.857523][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.867369][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.878488][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.888366][T11739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.898800][T11739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.910294][T11739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.910339][ T29] audit: type=1400 audit(1719282478.467:12227): avc: denied { write } for pid=11913 comm="syz.4.2825" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 193.935887][T11739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.950169][T11739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.958927][T11739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.967716][T11739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.980147][T11897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.994213][ T3109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.997231][T11897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.006952][ T29] audit: type=1400 audit(1719282478.537:12228): avc: denied { write } for pid=11895 comm="syz.0.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.032885][ T29] audit: type=1400 audit(1719282478.537:12229): avc: denied { ioctl } for pid=11895 comm="syz.0.2823" path="socket:[39732]" dev="sockfs" ino=39732 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 194.059316][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2825'. [ 194.092610][ T3109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.120928][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2771'. [ 194.142479][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.154254][ T1531] EXT4-fs error (device loop1): ext4_release_dquot:6883: comm kworker/u8:4: Failed to release dquot type 1 [ 194.166541][T11932] Cannot find set identified by id 0 to match [ 194.183188][T11900] chnl_net:caif_netlink_parms(): no params data found [ 194.233183][ T3109] veth0: left allmulticast mode [ 194.238700][ T3109] veth0: left promiscuous mode [ 194.243631][ T3109] bridge0: port 3(veth0) entered disabled state [ 194.274289][ T3109] bridge_slave_1: left allmulticast mode [ 194.280241][ T3109] bridge_slave_1: left promiscuous mode [ 194.286132][ T3109] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.294176][ T3109] bridge_slave_0: left allmulticast mode [ 194.300279][ T3109] bridge_slave_0: left promiscuous mode [ 194.306110][ T3109] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.389705][ T3109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.401245][ T3109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.411586][ T3109] bond0 (unregistering): Released all slaves [ 194.427506][T11941] bond_slave_0: entered promiscuous mode [ 194.433210][T11941] bond_slave_1: entered promiscuous mode [ 194.445014][T11943] bond_slave_0: left promiscuous mode [ 194.451072][T11943] bond_slave_1: left promiscuous mode [ 194.464386][T11946] loop1: detected capacity change from 0 to 512 [ 194.473974][T11943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.485052][T11946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.498423][T11946] ext4 filesystem being mounted at /root/syzkaller.Gr5biU/317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.498772][T11943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.512425][T11946] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2830: corrupted xattr block 32: invalid header [ 194.533944][T11946] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 194.542941][T11946] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2830: corrupted xattr block 32: invalid header [ 194.546937][T11943] bond0 (unregistering): Released all slaves [ 194.567987][T11946] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.2830: corrupted xattr block 32: invalid header [ 194.581366][T11946] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 194.591189][T11946] EXT4-fs error (device loop1): ext4_get_inode_usage:901: inode #15: comm syz.1.2830: corrupted xattr block 32: invalid header [ 194.592060][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.622294][T11951] loop4: detected capacity change from 0 to 512 [ 194.632638][T11900] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.640436][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.648431][T11951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.648577][T11900] bridge_slave_0: entered allmulticast mode [ 194.668627][T11951] ext4 filesystem being mounted at /root/syzkaller.5IDaeQ/308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.673065][T11900] bridge_slave_0: entered promiscuous mode [ 194.690298][T11900] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.698185][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.705512][T11900] bridge_slave_1: entered allmulticast mode [ 194.725517][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.740394][T11900] bridge_slave_1: entered promiscuous mode [ 194.768144][ T3109] hsr_slave_0: left promiscuous mode [ 194.774003][ T3109] hsr_slave_1: left promiscuous mode [ 194.780748][ T3109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.788402][ T3109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.796341][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.806105][ T3109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.813547][ T3109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.818065][T11957] loop1: detected capacity change from 0 to 1024 [ 194.829907][ T3109] veth1_macvtap: left promiscuous mode [ 194.835433][ T3109] veth0_macvtap: left promiscuous mode [ 194.837697][T11957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.841655][ T3109] veth1_vlan: left promiscuous mode [ 194.858818][ T3109] veth0_vlan: left promiscuous mode [ 194.913860][T11961] loop4: detected capacity change from 0 to 1024 [ 194.923477][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.939934][T11961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.998996][ T3109] team0 (unregistering): Port device team_slave_1 removed [ 195.010683][ T3109] team0 (unregistering): Port device team_slave_0 removed [ 195.029963][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.071718][T11900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.091402][T11900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.116984][T11900] team0: Port device team_slave_0 added [ 195.123660][T11900] team0: Port device team_slave_1 added [ 195.139594][T11900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.147092][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.173169][T11900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.184711][T11900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.191749][T11900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.218416][T11900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.242361][T11970] loop4: detected capacity change from 0 to 512 [ 195.251624][T11970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.261006][T11970] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.268156][T11970] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2836: bg 0: block 248: padding at end of block bitmap is not set [ 195.269512][T11900] hsr_slave_0: entered promiscuous mode [ 195.282815][T11970] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.2836: Failed to acquire dquot type 1 [ 195.283377][T11970] EXT4-fs (loop4): 1 truncate cleaned up [ 195.306826][T11900] hsr_slave_1: entered promiscuous mode [ 195.307688][T11970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.335617][T11970] EXT4-fs error (device loop4): __ext4_remount:6503: comm syz.4.2836: Abort forced by user [ 195.347034][T11970] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 195.367792][T11970] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 195.379768][T11970] ext4 filesystem being remounted at /root/syzkaller.5IDaeQ/310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.411975][T11970] netlink: 'syz.4.2836': attribute type 2 has an invalid length. [ 195.420573][T11970] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.2836: Failed to acquire dquot type 1 [ 195.692150][T11900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.702443][T11900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.714924][T11900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.724540][T11900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.788713][T11900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.804023][T11900] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.815088][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.822216][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.858460][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.865606][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.946553][T11996] loop0: detected capacity change from 0 to 1024 [ 195.977453][T11996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.982900][T11900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.007043][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.027436][T11018] EXT4-fs error (device loop4): ext4_release_dquot:6883: comm kworker/u8:12: Failed to release dquot type 1 [ 196.067847][ T8] net_ratelimit: 20 callbacks suppressed [ 196.067865][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.126624][T12008] loop4: detected capacity change from 0 to 1024 [ 196.169536][T12008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.183560][T11900] veth0_vlan: entered promiscuous mode [ 196.201219][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.213017][T11900] veth1_vlan: entered promiscuous mode [ 196.257600][T11900] veth0_macvtap: entered promiscuous mode [ 196.265644][T11900] veth1_macvtap: entered promiscuous mode [ 196.299967][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.311213][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.321092][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.327283][T12008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.331552][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.340334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.350016][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.369215][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.379094][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.389585][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.415387][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.425133][T11900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.437925][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.448491][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.459046][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.469636][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.479518][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.490696][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.507774][T11900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.520279][T11900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.529223][T11900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.538269][T11900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.547829][T11900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.603605][T12022] loop3: detected capacity change from 0 to 128 [ 196.612829][T12024] loop4: detected capacity change from 0 to 512 [ 196.641995][T12024] program syz.4.2849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.679441][T12033] loop1: detected capacity change from 0 to 512 [ 196.693024][T12033] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2852: bg 0: block 127: padding at end of block bitmap is not set [ 196.708905][T12033] EXT4-fs (loop1): Remounting filesystem read-only [ 196.715587][T12033] EXT4-fs (loop1): 1 truncate cleaned up [ 196.722150][T12033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.735503][T12033] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 196.743932][T12033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.758832][T12032] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2853'. [ 196.769163][T12032] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2853'. [ 196.778752][T12032] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2853'. [ 196.783685][T12042] loop3: detected capacity change from 0 to 512 [ 196.789917][T12032] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2853'. [ 196.804698][T12032] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2853'. [ 196.805099][T12042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.837599][T12042] EXT4-fs (loop3): 1 orphan inode deleted [ 196.843410][T12042] EXT4-fs (loop3): 1 truncate cleaned up [ 196.850967][T12042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.878889][T11900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.903771][T12054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2861'. [ 196.915730][T12053] syzkaller0: entered promiscuous mode [ 196.921910][T12053] syzkaller0: entered allmulticast mode [ 196.928981][T12056] loop2: detected capacity change from 0 to 128 [ 196.995088][T12054] loop4: detected capacity change from 0 to 1024 [ 196.997193][T12069] loop2: detected capacity change from 0 to 128 [ 197.003921][T12054] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 197.019437][T12054] EXT4-fs (loop4): group descriptors corrupted! [ 197.026580][T12069] FAT-fs (loop2): bogus logical sector size 12 [ 197.032814][T12069] FAT-fs (loop2): Can't find a valid FAT filesystem [ 197.106653][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.167847][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 197.176790][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 197.189173][T12079] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2868'. [ 197.200088][T12079] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2868'. [ 197.201933][T12086] loop3: detected capacity change from 0 to 256 [ 197.258660][T12090] loop4: detected capacity change from 0 to 512 [ 197.268873][T12090] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.280004][T12090] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 197.294777][T12090] EXT4-fs (loop4): 1 truncate cleaned up [ 197.301196][T12090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.356140][T12090] loop4: detected capacity change from 512 to 11 [ 197.373762][ T7763] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 197.391210][ T7763] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: Out of memory [ 197.401086][ T7763] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 197.413618][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.661922][ T3197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.740665][ T3197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.799516][ T3197] bond0: (slave netdevsim1): Releasing backup interface [ 197.807841][ T3197] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 197.818219][ T3197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.867684][ T3197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.885086][T12112] loop1: detected capacity change from 0 to 512 [ 197.893491][T12112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.903643][T12112] EXT4-fs (loop1): orphan cleanup on readonly fs [ 197.920615][T12112] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2877: bg 0: block 248: padding at end of block bitmap is not set [ 197.938298][T12112] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.2877: Failed to acquire dquot type 1 [ 197.952370][T12112] EXT4-fs (loop1): 1 truncate cleaned up [ 197.961446][T12112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.974109][ T3197] bridge_slave_1: left allmulticast mode [ 197.979819][ T3197] bridge_slave_1: left promiscuous mode [ 197.985850][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.987249][T12112] EXT4-fs error (device loop1): __ext4_remount:6503: comm syz.1.2877: Abort forced by user [ 198.003361][T12112] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 198.006008][ T3197] bridge_slave_0: left allmulticast mode [ 198.018358][ T3197] bridge_slave_0: left promiscuous mode [ 198.024016][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.027020][T12112] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 198.041781][T12112] ext4 filesystem being remounted at /root/syzkaller.Gr5biU/326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.157400][T12135] __quota_error: 248 callbacks suppressed [ 198.157415][T12135] Quota error (device loop1): write_blk: dquota write failed [ 198.171408][T12135] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 198.181512][T12135] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.2877: Failed to acquire dquot type 1 [ 198.360466][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.369497][ T3197] bond_slave_1: left allmulticast mode [ 198.376328][ T3197] bond0 (unregistering): Released all slaves [ 198.384988][ T3197] bond1 (unregistering): Released all slaves [ 198.394596][T12112] netlink: 'syz.1.2877': attribute type 2 has an invalid length. [ 198.411958][T12098] chnl_net:caif_netlink_parms(): no params data found [ 198.466481][ T3197] IPVS: stopping backup sync thread 8741 ... [ 198.477600][T12143] delete_channel: no stack [ 198.482101][ T3197] hsr_slave_0: left promiscuous mode [ 198.490733][ T3197] hsr_slave_1: left promiscuous mode [ 198.496671][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.504192][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.514093][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.521820][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.533241][ T3197] veth1_macvtap: left promiscuous mode [ 198.539539][ T3197] veth0_macvtap: left promiscuous mode [ 198.540628][T12154] loop0: detected capacity change from 0 to 2048 [ 198.545070][ T3197] veth1_vlan: left promiscuous mode [ 198.556864][ T3197] veth0_vlan: left promiscuous mode [ 198.669648][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.679091][ T1531] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 198.688731][ T1531] EXT4-fs error (device loop1): ext4_release_dquot:6883: comm kworker/u8:4: Failed to release dquot type 1 [ 198.714425][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 198.732060][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 198.793392][T12157] loop1: detected capacity change from 0 to 1024 [ 198.808474][T12098] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.815592][T12098] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.824586][T12098] bridge_slave_0: entered allmulticast mode [ 198.832741][T12154] loop0: detected capacity change from 0 to 2048 [ 198.838385][T12157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.839799][T12098] bridge_slave_0: entered promiscuous mode [ 198.858969][T12098] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.866369][T12098] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.875819][T12098] bridge_slave_1: entered allmulticast mode [ 198.882501][T12098] bridge_slave_1: entered promiscuous mode [ 198.904284][T12162] usb usb5: usbfs: process 12162 (syz.2.2891) did not claim interface 0 before use [ 198.924062][T12162] loop2: detected capacity change from 0 to 512 [ 198.929360][T12098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.940067][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.955285][T12154] loop0: unable to read partition table [ 198.957887][T12098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.961420][T12154] loop0: partition table beyond EOD, truncated [ 198.976354][T12154] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 198.992125][T12098] team0: Port device team_slave_0 added [ 199.000826][T12098] team0: Port device team_slave_1 added [ 199.051423][T12098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.058438][T12098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.085322][T12098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.099006][ T29] audit: type=1326 audit(1719282483.647:12470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ea9a4d39 code=0x7ffc0000 [ 199.102261][T12098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.122874][ T29] audit: type=1326 audit(1719282483.647:12471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ea9a4d39 code=0x7ffc0000 [ 199.141644][T12170] loop3: detected capacity change from 0 to 1024 [ 199.154766][T12098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.187244][T12098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.199377][ T29] audit: type=1326 audit(1719282483.687:12472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f12ea9a4d39 code=0x7ffc0000 [ 199.223482][ T29] audit: type=1326 audit(1719282483.687:12473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ea9a4d39 code=0x7ffc0000 [ 199.228195][T12170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.247821][ T29] audit: type=1326 audit(1719282483.687:12474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ea9a4d39 code=0x7ffc0000 [ 199.283881][ T29] audit: type=1326 audit(1719282483.687:12475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f12ea9a4d39 code=0x7ffc0000 [ 199.308090][ T29] audit: type=1326 audit(1719282483.687:12476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.3.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ea9a4d39 code=0x7ffc0000 [ 199.339572][T12172] netlink: 'syz.2.2896': attribute type 1 has an invalid length. [ 199.354617][T11900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.370779][T12178] futex_wake_op: syz.0.2897 tries to shift op by -1; fix this program [ 199.384549][T12172] team0: Failed to send options change via netlink (err -105) [ 199.405236][T12172] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 199.422625][T12172] team0: Port device team_slave_0 removed [ 199.425727][T12182] loop1: detected capacity change from 0 to 256 [ 199.446013][T12098] hsr_slave_0: entered promiscuous mode [ 199.453052][T12098] hsr_slave_1: entered promiscuous mode [ 199.463244][T12098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.473240][T12098] Cannot create hsr debugfs directory [ 199.487045][T12182] FAT-fs (loop1): Directory bread(block 64) failed [ 199.493652][T12182] FAT-fs (loop1): Directory bread(block 65) failed [ 199.500465][T12182] FAT-fs (loop1): Directory bread(block 66) failed [ 199.508000][T12182] FAT-fs (loop1): Directory bread(block 67) failed [ 199.514615][T12182] FAT-fs (loop1): Directory bread(block 68) failed [ 199.521202][T12182] FAT-fs (loop1): Directory bread(block 69) failed [ 199.527916][T12182] FAT-fs (loop1): Directory bread(block 70) failed [ 199.535719][T12182] FAT-fs (loop1): Directory bread(block 71) failed [ 199.542336][T12182] FAT-fs (loop1): Directory bread(block 72) failed [ 199.548921][T12182] FAT-fs (loop1): Directory bread(block 73) failed [ 199.565380][T12189] loop3: detected capacity change from 0 to 512 [ 199.573232][T12189] EXT4-fs: Ignoring removed oldalloc option [ 199.579871][T12189] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 199.639737][T12189] netlink: 'syz.3.2901': attribute type 10 has an invalid length. [ 199.648514][T12189] bridge0: port 3(team0) entered blocking state [ 199.655023][T12189] bridge0: port 3(team0) entered disabled state [ 199.661926][T12189] team0: entered allmulticast mode [ 199.667250][T12189] team_slave_0: entered allmulticast mode [ 199.673060][T12189] team_slave_1: entered allmulticast mode [ 199.681819][T12189] team0: entered promiscuous mode [ 199.686911][T12189] team_slave_0: entered promiscuous mode [ 199.692613][T12189] team_slave_1: entered promiscuous mode [ 199.698898][T12189] bridge0: port 3(team0) entered blocking state [ 199.705196][T12189] bridge0: port 3(team0) entered forwarding state [ 199.763184][T12210] loop2: detected capacity change from 0 to 1024 [ 199.825427][T12214] netlink: 'syz.3.2909': attribute type 10 has an invalid length. [ 199.827244][T12215] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 199.839768][T12215] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.848735][T12214] veth0_macvtap: left promiscuous mode [ 199.858020][T12214] veth0_macvtap: entered promiscuous mode [ 199.872368][T12214] team0: Device macvtap0 failed to register rx_handler [ 199.879792][T12214] veth0_macvtap: left promiscuous mode [ 199.894011][T12215] hsr_slave_0: left promiscuous mode [ 199.902512][T12215] hsr_slave_1: left promiscuous mode [ 199.934149][T12224] loop3: detected capacity change from 0 to 128 [ 199.945477][T12226] loop1: detected capacity change from 0 to 128 [ 199.947376][T12224] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.959690][T12224] FAT-fs (loop3): Filesystem has been set read-only [ 199.979185][T12226] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 199.987122][T12226] FAT-fs (loop1): Filesystem has been set read-only [ 200.010189][T12098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.039518][T12098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.049091][T12098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.062865][T12098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.084887][T12233] loop3: detected capacity change from 0 to 512 [ 200.108613][T12098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.108772][T12233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.123025][T12098] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.138668][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.145777][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.148105][T12233] ext4 filesystem being mounted at /root/syzkaller.XkmAmR/18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.173184][T12233] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2914: corrupted xattr block 32: invalid header [ 200.174974][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.193631][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.198610][T12233] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 200.211081][T12233] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2914: corrupted xattr block 32: invalid header [ 200.225786][T12233] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.2914: corrupted xattr block 32: invalid header [ 200.244475][T12098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.254904][T12098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.279691][T12233] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 200.303198][T12244] loop0: detected capacity change from 0 to 512 [ 200.310724][T12233] EXT4-fs error (device loop3): ext4_get_inode_usage:901: inode #15: comm syz.3.2914: corrupted xattr block 32: invalid header [ 200.317204][T12244] EXT4-fs: Ignoring removed oldalloc option [ 200.332048][T12244] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 200.361506][T12098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.392475][T12244] netlink: 'syz.0.2919': attribute type 10 has an invalid length. [ 200.400691][T12244] batman_adv: batadv0: Removing interface: team0 [ 200.408451][T11900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.418976][T12244] bridge0: port 3(team0) entered blocking state [ 200.425475][T12244] bridge0: port 3(team0) entered disabled state [ 200.432480][T12244] team0: entered allmulticast mode [ 200.437684][T12244] team_slave_0: entered allmulticast mode [ 200.443486][T12244] team_slave_1: entered allmulticast mode [ 200.450170][T12244] team0: entered promiscuous mode [ 200.455405][T12244] team_slave_0: entered promiscuous mode [ 200.461165][T12244] team_slave_1: entered promiscuous mode [ 200.586518][T12269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 200.639801][T12098] veth0_vlan: entered promiscuous mode [ 200.650454][T12098] veth1_vlan: entered promiscuous mode [ 200.666862][T12098] veth0_macvtap: entered promiscuous mode [ 200.674955][T12098] veth1_macvtap: entered promiscuous mode [ 200.695796][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.706971][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.716955][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.727486][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.738273][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.748873][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.758852][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.770135][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.783249][T12098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.798106][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.808633][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.818546][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.829623][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.839531][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.849970][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.868582][T12098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.877634][T12098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.887075][T12098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.895816][T12098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.904663][T12098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.986422][T12303] netlink: 'syz.0.2935': attribute type 3 has an invalid length. [ 201.274031][T12323] loop4: detected capacity change from 0 to 1024 [ 201.288151][T12323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.333846][T12331] loop0: detected capacity change from 0 to 2048 [ 201.535077][T12337] loop0: detected capacity change from 0 to 2048 [ 201.636411][T12337] loop0: unable to read partition table [ 201.642321][T12337] loop0: partition table beyond EOD, truncated [ 201.652929][T12337] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 201.710238][T12352] dummy0: entered promiscuous mode [ 201.717744][T12352] batman_adv: batadv0: Adding interface: macsec1 [ 201.724119][T12352] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.759181][T12352] batman_adv: batadv0: Interface activated: macsec1 [ 201.770154][T12352] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 201.800577][T12354] __nla_validate_parse: 9 callbacks suppressed [ 201.800646][T12354] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2951'. [ 201.840848][T12360] loop0: detected capacity change from 0 to 128 [ 202.086929][T12390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12390 comm=syz.0.2963 [ 202.100080][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2963'. [ 202.116170][T12390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.135320][T12390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.142618][T12390] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 202.155272][T12390] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 202.164010][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 202.193818][T12397] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2965'. [ 202.590947][T12411] loop4: detected capacity change from 0 to 128 [ 202.859629][T12415] netlink: 'syz.2.2971': attribute type 10 has an invalid length. [ 202.867552][T12415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2971'. [ 202.876817][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.884070][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.893469][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.900599][T12415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.907982][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.915134][T12415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.925456][T12415] team0: Port device bridge0 added [ 203.126096][T12430] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2977'. [ 203.174123][T12437] tipc: Started in network mode [ 203.179103][T12437] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 203.186701][T12437] tipc: Enabling of bearer rejected, failed to enable media [ 203.377912][T12462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.387982][T12462] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 203.394569][T12462] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 203.402069][T12462] vhci_hcd vhci_hcd.0: Device attached [ 203.408466][T12463] vhci_hcd: connection closed [ 203.408574][ T3197] vhci_hcd: stop threads [ 203.417615][ T3197] vhci_hcd: release socket [ 203.422024][ T3197] vhci_hcd: disconnect device [ 203.762784][T12472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2991'. [ 203.802735][T12475] loop3: detected capacity change from 0 to 512 [ 203.811097][T12475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.822284][T12475] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 203.837339][T12475] EXT4-fs (loop3): 1 truncate cleaned up [ 203.885945][T12475] loop3: detected capacity change from 512 to 11 [ 203.897049][T11900] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 203.916184][T11900] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 203.925412][T11900] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 204.062646][T12486] netlink: 'syz.4.2995': attribute type 10 has an invalid length. [ 204.070614][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2995'. [ 204.081823][T12486] ipvlan0: entered promiscuous mode [ 204.082953][T12489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12489 comm=syz.2.2997 [ 204.087087][T12486] ipvlan0: entered allmulticast mode [ 204.087130][T12486] veth0_vlan: entered allmulticast mode [ 204.088964][T12486] bridge0: port 3(ipvlan0) entered blocking state [ 204.117768][T12486] bridge0: port 3(ipvlan0) entered disabled state [ 204.125008][T12486] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 204.141853][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 204.156995][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.178988][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.190233][T12489] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 204.214576][T12489] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 204.218227][T12495] loop0: detected capacity change from 0 to 128 [ 204.223351][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 204.223365][ T29] audit: type=1400 audit(1719282488.757:12557): avc: denied { connect } for pid=12493 comm="syz.0.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 204.356862][T12507] loop1: detected capacity change from 0 to 512 [ 204.364928][T12507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.376279][T12495] vhci_hcd: invalid port number 128 [ 204.381523][T12495] vhci_hcd: invalid port number 128 [ 204.399201][T12507] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 204.411527][T12511] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.416285][T12507] EXT4-fs (loop1): 1 truncate cleaned up [ 204.447473][ T7557] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Gr5biU/351/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.473509][ T7557] EXT4-fs error (device loop1): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.494924][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.510227][ T7557] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Gr5biU/351/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.536378][ T7557] EXT4-fs error (device loop1): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.538415][T12511] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.557750][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.581789][ T7557] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Gr5biU/351/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.606377][ T7557] EXT4-fs error (device loop1): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.624626][T12505] chnl_net:caif_netlink_parms(): no params data found [ 204.626884][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.627073][ T7557] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Gr5biU/351/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.673400][ T7557] EXT4-fs error (device loop1): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.694592][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.710321][ T7557] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.Gr5biU/351/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.735668][ T7557] EXT4-fs error (device loop1): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 204.736835][T12511] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.757216][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.781220][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.797150][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.812243][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.812713][T12505] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.829840][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.833936][T12505] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.856366][T12505] bridge_slave_0: entered allmulticast mode [ 204.858072][ T7557] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 204.862902][T12505] bridge_slave_0: entered promiscuous mode [ 204.894872][T12511] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.909249][T12505] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.916526][T12505] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.925159][T12505] bridge_slave_1: entered allmulticast mode [ 204.931738][T12505] bridge_slave_1: entered promiscuous mode [ 204.949105][ T29] audit: type=1326 audit(1719282489.497:12558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.3008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f803089ad39 code=0x0 [ 204.984962][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.996993][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.009659][T12529] dccp_close: ABORT with 572 bytes unread [ 205.022079][T12505] team0: Port device team_slave_0 added [ 205.029104][T12505] team0: Port device team_slave_1 added [ 205.037232][T12511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.053632][T12511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.070192][T12511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.079042][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.086140][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.112205][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.127388][T12511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.136063][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.143103][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.169147][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.198297][T12505] hsr_slave_0: entered promiscuous mode [ 205.204521][T12505] hsr_slave_1: entered promiscuous mode [ 205.210537][T12505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.218159][T12505] Cannot create hsr debugfs directory [ 205.224868][ T29] audit: type=1400 audit(1719282489.767:12559): avc: denied { write } for pid=12530 comm="syz.2.3009" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 205.314729][T12505] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.348955][ T29] audit: type=1326 audit(1719282489.897:12560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d74e2dd39 code=0x7ffc0000 [ 205.373182][ T29] audit: type=1326 audit(1719282489.897:12561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d74e2dd39 code=0x7ffc0000 [ 205.401110][ T29] audit: type=1326 audit(1719282489.947:12562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d74e2dd39 code=0x7ffc0000 [ 205.424727][ T29] audit: type=1326 audit(1719282489.947:12563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d74e2dd39 code=0x7ffc0000 [ 205.448655][ T29] audit: type=1326 audit(1719282489.947:12564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d74e2dd39 code=0x7ffc0000 [ 205.472429][ T29] audit: type=1326 audit(1719282489.947:12565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5d74e2dd39 code=0x7ffc0000 [ 205.496537][ T29] audit: type=1326 audit(1719282489.947:12566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.2.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d74e2dd39 code=0x7ffc0000 [ 205.522077][T12505] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.590942][T12505] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.633607][T12505] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.652686][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'. [ 205.687046][T12536] chnl_net:caif_netlink_parms(): no params data found [ 205.731019][T12536] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.738181][T12536] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.748478][T12536] bridge_slave_0: entered allmulticast mode [ 205.755216][T12536] bridge_slave_0: entered promiscuous mode [ 205.774482][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.781658][T12536] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.803390][T12536] bridge_slave_1: entered allmulticast mode [ 205.812868][T12536] bridge_slave_1: entered promiscuous mode [ 205.833717][T12505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.849930][T12505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.861130][T12536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.870969][T12505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.887456][T12536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.896767][T12505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.929073][T12536] team0: Port device team_slave_0 added [ 205.936768][T12536] team0: Port device team_slave_1 added [ 205.960034][T12536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.967103][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.993586][T12536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.009171][T12536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.016230][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.042864][T12536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.057251][ T3197] team0: left allmulticast mode [ 206.062159][ T3197] team_slave_0: left allmulticast mode [ 206.068473][ T3197] team_slave_1: left allmulticast mode [ 206.074094][ T3197] team0: left promiscuous mode [ 206.078954][ T3197] team_slave_0: left promiscuous mode [ 206.084397][ T3197] team_slave_1: left promiscuous mode [ 206.089986][ T3197] bridge0: port 3(team0) entered disabled state [ 206.098132][ T3197] bridge_slave_1: left allmulticast mode [ 206.103826][ T3197] bridge_slave_1: left promiscuous mode [ 206.109580][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.118143][ T3197] bridge_slave_0: left allmulticast mode [ 206.123918][ T3197] bridge_slave_0: left promiscuous mode [ 206.130349][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.137702][T12582] loop2: detected capacity change from 0 to 512 [ 206.279899][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.293089][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.307288][ T3197] bond0 (unregistering): Released all slaves [ 206.318171][ T3197] bond1 (unregistering): Released all slaves [ 206.327853][ T3197] bond2 (unregistering): Released all slaves [ 206.399946][T12536] hsr_slave_0: entered promiscuous mode [ 206.408434][T12536] hsr_slave_1: entered promiscuous mode [ 206.421308][T12536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.434954][T12536] Cannot create hsr debugfs directory [ 206.446853][ T3197] hsr_slave_0: left promiscuous mode [ 206.453442][ T3197] hsr_slave_1: left promiscuous mode [ 206.471746][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.479495][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.492018][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.499656][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.508343][ T3197] batman_adv: batadv0: Interface deactivated: macsec1 [ 206.515258][ T3197] batman_adv: batadv0: Removing interface: macsec1 [ 206.534733][ T3197] dummy0: left promiscuous mode [ 206.539740][ T3197] veth1_macvtap: left promiscuous mode [ 206.545268][ T3197] veth1_vlan: left promiscuous mode [ 206.550756][ T3197] veth0_vlan: left promiscuous mode [ 206.659371][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 206.671121][ T3197] team0 (unregistering): Port device team_slave_0 removed [ 206.749738][T12618] x_tables: ip_tables: osf match: only valid for protocol 6 [ 206.762597][T12505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.801360][T12505] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.830109][T12624] __nla_validate_parse: 2 callbacks suppressed [ 206.830127][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'. [ 206.867515][T12536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.878557][T12536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.909600][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.916747][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.940201][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.947375][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.969233][T12536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.979816][T12536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.081585][T12536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.092938][T12536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.113023][T12505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.190141][T12505] veth0_vlan: entered promiscuous mode [ 207.199094][T12505] veth1_vlan: entered promiscuous mode [ 207.218185][T12505] veth0_macvtap: entered promiscuous mode [ 207.229494][T12536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.240446][T12536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.253271][T12505] veth1_macvtap: entered promiscuous mode [ 207.264376][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.275595][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.285561][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.296069][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.306815][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.317293][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.327982][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.338446][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.350262][T12505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.361930][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.372629][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.382571][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.393721][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.403567][T12505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.414096][T12505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.426210][T12505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.436396][T12505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.445324][T12505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.454825][T12505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.463706][T12505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.479507][ T1531] bridge_slave_1: left allmulticast mode [ 207.485202][ T1531] bridge_slave_1: left promiscuous mode [ 207.490892][ T1531] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.502918][ T1531] bridge_slave_0: left allmulticast mode [ 207.508631][ T1531] bridge_slave_0: left promiscuous mode [ 207.514289][ T1531] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.661694][T12647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12647 comm=syz.0.3043 [ 207.694067][T12649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12649 comm=syz.4.3044 [ 207.798648][ T1531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.808105][ T1531] bond_slave_0: left promiscuous mode [ 207.815135][ T1531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.840449][ T1531] bond_slave_1: left promiscuous mode [ 207.858514][ T1531] bond0 (unregistering): Released all slaves [ 207.930190][T12536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.951130][ T1531] tipc: Left network mode [ 207.955744][T12536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.970682][T12536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.980265][T12536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.009708][ T1531] hsr_slave_0: left promiscuous mode [ 208.016567][ T1531] hsr_slave_1: left promiscuous mode [ 208.029322][ T1531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.037241][ T1531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.057556][ T1531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.072405][ T1531] veth1_macvtap: left promiscuous mode [ 208.078023][ T1531] veth0_macvtap: left promiscuous mode [ 208.083546][ T1531] veth1_vlan: left promiscuous mode [ 208.088926][ T1531] veth0_vlan: left promiscuous mode [ 208.148705][T12666] loop2: detected capacity change from 0 to 764 [ 208.169583][T12666] rock: directory entry would overflow storage [ 208.175785][T12666] rock: sig=0x4654, size=5, remaining=4 [ 208.261316][ T1531] team0 (unregistering): Port device team_slave_1 removed [ 208.273026][ T1531] team0 (unregistering): Port device team_slave_0 removed [ 208.332746][T12663] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 208.348889][T12670] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 208.369950][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.378745][T12670] bond0: (slave team0): Enslaving as an active interface with an up link [ 208.430155][T12536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.451765][T12683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12683 comm=syz.3.3054 [ 208.454293][T12536] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.481218][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.488342][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.508075][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.515214][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.533637][T12690] netlink: 'syz.2.3057': attribute type 11 has an invalid length. [ 208.563066][T12536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.573533][T12536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.654016][T12707] loop2: detected capacity change from 0 to 2048 [ 208.673411][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3061'. [ 208.710291][T12712] netlink: 'syz.3.3063': attribute type 10 has an invalid length. [ 208.724038][T12536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.874772][T12536] veth0_vlan: entered promiscuous mode [ 208.885357][T12536] veth1_vlan: entered promiscuous mode [ 208.914381][T12536] veth0_macvtap: entered promiscuous mode [ 208.928075][T12536] veth1_macvtap: entered promiscuous mode [ 208.941913][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.952595][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.962669][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.973226][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.983156][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.993747][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.003617][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.014252][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.026303][T12536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.037806][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.048300][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.058244][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.068699][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.078543][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.089043][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.098882][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.109408][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.125526][T12536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.134280][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 209.216763][T12536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.225670][T12536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.234473][T12536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.243321][T12536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.267692][T12737] netlink: 'syz.3.3071': attribute type 13 has an invalid length. [ 209.275549][T12737] netlink: 'syz.3.3071': attribute type 58 has an invalid length. [ 209.281021][T12739] loop2: detected capacity change from 0 to 512 [ 209.283390][T12737] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3071'. [ 209.323371][T12737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3071'. [ 209.376591][T12744] netlink: 'syz.3.3074': attribute type 10 has an invalid length. [ 209.443267][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 209.443282][ T29] audit: type=1400 audit(2000000002.639:12671): avc: denied { bind } for pid=12741 comm="syz.0.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.452757][T12749] loop1: detected capacity change from 0 to 2048 [ 209.493795][T12751] x_tables: ip_tables: osf match: only valid for protocol 6 [ 209.585084][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3077'. [ 209.612467][T12754] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.785033][T12768] loop2: detected capacity change from 0 to 764 [ 209.793742][T12768] rock: directory entry would overflow storage [ 209.800012][T12768] rock: sig=0x4654, size=5, remaining=4 [ 209.847314][ T29] audit: type=1326 audit(2000000003.049:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.3.3076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09364ebd39 code=0x0 [ 209.887520][T12775] loop1: detected capacity change from 0 to 1024 [ 209.947790][T12785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.003383][T12785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.063516][T12785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.125243][T12785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.194542][T12785] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.207295][T12785] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.219184][T12785] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.232655][T12785] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.277717][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'. [ 210.293582][T12790] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.344312][T12794] loop0: detected capacity change from 0 to 1024 [ 210.352393][T12794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.367849][T12794] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 210.379409][T12794] System zones: 0-1, 3-12 [ 210.395985][ T29] audit: type=1400 audit(2000000003.589:12673): avc: denied { read } for pid=12793 comm="syz.0.3092" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 210.715374][T12813] loop0: detected capacity change from 0 to 1024 [ 210.733351][T12813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.751121][T12813] ext4: Unknown parameter 'uid>00000000000000000000' [ 210.821010][ T29] audit: type=1326 audit(2000000004.019:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.0.3099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1ecd05d39 code=0x0 [ 210.857399][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 210.881585][ T29] audit: type=1400 audit(2000000004.049:12675): avc: denied { setattr } for pid=12819 comm="syz.4.3103" name="" dev="pipefs" ino=44560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 210.897999][T12826] loop4: detected capacity change from 0 to 512 [ 210.942875][T12826] EXT4-fs: quotafile must be on filesystem root [ 210.978337][T12828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3105'. [ 210.998145][T12831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12831 comm=syz.2.3101 [ 211.049863][T12835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3106'. [ 211.134834][T12846] loop0: detected capacity change from 0 to 512 [ 211.146826][T12846] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.158274][T12849] loop2: detected capacity change from 0 to 764 [ 211.168976][T12849] rock: directory entry would overflow storage [ 211.175158][T12849] rock: sig=0x4654, size=5, remaining=4 [ 211.182988][T12846] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 211.206193][T12846] EXT4-fs (loop0): 1 truncate cleaned up [ 211.360267][T12858] loop3: detected capacity change from 0 to 2048 [ 211.376968][T12858] EXT4-fs (loop3): failed to initialize system zone (-117) [ 211.384359][T12858] EXT4-fs (loop3): mount failed [ 211.474163][T12863] loop3: detected capacity change from 0 to 256 [ 211.483013][T12863] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.847533][T12868] __nla_validate_parse: 5 callbacks suppressed [ 211.847552][T12868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3118'. [ 211.866153][T12868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3118'. [ 211.923923][T12884] loop3: detected capacity change from 0 to 512 [ 211.932705][T12884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.953280][T12884] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 211.977511][T12884] EXT4-fs (loop3): 1 truncate cleaned up [ 211.984848][T12895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12895 comm=syz.1.3124 [ 212.004663][T12505] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.V8qxOT/24/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.031322][T12505] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.052771][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.069483][T12505] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.V8qxOT/24/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.103573][T12505] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.125399][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.141956][T12505] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.V8qxOT/24/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.175547][T12906] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3128'. [ 212.190687][T12505] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.233464][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.250103][T12505] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.V8qxOT/24/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.275190][T12505] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.316644][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.332285][T12505] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz-executor: path /root/syzkaller.V8qxOT/24/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.363326][T12505] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 212.396029][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.432484][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.463788][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.487204][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.503428][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.520489][T12505] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 212.590901][T12926] loop2: detected capacity change from 0 to 764 [ 212.597898][ T29] audit: type=1326 audit(2000000005.799:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b125bfd39 code=0x7ffc0000 [ 212.621683][ T29] audit: type=1326 audit(2000000005.799:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b125bfd39 code=0x7ffc0000 [ 212.648849][T12928] loop1: detected capacity change from 0 to 1024 [ 212.661454][ T29] audit: type=1326 audit(2000000005.819:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2b125bfd39 code=0x7ffc0000 [ 212.685262][ T29] audit: type=1326 audit(2000000005.819:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b125bfd39 code=0x7ffc0000 [ 212.709277][ T29] audit: type=1326 audit(2000000005.819:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b125bfd39 code=0x7ffc0000 [ 212.904318][T11018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.984346][T12963] loop2: detected capacity change from 0 to 256 [ 212.994036][T11018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.015121][T12959] loop0: detected capacity change from 0 to 512 [ 213.025901][T12959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.036948][T12959] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 213.054429][T11018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.054506][T12959] EXT4-fs (loop0): 1 truncate cleaned up [ 213.081218][T12963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3148'. [ 213.132606][T11018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.276499][T11018] bridge_slave_1: left allmulticast mode [ 213.282168][T11018] bridge_slave_1: left promiscuous mode [ 213.287951][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.304674][T11018] bridge_slave_0: left allmulticast mode [ 213.310572][T11018] bridge_slave_0: left promiscuous mode [ 213.316408][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.317882][T12989] loop0: detected capacity change from 0 to 2048 [ 213.350156][T12989] EXT4-fs (loop0): failed to initialize system zone (-117) [ 213.362985][T12989] EXT4-fs (loop0): mount failed [ 213.431995][T11018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.446701][T11018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.463095][T11018] bond0 (unregistering): (slave team0): Releasing backup interface [ 213.476220][T11018] bond0 (unregistering): Released all slaves [ 213.484285][T13004] loop4: detected capacity change from 0 to 512 [ 213.494249][T13004] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.512446][T12964] chnl_net:caif_netlink_parms(): no params data found [ 213.521568][T13004] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 213.537546][T13004] EXT4-fs (loop4): 1 truncate cleaned up [ 213.559044][T13008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3161'. [ 213.584035][T12964] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.591432][T12964] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.599561][T12964] bridge_slave_0: entered allmulticast mode [ 213.606421][T12964] bridge_slave_0: entered promiscuous mode [ 213.616497][T11018] hsr_slave_0: left promiscuous mode [ 213.629308][T11018] hsr_slave_1: left promiscuous mode [ 213.635252][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.642793][T11018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.650841][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.658453][T11018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.658828][T13020] loop4: detected capacity change from 0 to 512 [ 213.677597][T13020] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3162: bg 0: block 127: padding at end of block bitmap is not set [ 213.693915][T11018] veth1_macvtap: left promiscuous mode [ 213.699476][T11018] veth0_macvtap: left promiscuous mode [ 213.699644][T13020] EXT4-fs (loop4): Remounting filesystem read-only [ 213.704996][T11018] veth1_vlan: left promiscuous mode [ 213.711960][T13020] EXT4-fs (loop4): 1 truncate cleaned up [ 213.716850][T11018] veth0_vlan: left promiscuous mode [ 213.723718][T13020] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 213.842941][T11018] team0 (unregistering): Port device team_slave_1 removed [ 213.853101][T11018] team0 (unregistering): Port device team_slave_0 removed [ 213.893817][T12964] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.900978][T12964] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.909662][T12964] bridge_slave_1: entered allmulticast mode [ 213.916192][T12964] bridge_slave_1: entered promiscuous mode [ 213.939479][T13025] netlink: 'syz.2.3164': attribute type 10 has an invalid length. [ 213.957372][T13025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.977928][T13025] team0: Port device batadv0 added [ 213.985479][T12964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.016369][T12964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.052446][T12964] team0: Port device team_slave_0 added [ 214.060449][T12964] team0: Port device team_slave_1 added [ 214.094968][T12964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.101994][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.127912][T12964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.170334][T12964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.177359][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.203268][T12964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.247168][T12964] hsr_slave_0: entered promiscuous mode [ 214.253437][T12964] hsr_slave_1: entered promiscuous mode [ 214.528274][T12964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.536786][T12964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.545350][T12964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.554324][T12964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.589593][T12964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.603044][T12964] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.613996][ T3138] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.621104][ T3138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.633799][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.640889][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.719993][T12964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.793043][T12964] veth0_vlan: entered promiscuous mode [ 214.801508][T12964] veth1_vlan: entered promiscuous mode [ 214.814094][T12964] veth0_macvtap: entered promiscuous mode [ 214.824198][T12964] veth1_macvtap: entered promiscuous mode [ 214.837979][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.848618][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.858681][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.869515][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.879408][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.889897][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.900032][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.910745][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.922238][T12964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.934524][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.945127][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.955033][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.965548][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.975457][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.985938][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.995730][T12964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.006234][T12964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.025082][T12964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.037529][T12964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.046354][T12964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.055059][T12964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.063796][T12964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.276688][T13094] loop3: detected capacity change from 0 to 512 [ 215.285588][T13094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3181: bg 0: block 127: padding at end of block bitmap is not set [ 215.300395][T13094] EXT4-fs (loop3): Remounting filesystem read-only [ 215.307349][T13094] EXT4-fs (loop3): 1 truncate cleaned up [ 215.313485][T13094] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 215.441798][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3184'. [ 215.451794][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.771367][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 215.771382][ T29] audit: type=1326 audit(2000000008.969:12779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13109 comm="syz.3.3186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bdb0ed39 code=0x0 [ 215.872988][T13111] dccp_close: ABORT with 572 bytes unread [ 215.956905][ T29] audit: type=1326 audit(2000000009.159:12780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 215.981710][ T29] audit: type=1326 audit(2000000009.159:12781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.005526][ T29] audit: type=1326 audit(2000000009.159:12782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.029272][ T29] audit: type=1326 audit(2000000009.159:12783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.053099][ T29] audit: type=1326 audit(2000000009.159:12784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.076750][ T29] audit: type=1326 audit(2000000009.159:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.100459][ T29] audit: type=1326 audit(2000000009.159:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.124024][ T29] audit: type=1326 audit(2000000009.159:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.147622][ T29] audit: type=1326 audit(2000000009.159:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13116 comm="syz.0.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ecd05d39 code=0x7ffc0000 [ 216.351173][T13143] netlink: 494 bytes leftover after parsing attributes in process `syz.4.3201'. [ 216.380426][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3202'. [ 216.398173][T13151] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 216.445696][T13151] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 216.451083][T13158] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.574354][T13162] netlink: 'syz.2.3207': attribute type 1 has an invalid length. [ 216.640678][T13162] serio: Serial port pts0 [ 216.699273][T13184] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3217'. [ 216.738575][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 216.888195][T13202] loop2: detected capacity change from 0 to 512 [ 217.125021][T13210] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3229'. [ 217.209912][T13212] loop2: detected capacity change from 0 to 512 [ 217.600089][T13243] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3240'. [ 217.693755][T13245] loop2: detected capacity change from 0 to 512 [ 217.694245][T13247] loop3: detected capacity change from 0 to 512 [ 217.708389][T13247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.721137][T13247] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 217.736161][T13247] EXT4-fs (loop3): 1 truncate cleaned up [ 217.742156][T13247] EXT4-fs mount: 23 callbacks suppressed [ 217.742169][T13247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.786074][T13255] loop0: detected capacity change from 0 to 1024 [ 217.795956][T13247] loop3: detected capacity change from 512 to 11 [ 217.808899][T13255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.822839][T12964] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 217.852029][T13255] VFS: Lookup of 'file0' in ext4 loop0 would have caused loop [ 217.852213][T12964] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: Out of memory [ 217.884582][T12964] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 217.897517][T12964] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.908259][T13271] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3251'. [ 217.934754][T13267] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3250'. [ 217.963682][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 217.982063][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.072480][T13291] netlink: 'syz.0.3256': attribute type 5 has an invalid length. [ 218.080290][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'. [ 218.120169][T13293] loop0: detected capacity change from 0 to 512 [ 218.148138][T13293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.160801][T13293] ext4 filesystem being mounted at /root/syzkaller.0MjnHM/503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.174429][T13293] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3257: corrupted xattr block 32: invalid header [ 218.187745][T13293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 218.196794][T13293] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3257: corrupted xattr block 32: invalid header [ 218.210430][T13293] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3257: corrupted xattr block 32: invalid header [ 218.223684][T13293] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 218.235163][T13293] EXT4-fs error (device loop0): ext4_get_inode_usage:901: inode #15: comm syz.0.3257: corrupted xattr block 32: invalid header [ 218.272028][ T6170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.353502][T13302] loop0: detected capacity change from 0 to 2048 [ 218.513474][T13304] loop0: detected capacity change from 0 to 2048 [ 218.601726][T13304] loop0: unable to read partition table [ 218.607566][T13304] loop0: partition table beyond EOD, truncated [ 218.613757][T13304] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 218.780772][T13314] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3264'. [ 218.853155][T13318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.865166][T13318] team0: Port device bond0 added [ 218.938635][T13333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13333 comm=syz.4.3273 [ 219.085755][T13356] dccp_close: ABORT with 572 bytes unread [ 219.114161][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'. [ 219.123356][T13361] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 219.131123][T13361] netlink: 'syz.4.3282': attribute type 2 has an invalid length. [ 219.138969][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'. [ 219.150513][T13362] loop4: detected capacity change from 0 to 512 [ 219.158522][T13362] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 219.244952][T13366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13366 comm=syz.4.3283 [ 219.258545][T13366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3283'. [ 219.671124][T13400] ================================================================== [ 219.679235][T13400] BUG: KCSAN: data-race in __d_instantiate / step_into [ 219.686079][T13400] [ 219.688388][T13400] read-write to 0xffff88811926ee40 of 4 bytes by task 13399 on cpu 0: [ 219.696539][T13400] __d_instantiate+0x2cd/0x3c0 [ 219.701300][T13400] d_instantiate_new+0x5c/0xf0 [ 219.706051][T13400] ext4_add_nondir+0x16c/0x1a0 [ 219.710810][T13400] ext4_mknod+0x210/0x2f0 [ 219.715129][T13400] vfs_mknod+0x2d4/0x310 [ 219.719363][T13400] unix_bind+0x2de/0x870 [ 219.723598][T13400] __sys_bind+0x15b/0x1d0 [ 219.727928][T13400] __x64_sys_bind+0x41/0x50 [ 219.732435][T13400] x64_sys_call+0x25b5/0x2d70 [ 219.737106][T13400] do_syscall_64+0xc9/0x1c0 [ 219.741604][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.747501][T13400] [ 219.749814][T13400] read to 0xffff88811926ee40 of 4 bytes by task 13400 on cpu 1: [ 219.757435][T13400] step_into+0x12f/0x810 [ 219.761678][T13400] walk_component+0x169/0x230 [ 219.766353][T13400] path_lookupat+0x10a/0x2b0 [ 219.770928][T13400] filename_lookup+0x127/0x300 [ 219.775684][T13400] kern_path+0x39/0x110 [ 219.780004][T13400] unix_find_other+0x88/0x550 [ 219.784680][T13400] unix_dgram_connect+0x2c5/0x830 [ 219.789701][T13400] __sys_connect+0x1a9/0x1c0 [ 219.794291][T13400] __x64_sys_connect+0x41/0x50 [ 219.799063][T13400] x64_sys_call+0x2961/0x2d70 [ 219.803736][T13400] do_syscall_64+0xc9/0x1c0 [ 219.808246][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.814234][T13400] [ 219.816547][T13400] value changed: 0x00000000 -> 0x00500000 [ 219.822245][T13400] [ 219.824549][T13400] Reported by Kernel Concurrency Sanitizer on: [ 219.830683][T13400] CPU: 1 PID: 13400 Comm: syz.4.3294 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 219.840827][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 219.850875][T13400] ================================================================== [ 220.782865][ T3197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.828835][ T3197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.889029][ T3197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.938886][ T3197] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.996793][ T3197] bridge_slave_1: left allmulticast mode [ 221.002644][ T3197] bridge_slave_1: left promiscuous mode [ 221.008359][ T3197] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.016109][ T3197] bridge_slave_0: left allmulticast mode [ 221.021765][ T3197] bridge_slave_0: left promiscuous mode [ 221.027447][ T3197] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.108879][ T3197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.119482][ T3197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.129789][ T3197] bond0 (unregistering): Released all slaves [ 221.248150][ T3197] hsr_slave_0: left promiscuous mode [ 221.253859][ T3197] hsr_slave_1: left promiscuous mode [ 221.259498][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.266911][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.274407][ T3197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.281813][ T3197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.290453][ T3197] veth1_macvtap: left promiscuous mode [ 221.296076][ T3197] veth0_macvtap: left promiscuous mode [ 221.301597][ T3197] veth1_vlan: left promiscuous mode [ 221.306883][ T3197] veth0_vlan: left promiscuous mode [ 221.378056][ T3197] team0 (unregistering): Port device team_slave_1 removed [ 221.388404][ T3197] team0 (unregistering): Port device team_slave_0 removed