last executing test programs: 2.444010472s ago: executing program 2 (id=111): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket(0x0, 0x2, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x1c, r5, 0xf03, 0x0, 0x0, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r6, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@flushpolicy={0x68, 0x1d, 0x8, 0x70bd25, 0x25cfdbfc, "", [@algo_auth={0x55, 0x1, {{'sha1\x00'}, 0x68, "c764cfdecb1c2dc07a2e5b02d3"}}]}, 0x68}}, 0xc000) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) socket$kcm(0x11, 0xa, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdef}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x108, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6d4f1eb44689036a67d706d87de35ddbec2640bc233b68e8"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c67b7a29ed7576c05e29719b690734566aa031cd002ef5d4"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9bf6e1f322976768b8c553d9b65f0fae410d3e89da2a7860"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d4500b9eb9e35943210191ef71ffc756dbf09dd64278813"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x108}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_io_uring_setup(0x7435, &(0x7f0000000340)={0x0, 0x263a, 0x20, 0x0, 0xb0}, &(0x7f0000000180), &(0x7f00000002c0)) 2.204313771s ago: executing program 2 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff81, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000007000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 2.116223068s ago: executing program 2 (id=116): ioperm(0x0, 0x5, 0x2) io_setup(0x9, &(0x7f0000000100)) (async) io_setup(0x9, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="3af000000000000059760000", @ANYRES32, @ANYBLOB="000000000000000095000000000000"], 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="3af000000000000059760000", @ANYRES32, @ANYBLOB="000000000000000095000000000000"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_bond\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYRES8=r2], 0x14c}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) r5 = io_uring_setup(0x653, &(0x7f00000003c0)={0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)={0x40000002}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r7, 0x0, 0x0, &(0x7f00000101c0)={@private, @remote}, &(0x7f0000010180)=0xc) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x40, 0x0, @vifc_lcl_addr=@private=0xa010101, @empty}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000001b40)=0xa, 0x4) socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) inotify_init1(0x800) futex_waitv(&(0x7f0000001b00)=[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0}, {0xe, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0}, {0xfffffffffffffffe, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x10001, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0xfffffffffffffffe, 0x82}, {0x0, 0x0}, {0x0, 0x0, 0x2}, {0x0, 0x0}, {0x0, 0x0}], 0x30, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'netpci0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'ip_vti0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x450) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1.871606588s ago: executing program 2 (id=127): socket$packet(0x11, 0x0, 0x300) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000001180), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x2d}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 1.798898224s ago: executing program 2 (id=130): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000010000000000000905000000003030000079e2a31b2152349a193afe29f1262bb68eac03e94ffff0ac61fda8d5f27c424236f703cea57986303c1f117f06532d82f6273944c9c541d05ad329ce4b214f54d6db8a206ca1f8f63e45a1b1dcc8fccf63abc62293edf0e29146d8e359ca5c14e1293a70238c632311c8a27052bbf4864600dd642e6356a66f30adcfd58a09001a283e0719d61ebc2b754d0893d86341d7063717f17e8e093e4591eb4e8e358974d6"], &(0x7f0000000780)=""/205, 0x29, 0xcd, 0x1, 0x4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x9, '\x00', 0x0, r0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES16=r0, @ANYBLOB="d55ec389a0f441cb14ee47a010c522801118258a0328f2f5491c5b283c79713649c406ff2fb8c638b37826e3ba66ce863a03bf182cc276329bd6d2b2afa77e7547b92fcf5f66ec648e36eb654b820525e23d924ae3505105a5c1924348fdd6c444d98a1a00cc783e27b26415d4bc57b6c54a48a3ef26e7da2154eb4ec28cd9f72958b8a817acdaf9588b4f1310defba11b5b9516fcc51d02bd567baee8", @ANYBLOB="00ff000042000000b70100000800000085000000aa000000950ee7f33bf79eea98b8aaa12b247af51ba88ec9864dba620c1b6ecb5974f59e87fbd41ed44bc5c35a2cf0dde4d5a5416663d84572a5a449c112241a52271fcb7996b68485627e80d7af5dc52e0d849ff96a614b1626a1a0"], &(0x7f0000000300)='GPL\x00', 0xc}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r4, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) membarrier(0x40, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="ea", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000074020000140a0102000000000000000002000009f2000800910b1567fb9aea9bcc41d7fd73e86a1be59049ea7741cfa05d4d393438035eca00092cc521da49ae229fa66b1c064e1ec691639d9260b60c94a868bd301c0f43b793d44a0dc1a86cf86b63988b1078c7d0cfcea9e530a2fa56c45eeffca8c06c7ebcaa42696290e2c2773916e35575cffceb04604f12c0790051f49cd8d671667d4be895a5c8cf942bcb0248fe56f6ba932d39aaa900e40ce91b9d5c35d92c0b914dafe1ec0fb226239f05bc6cea7b51eaf544f04d29478d009f36f1ed3709de6e25186a5b992c96436ede186c5e66ec395f7e2f6723179c786307458811e1fee653cf40e560831e3460ac9ae9ea00000c00064000000000000000040900010073797a300000000008000340000000070900020073797a31000000000900020073797a30000000001c000800ce1a0cc647f27361b99fffd96ae114290cfecc636de82791f80008002f34e3e99118b158dffdaff995e8a072bd552a2a3fc26c1a5dd4fc14b0151c737af2cea4397b5e27f8cdf46c76abe782e827fe5f4c9a45f260cd5c388f17748e73d289bcec81cf35e5d3ad5d8a29af74bafc6beaa9cc4ff8570d0c71df4daa4b786e0d7f0b9010da6dc9496c5543c0833060c94e13eca63f832da453656b8feb6080bfbdeceb4f04b733511bb130f392b482a5329c6bf254da530eea94288251ba280bd8412215ab3d63110bf707dce4efe5480d69ecbac0e5504397f7f7491835f042247e049498a738961e33c39f5be3511bbd9559c8d485bf3e3e3c13978039921be635adc9d81adf76a08cc452366c1b755b08000340000000021500080088ef8aeb23a05cab4a60343f6d1b1012fb00000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b0001006e756d67656e00002c000280080001400000000008000240000000030800044000000000080003400000000108000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x324}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) sendto$inet(r6, &(0x7f00000000c0)="cb", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000005c0)={0x2, 0xa, 0x8, 0x5, 0x0}, &(0x7f0000000600)=0x10) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756ca3c82c00"]) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000640)={r7, @in={{0x2, 0x4e21, @loopback}}, 0x3, 0x28a0}, &(0x7f0000000700)=0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x8) 1.071029333s ago: executing program 1 (id=148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0xf0ff, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc0111"], 0x27c}}, 0x0) 1.014302487s ago: executing program 1 (id=149): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000)=0xe4, 0x4) 986.61175ms ago: executing program 1 (id=151): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='westwood\x00', 0x9) bind$inet(r0, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xf401}, 0x100) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x22004006, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@commit={'commit', 0x3d, 0x10001}}, {@block_validity}, {@grpjquota, 0x22}], [{@uid_lt={'uid<', 0xee00}}, {@seclabel}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_role={'subj_role', 0x3d, 'uid<\xee\x9a\xd9!\xdf\xc1\x03\xd9\x1d\x8c\xd8\x97Umv\x17z\xb4BW\xf7\x1e\x02\xc9\xa4\x8c\xe0)\xf6c\xe0{\xdb\x9f\x00j\xfe\xd60Z\xd6\xf6X<\xcc7vU\xa4'}}], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$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") write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[], 0x100000530) 985.95626ms ago: executing program 2 (id=152): syz_read_part_table(0x105d, &(0x7f0000001080)="$eJzsz7FNA0EQBdC/wN3tBUQkZLRCSAOUAxItUAQStIbkAi4Za+3AkguwHbwX/d2ZH0y4rrts1ata/p+Tn/HzlmQ9zGpXlamN2J8ev9bM7bxey+9yTB/1Oacn41mV9Ne8JA/Jd7LVqTGNpeQ+aXn/u9CVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDT9gEAAP//1jwUcA==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="7df300000000000000000300000034000180060001000a000000060001000a00000008000600020000000600010002000000060005004e22000006000100020000003c00018008000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa060001000a00000008000300ac1414aa080006000500000008000700", @ANYRES32=0x0, @ANYBLOB="08000200030000000800030004000000400001800600010002000000050002000c00000008000300ac14141408000700", @ANYRES32=0x0, @ANYBLOB="14000400fe8000000000000000000000000000aa0800060004000000"], 0xd4}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x40a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0xf}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000004140)=""/4120, &(0x7f0000000000)=0x1018) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRESHEX=r7, @ANYRESOCT=r4, @ANYRES8=r5, @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000001c0a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140000001100010000000000fdff00000000000a"], 0x54}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_usbip_server_init(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0xa) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x721cc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000080)={0x20000000, 0x4, 0x0, 0x0, 0x3, "0000fa00ea8000"}) 889.784267ms ago: executing program 4 (id=153): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1204010, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}]}, 0x1, 0x500, &(0x7f0000000500)="$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") r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e72300000000000000020000000000074"]}, 0xc3) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x402c5342, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) tkill(r0, 0x7) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 825.951243ms ago: executing program 4 (id=154): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004000000000000000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x80ff) 758.928068ms ago: executing program 4 (id=156): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5169, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0xd79, &(0x7f00000035c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 651.886067ms ago: executing program 4 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x11c}}, 0x0) 624.172749ms ago: executing program 4 (id=159): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000001c"], 0x18}}], 0x2, 0x0) 529.667717ms ago: executing program 1 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300810, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r5, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='*@]#\\\x00'}, 0x30) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 528.436437ms ago: executing program 4 (id=162): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000010000000000000905000000003030000079e2a31b2152349a193afe29f1262bb68eac03e94ffff0ac61fda8d5f27c424236f703cea57986303c1f117f06532d82f6273944c9c541d05ad329ce4b214f54d6db8a206ca1f8f63e45a1b1dcc8fccf63abc62293edf0e29146d8e359ca5c14e1293a70238c632311c8a27052bbf4864600dd642e6356a66f30adcfd58a09001a283e0719d61ebc2b754d0893d86341d7063717f17e8e093e4591eb4e8e358974d6"], &(0x7f0000000780)=""/205, 0x29, 0xcd, 0x1, 0x4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x9, '\x00', 0x0, r0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES16=r0, @ANYBLOB="d55ec389a0f441cb14ee47a010c522801118258a0328f2f5491c5b283c79713649c406ff2fb8c638b37826e3ba66ce863a03bf182cc276329bd6d2b2afa77e7547b92fcf5f66ec648e36eb654b820525e23d924ae3505105a5c1924348fdd6c444d98a1a00cc783e27b26415d4bc57b6c54a48a3ef26e7da2154eb4ec28cd9f72958b8a817acdaf9588b4f1310defba11b5b9516fcc51d02bd567baee8", @ANYBLOB="00ff000042000000b70100000800000085000000aa000000950ee7f33bf79eea98b8aaa12b247af51ba88ec9864dba620c1b6ecb5974f59e87fbd41ed44bc5c35a2cf0dde4d5a5416663d84572a5a449c112241a52271fcb7996b68485627e80d7af5dc52e0d849ff96a614b1626a1a0"], &(0x7f0000000300)='GPL\x00', 0xc}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r4, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) membarrier(0x40, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x324}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) sendto$inet(r6, &(0x7f00000000c0)="cb", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000005c0)={0x2, 0xa, 0x8, 0x5, 0x0}, &(0x7f0000000600)=0x10) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756ca3c82c00"]) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000640)={r7, @in={{0x2, 0x4e21, @loopback}}, 0x3, 0x28a0}, &(0x7f0000000700)=0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x8) 498.641009ms ago: executing program 0 (id=164): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1204010, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}]}, 0x1, 0x500, &(0x7f0000000500)="$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") r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e72300000000000000020000000000074"]}, 0xc3) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x402c5342, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) tkill(r0, 0x7) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 492.916909ms ago: executing program 3 (id=165): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000003200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcd, &(0x7f0000000500)=""/205, 0x41000, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffea}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r5 = mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) r6 = dup2(r5, r5) mq_notify(r6, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x14a8, r6, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0x0, 0x0, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@deltaction={0x14, 0x31, 0x1}, 0x14}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket(0x10, 0x3, 0x0) 361.6844ms ago: executing program 0 (id=166): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x5, 0x803}]}) 361.41131ms ago: executing program 0 (id=167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) r1 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000002180), 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000200)=@ethtool_cmd={0x1c, 0x7ff, 0xc00000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_MCE_KILL(0x29, 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8000) splice(r2, 0x0, r6, 0x0, 0x7, 0x0) close(r5) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) r7 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x2000000000000002, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002000300ac1e00010000000000000000030006000000000002000000000000000000000000000000080012000000020000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400030000e0ffffff0000000000000000000000000000000000000000000000010018"], 0xa8}}, 0x0) ioctl$int_in(r6, 0x541b, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 204.998643ms ago: executing program 3 (id=168): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000001300000100000008000100", @ANYRES32, @ANYBLOB="080005"], 0x24}}, 0x0) 136.377568ms ago: executing program 3 (id=169): socket$packet(0x11, 0x0, 0x300) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000001180), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 68.152224ms ago: executing program 1 (id=170): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006100078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d805000600000000001300020062"], 0x270}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 68.013644ms ago: executing program 3 (id=171): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0xa00, @broadcast}, 0x10) 67.829304ms ago: executing program 3 (id=172): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000001c"], 0x18}}], 0x2, 0x0) 60.185244ms ago: executing program 1 (id=173): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000740)='westwood\x00', 0x9) bind$inet(r0, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xf401}, 0x100) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x22004006, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@commit={'commit', 0x3d, 0x10001}}, {@block_validity}, {@grpjquota, 0x22}], [{@uid_lt={'uid<', 0xee00}}, {@seclabel}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_role={'subj_role', 0x3d, 'uid<\xee\x9a\xd9!\xdf\xc1\x03\xd9\x1d\x8c\xd8\x97Umv\x17z\xb4BW\xf7\x1e\x02\xc9\xa4\x8c\xe0)\xf6c\xe0{\xdb\x9f\x00j\xfe\xd60Z\xd6\xf6X<\xcc7vU\xa4'}}], 0x2}, 0xc4, 0x484, &(0x7f0000001140)="$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") write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[], 0x100000530) 33.661956ms ago: executing program 0 (id=174): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000a7000000000000001800000002000000000000000600000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='ext4_unlink_exit\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 4.217059ms ago: executing program 0 (id=175): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 4.070689ms ago: executing program 3 (id=176): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1204010, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}]}, 0x1, 0x500, &(0x7f0000000500)="$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") r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e72300000000000000020000000000074"]}, 0xc3) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x402c5342, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) tkill(r0, 0x7) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 0s ago: executing program 0 (id=177): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 13.940667][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 13.940681][ T29] audit: type=1400 audit(1721017330.160:76): avc: denied { transition } for pid=2960 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.944874][ T29] audit: type=1400 audit(1721017330.160:77): avc: denied { noatsecure } for pid=2960 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.947590][ T29] audit: type=1400 audit(1721017330.160:78): avc: denied { write } for pid=2960 comm="sh" path="pipe:[1449]" dev="pipefs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.950584][ T29] audit: type=1400 audit(1721017330.160:79): avc: denied { rlimitinh } for pid=2960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.953200][ T29] audit: type=1400 audit(1721017330.160:80): avc: denied { siginh } for pid=2960 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.100147][ T29] audit: type=1400 audit(1721017333.320:81): avc: denied { read } for pid=2764 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 21.024106][ T29] audit: type=1400 audit(1721017337.250:82): avc: denied { mounton } for pid=3069 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.025093][ T3069] cgroup: Unknown subsys name 'net' [ 21.046890][ T29] audit: type=1400 audit(1721017337.250:83): avc: denied { mount } for pid=3069 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.074204][ T29] audit: type=1400 audit(1721017337.270:84): avc: denied { unmount } for pid=3069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.215480][ T3069] cgroup: Unknown subsys name 'rlimit' [ 21.338035][ T29] audit: type=1400 audit(1721017337.560:85): avc: denied { create } for pid=3069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.358590][ T29] audit: type=1400 audit(1721017337.560:86): avc: denied { write } for pid=3069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.378959][ T29] audit: type=1400 audit(1721017337.560:87): avc: denied { read } for pid=3069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.399264][ T29] audit: type=1400 audit(1721017337.560:88): avc: denied { mounton } for pid=3069 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.424053][ T29] audit: type=1400 audit(1721017337.560:89): avc: denied { mount } for pid=3069 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.431010][ T3072] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.455944][ T29] audit: type=1400 audit(1721017337.680:90): avc: denied { relabelto } for pid=3072 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 21.481489][ T29] audit: type=1400 audit(1721017337.680:91): avc: denied { write } for pid=3072 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.511512][ T3069] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.417805][ T3079] chnl_net:caif_netlink_parms(): no params data found [ 22.514330][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.521402][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.528633][ T3079] bridge_slave_0: entered allmulticast mode [ 22.534958][ T3079] bridge_slave_0: entered promiscuous mode [ 22.546876][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.553998][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.561145][ T3079] bridge_slave_1: entered allmulticast mode [ 22.567482][ T3079] bridge_slave_1: entered promiscuous mode [ 22.573741][ T3086] chnl_net:caif_netlink_parms(): no params data found [ 22.593146][ T3085] chnl_net:caif_netlink_parms(): no params data found [ 22.612331][ T3079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.638471][ T3079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.649335][ T3080] chnl_net:caif_netlink_parms(): no params data found [ 22.678054][ T3082] chnl_net:caif_netlink_parms(): no params data found [ 22.691269][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.698473][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.705645][ T3086] bridge_slave_0: entered allmulticast mode [ 22.711862][ T3086] bridge_slave_0: entered promiscuous mode [ 22.718671][ T3079] team0: Port device team_slave_0 added [ 22.725261][ T3079] team0: Port device team_slave_1 added [ 22.743286][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.750404][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.757830][ T3086] bridge_slave_1: entered allmulticast mode [ 22.764217][ T3086] bridge_slave_1: entered promiscuous mode [ 22.797978][ T3079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.804992][ T3079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.830883][ T3079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.854526][ T3079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.861471][ T3079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.887466][ T3079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.898222][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.905325][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.912501][ T3085] bridge_slave_0: entered allmulticast mode [ 22.918798][ T3085] bridge_slave_0: entered promiscuous mode [ 22.926062][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.935207][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.942339][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.949632][ T3085] bridge_slave_1: entered allmulticast mode [ 22.955859][ T3085] bridge_slave_1: entered promiscuous mode [ 22.975149][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.991953][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.999075][ T3080] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.006167][ T3080] bridge_slave_0: entered allmulticast mode [ 23.012653][ T3080] bridge_slave_0: entered promiscuous mode [ 23.035607][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.042671][ T3080] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.049939][ T3080] bridge_slave_1: entered allmulticast mode [ 23.056297][ T3080] bridge_slave_1: entered promiscuous mode [ 23.067490][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.090750][ T3086] team0: Port device team_slave_0 added [ 23.097197][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.110283][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.117388][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.124606][ T3082] bridge_slave_0: entered allmulticast mode [ 23.130958][ T3082] bridge_slave_0: entered promiscuous mode [ 23.137504][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.144642][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.151739][ T3082] bridge_slave_1: entered allmulticast mode [ 23.158077][ T3082] bridge_slave_1: entered promiscuous mode [ 23.166431][ T3079] hsr_slave_0: entered promiscuous mode [ 23.172511][ T3079] hsr_slave_1: entered promiscuous mode [ 23.184021][ T3086] team0: Port device team_slave_1 added [ 23.190806][ T3080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.222269][ T3080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.232129][ T3085] team0: Port device team_slave_0 added [ 23.238687][ T3085] team0: Port device team_slave_1 added [ 23.249264][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.259720][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.266744][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.292725][ T3086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.312275][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.330509][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.337494][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.363635][ T3086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.383129][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.390107][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.415992][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.427181][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.434158][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.460308][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.475987][ T3080] team0: Port device team_slave_0 added [ 23.492750][ T3082] team0: Port device team_slave_0 added [ 23.506553][ T3080] team0: Port device team_slave_1 added [ 23.522937][ T3082] team0: Port device team_slave_1 added [ 23.559576][ T3086] hsr_slave_0: entered promiscuous mode [ 23.565591][ T3086] hsr_slave_1: entered promiscuous mode [ 23.571377][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.578984][ T3086] Cannot create hsr debugfs directory [ 23.607965][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.614970][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.640868][ T3080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.653966][ T3085] hsr_slave_0: entered promiscuous mode [ 23.660027][ T3085] hsr_slave_1: entered promiscuous mode [ 23.665881][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.673408][ T3085] Cannot create hsr debugfs directory [ 23.679183][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.686194][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.712262][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.723558][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.730542][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.756512][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.769504][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.776478][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.802525][ T3080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.849328][ T3080] hsr_slave_0: entered promiscuous mode [ 23.855418][ T3080] hsr_slave_1: entered promiscuous mode [ 23.861404][ T3080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.868964][ T3080] Cannot create hsr debugfs directory [ 23.903796][ T3082] hsr_slave_0: entered promiscuous mode [ 23.909715][ T3082] hsr_slave_1: entered promiscuous mode [ 23.915540][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.923060][ T3082] Cannot create hsr debugfs directory [ 23.930542][ T3079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.948727][ T3079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.974661][ T3079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.996134][ T3079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.081055][ T3086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.101368][ T3086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.110036][ T3086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.122522][ T3086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.131352][ T3080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.140277][ T3080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.148479][ T3080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.157993][ T3080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.191988][ T3082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.200683][ T3082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.209429][ T3082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.217941][ T3082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.239148][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.252810][ T3079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.263907][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.272907][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.281687][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.294618][ T3079] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.326502][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.333723][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.342653][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.349710][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.387822][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.399627][ T3079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.410045][ T3079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.440857][ T3086] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.454475][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.469064][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.476193][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.487354][ T3080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.508325][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.515417][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.526395][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.539590][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.551702][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.560374][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.567424][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.579456][ T3080] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.594248][ T3086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.604652][ T3086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.623173][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.630338][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.640705][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.647768][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.659380][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.666483][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.675390][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.682428][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.698281][ T3079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.730809][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.737907][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.758609][ T3082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.769183][ T3082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.799698][ T3085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.810135][ T3085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.835873][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.869514][ T3080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.892282][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.918763][ T3079] veth0_vlan: entered promiscuous mode [ 24.953418][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.963669][ T3079] veth1_vlan: entered promiscuous mode [ 25.007912][ T3079] veth0_macvtap: entered promiscuous mode [ 25.028268][ T3079] veth1_macvtap: entered promiscuous mode [ 25.050774][ T3080] veth0_vlan: entered promiscuous mode [ 25.076328][ T3082] veth0_vlan: entered promiscuous mode [ 25.090356][ T3079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.102481][ T3080] veth1_vlan: entered promiscuous mode [ 25.114605][ T3082] veth1_vlan: entered promiscuous mode [ 25.128603][ T3079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.142581][ T3086] veth0_vlan: entered promiscuous mode [ 25.150229][ T3079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.158968][ T3079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.167727][ T3079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.176462][ T3079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.187584][ T3085] veth0_vlan: entered promiscuous mode [ 25.199311][ T3086] veth1_vlan: entered promiscuous mode [ 25.207142][ T3085] veth1_vlan: entered promiscuous mode [ 25.221546][ T3082] veth0_macvtap: entered promiscuous mode [ 25.229579][ T3080] veth0_macvtap: entered promiscuous mode [ 25.248678][ T3082] veth1_macvtap: entered promiscuous mode [ 25.255513][ T3080] veth1_macvtap: entered promiscuous mode [ 25.262156][ T3086] veth0_macvtap: entered promiscuous mode [ 25.271940][ T3085] veth0_macvtap: entered promiscuous mode [ 25.290117][ T3086] veth1_macvtap: entered promiscuous mode [ 25.310883][ T3085] veth1_macvtap: entered promiscuous mode [ 25.312945][ T3223] Zero length message leads to an empty skb [ 25.328304][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.338942][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.351076][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.362031][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.368716][ T3225] loop1: detected capacity change from 0 to 1024 [ 25.372555][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.382050][ T3225] EXT4-fs: Ignoring removed mblk_io_submit option [ 25.388654][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.388670][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.418660][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.419508][ T3225] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 25.428210][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.436277][ T3225] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 25.445890][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.445904][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.475307][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.485105][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.495555][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.506466][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.514437][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.524951][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.534852][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.545318][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.555238][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.565717][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.575674][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.586167][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.596880][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.618596][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.629299][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.641664][ T3227] loop1: detected capacity change from 0 to 512 [ 25.644665][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.652632][ T3227] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 25.655954][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.665455][ T3227] EXT4-fs (loop1): group descriptors corrupted! [ 25.675849][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.675896][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.675908][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.677395][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.732316][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.743033][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.745567][ T3229] FAULT_INJECTION: forcing a failure. [ 25.745567][ T3229] name failslab, interval 1, probability 0, space 0, times 1 [ 25.753078][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.765625][ T3229] CPU: 1 PID: 3229 Comm: syz.1.9 Not tainted 6.10.0-syzkaller #0 [ 25.765648][ T3229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 25.776037][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.783716][ T3229] Call Trace: [ 25.783726][ T3229] [ 25.783734][ T3229] dump_stack_lvl+0xf2/0x150 [ 25.793777][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.803541][ T3229] dump_stack+0x15/0x20 [ 25.806811][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.809700][ T3229] should_fail_ex+0x229/0x230 [ 25.815963][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.824630][ T3229] ? __se_sys_memfd_create+0x230/0x600 [ 25.831372][ T3086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.838634][ T3229] __should_failslab+0x92/0xa0 [ 25.838661][ T3229] should_failslab+0x9/0x20 [ 25.843386][ T3086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.850467][ T3229] __kmalloc_noprof+0xa5/0x370 [ 25.856019][ T3086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.864641][ T3229] __se_sys_memfd_create+0x230/0x600 [ 25.869386][ T3086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.873859][ T3229] __x64_sys_memfd_create+0x31/0x40 [ 25.915231][ T3229] x64_sys_call+0x28b7/0x2d70 [ 25.919970][ T3229] do_syscall_64+0xc9/0x1c0 [ 25.924518][ T3229] ? clear_bhb_loop+0x55/0xb0 [ 25.929318][ T3229] ? clear_bhb_loop+0x55/0xb0 [ 25.933987][ T3229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 25.939933][ T3229] RIP: 0033:0x7f4dfc9e7bd9 [ 25.944331][ T3229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 25.964011][ T3229] RSP: 002b:00007f4dfbc68e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 25.972402][ T3229] RAX: ffffffffffffffda RBX: 00000000000004a3 RCX: 00007f4dfc9e7bd9 [ 25.980369][ T3229] RDX: 00007f4dfbc68f00 RSI: 0000000000000000 RDI: 00007f4dfca55d24 [ 25.988322][ T3229] RBP: 0000000020000580 R08: 00007f4dfbc68bc7 R09: 00007f4dfbc68e50 [ 25.996282][ T3229] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 [ 26.004236][ T3229] R13: 00007f4dfbc68f00 R14: 00007f4dfbc68ec0 R15: 0000000020000540 [ 26.012371][ T3229] [ 26.019757][ T3080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.028507][ T3080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.037442][ T3080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.037730][ T3231] capability: warning: `syz.1.10' uses deprecated v2 capabilities in a way that may be insecure [ 26.046298][ T3080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.050040][ T3082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.074346][ T3082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.083962][ T3082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.092710][ T3082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.106631][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 26.106643][ T29] audit: type=1400 audit(1721017342.330:122): avc: denied { create } for pid=3230 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.114613][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.141116][ T29] audit: type=1400 audit(1721017342.350:123): avc: denied { map } for pid=3230 comm="syz.1.10" path="socket:[3584]" dev="sockfs" ino=3584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.142563][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.165260][ T29] audit: type=1400 audit(1721017342.350:124): avc: denied { read } for pid=3230 comm="syz.1.10" path="socket:[3584]" dev="sockfs" ino=3584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.165281][ T29] audit: type=1400 audit(1721017342.360:125): avc: denied { create } for pid=3230 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.165297][ T29] audit: type=1400 audit(1721017342.360:126): avc: denied { write } for pid=3230 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.175183][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.249686][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.259612][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.266057][ T29] audit: type=1400 audit(1721017342.490:127): avc: denied { open } for pid=3242 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.270172][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.289090][ T29] audit: type=1400 audit(1721017342.490:128): avc: denied { perfmon } for pid=3242 comm="syz.1.14" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.298881][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.319486][ T29] audit: type=1400 audit(1721017342.490:129): avc: denied { kernel } for pid=3242 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.329802][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.333317][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.352507][ T29] audit: type=1400 audit(1721017342.570:130): avc: denied { create } for pid=3242 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.369624][ T3085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.394346][ T3085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.394606][ T29] audit: type=1400 audit(1721017342.620:131): avc: denied { create } for pid=3242 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.403016][ T3085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.431090][ T3085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.540305][ T3251] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.589684][ T3251] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 26.602020][ T3258] loop2: detected capacity change from 0 to 512 [ 26.645109][ T3258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 26.676680][ T3258] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.735407][ T3251] loop3: detected capacity change from 0 to 1024 [ 26.740610][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 26.740632][ T3251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 26.786347][ T3251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.792838][ T3266] loop4: detected capacity change from 0 to 512 [ 26.832696][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.848456][ T3266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 26.860003][ T3284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 26.869169][ T3266] System zones: 1-12 [ 26.874869][ T3266] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #11: comm syz.4.16: iget: bogus i_mode (0) [ 26.880532][ T3288] loop2: detected capacity change from 0 to 512 [ 26.888668][ T3266] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.16: couldn't read orphan inode 11 (err -117) [ 26.899995][ T3284] sctp: [Deprecated]: syz.1.23 (pid 3284) Use of int in max_burst socket option. [ 26.899995][ T3284] Use struct sctp_assoc_value instead [ 26.905446][ T3266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.931851][ T3288] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 26.949187][ T3284] loop1: detected capacity change from 0 to 128 [ 26.951256][ T3290] loop0: detected capacity change from 0 to 512 [ 26.973298][ T3290] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.26: attempt to clear invalid blocks 1 len 1 [ 27.000127][ T3290] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.26: bg 0: block 343: padding at end of block bitmap is not set [ 27.017188][ T3290] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 27.036228][ T3290] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.26: invalid indirect mapped block 1819239214 (level 0) [ 27.051032][ T3290] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.26: invalid indirect mapped block 1819239214 (level 1) [ 27.067059][ T3290] EXT4-fs (loop0): 1 truncate cleaned up [ 27.079358][ T3290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.133625][ T3299] veth1: entered promiscuous mode [ 27.139206][ T3299] macsec1: entered promiscuous mode [ 27.144594][ T3299] macsec1: entered allmulticast mode [ 27.149995][ T3299] veth1: entered allmulticast mode [ 27.159599][ T3299] veth1: left allmulticast mode [ 27.164636][ T3299] veth1: left promiscuous mode [ 27.237568][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.255532][ T3299] syz.3.28 (3299) used greatest stack depth: 10800 bytes left [ 27.315818][ T3306] netlink: 144 bytes leftover after parsing attributes in process `syz.0.29'. [ 27.372790][ T3086] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 27.383902][ T3086] CPU: 1 PID: 3086 Comm: syz-executor Not tainted 6.10.0-syzkaller #0 [ 27.392237][ T3086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 27.402377][ T3086] Call Trace: [ 27.405648][ T3086] [ 27.408590][ T3086] dump_stack_lvl+0xf2/0x150 [ 27.413201][ T3086] dump_stack+0x15/0x20 [ 27.417404][ T3086] dump_header+0x83/0x2d0 [ 27.421731][ T3086] oom_kill_process+0x33e/0x4c0 [ 27.426668][ T3086] out_of_memory+0x9af/0xbe0 [ 27.431344][ T3086] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 27.437414][ T3086] mem_cgroup_out_of_memory+0x13e/0x190 [ 27.443045][ T3086] try_charge_memcg+0x745/0xcd0 [ 27.447904][ T3086] ? _raw_spin_unlock+0x26/0x50 [ 27.452822][ T3086] ? radix_tree_lookup+0xf9/0x150 [ 27.457860][ T3086] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 27.463995][ T3086] __read_swap_cache_async+0x2b9/0x520 [ 27.469454][ T3086] swap_cluster_readahead+0x276/0x3f0 [ 27.474884][ T3086] swapin_readahead+0xe2/0x7a0 [ 27.479695][ T3086] ? __filemap_get_folio+0x420/0x5b0 [ 27.484992][ T3086] ? swap_cache_get_folio+0x6e/0x210 [ 27.490422][ T3086] do_swap_page+0x3bc/0x1840 [ 27.495107][ T3086] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 27.500573][ T3086] ? __rcu_read_lock+0x36/0x50 [ 27.505436][ T3086] handle_mm_fault+0x8b9/0x2ac0 [ 27.510468][ T3086] exc_page_fault+0x3b9/0x650 [ 27.515232][ T3086] asm_exc_page_fault+0x26/0x30 [ 27.520162][ T3086] RIP: 0033:0x7ff94025bb85 [ 27.524641][ T3086] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d be d9 12 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 27.544246][ T3086] RSP: 002b:00007ffcada6a808 EFLAGS: 00010246 [ 27.550298][ T3086] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007ff94025bb83 [ 27.558272][ T3086] RDX: 00007ffcada6a820 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.566250][ T3086] RBP: 00007ffcada6a89c R08: 000000001355971a R09: 7fffffffffffffff [ 27.574268][ T3086] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 27.582297][ T3086] R13: 0000000000000bb8 R14: 000000000000694b R15: 0000000000006840 [ 27.590258][ T3086] [ 27.593404][ T3086] memory: usage 348kB, limit 307200kB, failcnt 245 [ 27.600079][ T3086] memory+swap: usage 756kB, limit 9007199254740988kB, failcnt 0 [ 27.607761][ T3086] kmem: usage 312kB, limit 9007199254740988kB, failcnt 0 [ 27.614899][ T3086] Memory cgroup stats for /syz4: [ 27.618064][ T3086] cache 12288 [ 27.626526][ T3086] rss 16384 [ 27.629628][ T3086] shmem 0 [ 27.632687][ T3086] mapped_file 8192 [ 27.636620][ T3086] dirty 8192 [ 27.639808][ T3086] writeback 0 [ 27.643080][ T3086] workingset_refault_anon 20 [ 27.647841][ T3086] workingset_refault_file 0 [ 27.652483][ T3086] swap 409600 [ 27.655924][ T3086] swapcached 24576 [ 27.659643][ T3086] pgpgin 267 [ 27.662839][ T3086] pgpgout 256 [ 27.666137][ T3086] pgfault 384 [ 27.669407][ T3086] pgmajfault 12 [ 27.672840][ T3086] inactive_anon 12288 [ 27.676863][ T3086] active_anon 20480 [ 27.680658][ T3086] inactive_file 12288 [ 27.684669][ T3086] active_file 0 [ 27.688111][ T3086] unevictable 0 [ 27.691547][ T3086] hierarchical_memory_limit 314572800 [ 27.696977][ T3086] hierarchical_memsw_limit 9223372036854771712 [ 27.703147][ T3086] total_cache 12288 [ 27.707017][ T3086] total_rss 16384 [ 27.710644][ T3086] total_shmem 0 [ 27.714272][ T3086] total_mapped_file 8192 [ 27.718496][ T3086] total_dirty 8192 [ 27.722186][ T3086] total_writeback 0 [ 27.725995][ T3086] total_workingset_refault_anon 20 [ 27.731094][ T3086] total_workingset_refault_file 0 [ 27.736119][ T3086] total_swap 409600 [ 27.739927][ T3086] total_swapcached 24576 [ 27.744180][ T3086] total_pgpgin 267 [ 27.747955][ T3086] total_pgpgout 256 [ 27.751756][ T3086] total_pgfault 384 [ 27.755574][ T3086] total_pgmajfault 12 [ 27.759543][ T3086] total_inactive_anon 12288 [ 27.764057][ T3086] total_active_anon 20480 [ 27.768369][ T3086] total_inactive_file 12288 [ 27.772851][ T3086] total_active_file 0 [ 27.776837][ T3086] total_unevictable 0 [ 27.780847][ T3086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.16,pid=3265,uid=0 [ 27.795550][ T3086] Memory cgroup out of memory: Killed process 3265 (syz.4.16) total-vm:80548kB, anon-rss:448kB, file-rss:10140kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 27.795911][ T3266] syz.4.16 (3266) used greatest stack depth: 10352 bytes left [ 27.897404][ T3086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.897940][ T3341] loop2: detected capacity change from 0 to 512 [ 27.913333][ T3341] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 27.958442][ T3343] loop4: detected capacity change from 0 to 512 [ 27.967974][ T3343] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.40: attempt to clear invalid blocks 1 len 1 [ 27.981025][ T3343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.40: bg 0: block 343: padding at end of block bitmap is not set [ 27.995804][ T3343] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 28.004936][ T3343] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.40: invalid indirect mapped block 1819239214 (level 0) [ 28.019997][ T3343] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.40: invalid indirect mapped block 1819239214 (level 1) [ 28.036305][ T3343] EXT4-fs (loop4): 1 truncate cleaned up [ 28.042252][ T3343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.069240][ T3349] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.099372][ T3086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.291246][ T3364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34320 sclass=netlink_route_socket pid=3364 comm=syz.4.47 [ 28.526916][ T3366] loop3: detected capacity change from 0 to 512 [ 28.533569][ T3366] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 28.707752][ T3372] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET) [ 28.766040][ T3376] loop0: detected capacity change from 0 to 512 [ 28.772606][ T3376] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 28.829605][ T3379] loop0: detected capacity change from 0 to 512 [ 28.838097][ T3379] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.52: corrupted in-inode xattr: invalid ea_ino [ 28.851505][ T3379] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.52: couldn't read orphan inode 12 (err -117) [ 28.864061][ T3379] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.877276][ T3379] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 28.905341][ T3383] loop3: detected capacity change from 0 to 512 [ 28.913209][ T3383] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.53: attempt to clear invalid blocks 1 len 1 [ 28.926587][ T3383] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.53: bg 0: block 343: padding at end of block bitmap is not set [ 28.941219][ T3383] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 28.943100][ T3379] loop0: detected capacity change from 0 to 128 [ 28.956871][ T3379] FAT-fs (loop0): Unrecognized mount option "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa./file0" or missing value [ 28.961802][ T3383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.53: invalid indirect mapped block 1819239214 (level 0) [ 28.984745][ T3383] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.53: invalid indirect mapped block 1819239214 (level 1) [ 29.009408][ T3383] EXT4-fs (loop3): 1 truncate cleaned up [ 29.019920][ T3383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.085593][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.130514][ T3401] team0: Port device syz_tun added [ 29.168770][ T3408] loop1: detected capacity change from 0 to 512 [ 29.177555][ T3406] loop0: detected capacity change from 0 to 512 [ 29.189509][ T3408] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 29.193259][ T3410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.64'. [ 29.203768][ T3406] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 29.222435][ T3414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=3414 comm=syz.3.65 [ 29.275144][ T3070] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 29.292183][ T3423] Unknown gid [ 29.348656][ T3434] loop2: detected capacity change from 0 to 512 [ 29.358844][ T3434] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.72: attempt to clear invalid blocks 1 len 1 [ 29.377965][ T3434] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.72: bg 0: block 343: padding at end of block bitmap is not set [ 29.393669][ T3434] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 29.403009][ T3434] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.72: invalid indirect mapped block 1819239214 (level 0) [ 29.419432][ T3434] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.72: invalid indirect mapped block 1819239214 (level 1) [ 29.434771][ T3434] EXT4-fs (loop2): 1 truncate cleaned up [ 29.440936][ T3434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.457227][ T3445] netlink: 48 bytes leftover after parsing attributes in process `syz.0.75'. [ 29.486751][ T3449] loop0: detected capacity change from 0 to 512 [ 29.493249][ T3449] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 29.496848][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.527394][ T3280] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 29.548882][ T3455] FAULT_INJECTION: forcing a failure. [ 29.548882][ T3455] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.561986][ T3455] CPU: 1 PID: 3455 Comm: syz.1.80 Not tainted 6.10.0-syzkaller #0 [ 29.569797][ T3455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 29.579854][ T3455] Call Trace: [ 29.583131][ T3455] [ 29.586113][ T3455] dump_stack_lvl+0xf2/0x150 [ 29.590754][ T3455] dump_stack+0x15/0x20 [ 29.594933][ T3455] should_fail_ex+0x229/0x230 [ 29.599617][ T3455] should_fail+0xb/0x10 [ 29.603814][ T3455] should_fail_usercopy+0x1a/0x20 [ 29.608847][ T3455] _copy_to_user+0x1e/0xa0 [ 29.613368][ T3455] __se_sys_capget+0x28b/0x2d0 [ 29.618140][ T3455] __x64_sys_capget+0x31/0x40 [ 29.622965][ T3455] x64_sys_call+0x2709/0x2d70 [ 29.627730][ T3455] do_syscall_64+0xc9/0x1c0 [ 29.632245][ T3455] ? clear_bhb_loop+0x55/0xb0 [ 29.636933][ T3455] ? clear_bhb_loop+0x55/0xb0 [ 29.641732][ T3455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.647651][ T3455] RIP: 0033:0x7f4dfc9e7bd9 [ 29.652084][ T3455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.671726][ T3455] RSP: 002b:00007f4dfbc69048 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 29.680128][ T3455] RAX: ffffffffffffffda RBX: 00007f4dfcb75f60 RCX: 00007f4dfc9e7bd9 [ 29.688086][ T3455] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020feaff9 [ 29.696108][ T3455] RBP: 00007f4dfbc690a0 R08: 0000000000000000 R09: 0000000000000000 [ 29.704069][ T3455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.712036][ T3455] R13: 000000000000000b R14: 00007f4dfcb75f60 R15: 00007ffe5a394408 [ 29.719995][ T3455] [ 29.770032][ T3478] loop1: detected capacity change from 0 to 512 [ 29.779232][ T3478] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 29.900221][ T3483] loop4: detected capacity change from 0 to 1024 [ 29.900862][ T3485] loop2: detected capacity change from 0 to 256 [ 29.911781][ T3483] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 29.934285][ T3276] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 29.991313][ T3489] loop4: detected capacity change from 0 to 512 [ 29.999038][ T3489] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 30.060968][ T3493] loop3: detected capacity change from 0 to 512 [ 30.068334][ T3493] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 30.079341][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.93: iget: bad i_size value: -67835469387268086 [ 30.101035][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.93: couldn't read orphan inode 15 (err -117) [ 30.121042][ T3493] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.136533][ T3493] ext2 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.151185][ T3509] loop1: detected capacity change from 0 to 512 [ 30.158718][ T3080] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 30.159522][ T3509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 ro without journal. Quota mode: writeback. [ 30.186442][ T3509] ======================================================= [ 30.186442][ T3509] WARNING: The mand mount option has been deprecated and [ 30.186442][ T3509] and is ignored by this kernel. Remove the mand [ 30.186442][ T3509] option from the mount to silence this warning. [ 30.186442][ T3509] ======================================================= [ 30.222254][ T3509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.234247][ T3509] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. Quota mode: writeback. [ 30.244985][ T3509] ext4 filesystem being remounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.271565][ T3509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 30.306068][ T3509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 30.322733][ T3509] bond0 (unregistering): Released all slaves [ 30.355098][ T3520] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 30.547638][ T3527] loop3: detected capacity change from 0 to 512 [ 30.556484][ T3527] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.569575][ T3527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.580136][ T3527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 30.588126][ T3527] System zones: 1-12 [ 30.592554][ T3527] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.606305][ T3527] EXT4-fs (loop3): 1 truncate cleaned up [ 30.612197][ T3527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.775249][ T3547] loop2: detected capacity change from 0 to 512 [ 30.783538][ T3547] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.108: attempt to clear invalid blocks 1 len 1 [ 30.797852][ T3547] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.108: bg 0: block 343: padding at end of block bitmap is not set [ 30.812463][ T3547] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 30.821495][ T3547] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.108: invalid indirect mapped block 1819239214 (level 0) [ 30.836138][ T3547] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.108: invalid indirect mapped block 1819239214 (level 1) [ 30.852563][ T3547] EXT4-fs (loop2): 1 truncate cleaned up [ 30.858788][ T3547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.919601][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.016928][ T3565] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 31.163867][ T3573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=3573 comm=syz.2.115 [ 31.208208][ T3576] dvmrp1: entered allmulticast mode [ 31.209772][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 31.209784][ T29] audit: type=1400 audit(1721017347.430:233): avc: denied { watch watch_reads } for pid=3582 comm="syz.0.117" path="/39" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.214128][ T3575] dvmrp1: left allmulticast mode [ 31.242270][ T29] audit: type=1400 audit(1721017347.440:234): avc: denied { create } for pid=3582 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.242292][ T29] audit: type=1400 audit(1721017347.440:235): avc: denied { setopt } for pid=3582 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.272096][ T29] audit: type=1400 audit(1721017347.490:236): avc: denied { name_bind } for pid=3582 comm="syz.0.117" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.307693][ T29] audit: type=1400 audit(1721017347.490:237): avc: denied { node_bind } for pid=3582 comm="syz.0.117" saddr=2001::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.332908][ T29] audit: type=1400 audit(1721017347.550:238): avc: denied { create } for pid=3582 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.333623][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.365461][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 31.422079][ T3594] loop3: detected capacity change from 0 to 512 [ 31.428791][ T3594] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 31.454762][ T3280] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 31.502046][ T3602] loop1: detected capacity change from 0 to 512 [ 31.520056][ T3602] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.126: attempt to clear invalid blocks 1 len 1 [ 31.535932][ T3602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.126: bg 0: block 343: padding at end of block bitmap is not set [ 31.561108][ T3602] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 31.570270][ T3602] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.126: invalid indirect mapped block 1819239214 (level 0) [ 31.581529][ T3616] loop4: detected capacity change from 0 to 2048 [ 31.594609][ T3602] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.126: invalid indirect mapped block 1819239214 (level 1) [ 31.615956][ T3602] EXT4-fs (loop1): 1 truncate cleaned up [ 31.621682][ T29] audit: type=1400 audit(1721017347.840:239): avc: denied { ioctl } for pid=3609 comm="syz.0.129" path="socket:[4572]" dev="sockfs" ino=4572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.635688][ T3602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.658545][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.676554][ T29] audit: type=1400 audit(1721017347.900:240): avc: denied { ioctl } for pid=3615 comm="syz.4.131" path="/19/file1/cpuset.effective_cpus" dev="loop4" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.676830][ T3616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.724233][ T3086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.750898][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.754923][ T3634] loop3: detected capacity change from 0 to 128 [ 31.773966][ T3634] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.791231][ T3634] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.802507][ T29] audit: type=1400 audit(1721017348.010:241): avc: denied { create } for pid=3643 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 31.842846][ T3644] netlink: 'syz.1.138': attribute type 21 has an invalid length. [ 31.843208][ T29] audit: type=1400 audit(1721017348.050:242): avc: denied { connect } for pid=3643 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 31.852964][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 31.882484][ T3080] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.906139][ T3655] loop1: detected capacity change from 0 to 128 [ 31.942206][ T3661] loop4: detected capacity change from 0 to 512 [ 31.952630][ T3661] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.141: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 31.961561][ T3655] loop1: detected capacity change from 0 to 512 [ 31.975465][ T3661] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.141: couldn't read orphan inode 15 (err -117) [ 31.992926][ T3661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.005799][ T3655] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 32.007291][ T3661] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.013983][ T3655] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 32.040117][ T3655] EXT4-fs (loop1): 1 truncate cleaned up [ 32.046277][ T3655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.075431][ T3086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.118989][ T3667] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 32.194040][ T3674] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.226231][ T3679] loop3: detected capacity change from 0 to 1024 [ 32.232725][ T3679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.245055][ T3679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 32.253225][ T3679] System zones: 0-1, 3-12 [ 32.253993][ T3079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.258435][ T3679] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.325937][ T3684] netlink: 96 bytes leftover after parsing attributes in process `syz.1.148'. [ 32.361972][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 32.394794][ T3682] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 32.418877][ T3691] loop2: detected capacity change from 0 to 8192 [ 32.431577][ T3695] loop4: detected capacity change from 0 to 512 [ 32.448612][ T3695] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 32.452611][ T3696] loop3: detected capacity change from 0 to 2048 [ 32.460389][ T3694] loop1: detected capacity change from 0 to 512 [ 32.463644][ T3691] loop2: p1 p2 p4 < > [ 32.473962][ T3691] loop2: partition table partially beyond EOD, truncated [ 32.475876][ T3694] EXT4-fs: Ignoring removed nobh option [ 32.487176][ T3691] loop2: p1 size 108986237 extends beyond EOD, truncated [ 32.487701][ T3694] ext4: Unknown parameter 'audit' [ 32.495932][ T3691] loop2: p2 start 65535 is beyond EOD, truncated [ 32.505733][ T3691] loop2: p4 start 50331648 is beyond EOD, truncated [ 32.516820][ T3691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.152'. [ 32.528525][ T3691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.152'. [ 32.539007][ T3691] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 32.594030][ T3276] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.643029][ T3701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.156'. [ 32.656264][ T3704] loop3: detected capacity change from 0 to 512 [ 32.679810][ T3704] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.155: attempt to clear invalid blocks 1 len 1 [ 32.712520][ T3704] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.155: bg 0: block 343: padding at end of block bitmap is not set [ 32.730645][ T3704] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 32.741990][ T3704] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.155: invalid indirect mapped block 1819239214 (level 0) [ 32.756618][ T3704] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.155: invalid indirect mapped block 1819239214 (level 1) [ 32.773328][ T3704] EXT4-fs (loop3): 1 truncate cleaned up [ 32.779550][ T3704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.871528][ T3080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.927825][ T3727] loop3: detected capacity change from 0 to 1024 [ 32.967401][ T3727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.986905][ T3727] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.002430][ T3727] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 33.014945][ T3727] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.014945][ T3727] [ 33.024757][ T3727] EXT4-fs (loop3): Total free blocks count 0 [ 33.030749][ T3727] EXT4-fs (loop3): Free/Dirty block details [ 33.036665][ T3727] EXT4-fs (loop3): free_blocks=68451041280 [ 33.042567][ T3727] EXT4-fs (loop3): dirty_blocks=96 [ 33.047718][ T3727] EXT4-fs (loop3): Block reservation details [ 33.053712][ T3727] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 33.099170][ T3727] syz_tun: entered allmulticast mode [ 33.125893][ C0] hrtimer: interrupt took 29321 ns [ 33.134956][ T3727] syz.3.165 (3727) used greatest stack depth: 10312 bytes left [ 33.158342][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 33.263104][ T3749] netlink: 'syz.1.170': attribute type 12 has an invalid length. [ 33.270922][ T3749] netlink: 'syz.1.170': attribute type 29 has an invalid length. [ 33.278697][ T3749] netlink: 'syz.1.170': attribute type 2 has an invalid length. [ 33.286372][ T3749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.170'. [ 33.356907][ T3762] loop3: detected capacity change from 0 to 512 [ 33.363675][ T3762] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 33.371663][ T3765] loop1: detected capacity change from 0 to 512 [ 33.378739][ T3765] EXT4-fs: Ignoring removed nobh option [ 33.384454][ T3765] ext4: Unknown parameter 'audit' [ 33.422782][ T3769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 33.432368][ T3765] ================================================================== [ 33.440458][ T3765] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 33.449502][ T3765] [ 33.451813][ T3765] write to 0xffff8881041f5224 of 4 bytes by task 3280 on cpu 1: [ 33.459436][ T3765] fsnotify_detach_mark+0xe1/0x190 [ 33.464557][ T3765] fsnotify_destroy_mark+0x9a/0x1a0 [ 33.469761][ T3765] __se_sys_inotify_rm_watch+0xfd/0x180 [ 33.475286][ T3765] __x64_sys_inotify_rm_watch+0x31/0x40 [ 33.480811][ T3765] x64_sys_call+0x1b06/0x2d70 [ 33.485471][ T3765] do_syscall_64+0xc9/0x1c0 [ 33.489962][ T3765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.495837][ T3765] [ 33.498137][ T3765] read to 0xffff8881041f5224 of 4 bytes by task 3765 on cpu 0: [ 33.505660][ T3765] fsnotify_handle_inode_event+0xf6/0x1f0 [ 33.511366][ T3765] fsnotify+0x10ba/0x11a0 [ 33.515681][ T3765] __fsnotify_parent+0x285/0x370 [ 33.520609][ T3765] __fput+0x5ca/0x6f0 [ 33.524606][ T3765] __fput_sync+0x44/0x60 [ 33.528850][ T3765] __se_sys_close+0x101/0x1b0 [ 33.533511][ T3765] __x64_sys_close+0x1f/0x30 [ 33.538108][ T3765] x64_sys_call+0x25f1/0x2d70 [ 33.542767][ T3765] do_syscall_64+0xc9/0x1c0 [ 33.547257][ T3765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.553132][ T3765] [ 33.555436][ T3765] value changed: 0x00000003 -> 0x00000000 [ 33.561129][ T3765] [ 33.563436][ T3765] Reported by Kernel Concurrency Sanitizer on: [ 33.569557][ T3765] CPU: 0 PID: 3765 Comm: syz.1.173 Not tainted 6.10.0-syzkaller #0 [ 33.577421][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.587455][ T3765] ==================================================================