last executing test programs: 3.908752525s ago: executing program 2 (id=116): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x2, @loopback={0x2d5f}, 0x8004}}, {0x21, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) listen(r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r6, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x2f}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x7a, 0xfff2, 0xff, 0x9, 0x5, 0x4, 0x5, 0x4, 0x10, 0x2b7, 0x5, 0x4, 0x471, 0x3d9c, 0x7ff, 0x3]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 3.154843199s ago: executing program 4 (id=121): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0xfff, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='bbr', 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', r3, r4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 3.065534942s ago: executing program 4 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x13}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x20000}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40014) 3.026272523s ago: executing program 3 (id=124): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x158200, 0x46, 0x20}, 0x18) r1 = openat2(r0, 0x0, &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x0, 0x700001b, 0x148, 0x178, 0x148, 0x258, 0x206, 0x240, 0x258, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @broadcast, 0x6223014bd1c2f73b, 0xffffff00, 'veth1_vlan\x00', 'gre0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x18}, 0x1ea, 0x118, 0x178, 0x0, {0x390, 0x8f00}, [@common=@unspec=@physdev={{0x68}, {'veth0_macvtap\x00', {0xff}, 'pimreg0\x00', {0xff}, 0x2, 0x4}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x0, 0x0, 0x1], 0x1, 0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, 0x8, 0xf, [0x82d, 0x30, 0x6, 0x7, 0x8, 0xb, 0xd, 0x38, 0x37, 0x30, 0x16, 0x1f, 0x4, 0x24, 0x1e, 0x10], 0x1, 0x0, 0x8}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x50, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x10000000000000, 0xfff}, 0x102270, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r10}, {r10, 0xc312}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x80) fgetxattr(r8, 0x0, &(0x7f0000000a00)=""/80, 0x50) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x58, &(0x7f00000004c0)=""/88, 0x41000, 0x12, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x231f5, r1, 0x1, &(0x7f0000000580)=[r3, r1, r1, r1, r1, r3], &(0x7f0000000680)=[{0x1, 0x2, 0xa, 0x7}], 0x10, 0xffffffff}, 0x94) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c636865636b3d7374726963742c5c0f2d8d86388d617c477efc49d2646f733178666c6f7070792c6e6f646f74732c646d61736b3d3030303030303030303030"], 0x0, 0x22e, &(0x7f0000000100)="$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") sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.976810104s ago: executing program 4 (id=125): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd06, 0x4}, 0x6057, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}}}, 0x108) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x1000}, 0x10) syz_clone(0x61804400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd06, 0x4}, 0x6057, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}}}, 0x108) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x1000}, 0x10) (async) syz_clone(0x61804400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 2.970649635s ago: executing program 2 (id=126): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000080)=0x1ff, 0x4) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async, rerun: 64) wait4(r0, &(0x7f0000000040), 0x4, &(0x7f0000000380)) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0x2) (async) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.900942107s ago: executing program 0 (id=128): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@grpid}, {@auto_da_alloc}, {@data_writeback}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a00010000000000000000000200000000000000"], 0x38}}, 0x0) 2.82055755s ago: executing program 0 (id=130): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (rerun: 64) fcntl$notify(r1, 0x402, 0x20) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) (async, rerun: 64) io_uring_enter(0xffffffffffffffff, 0xea5, 0x0, 0x18, 0x0, 0x0) (async, rerun: 32) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f857f"], 0x7) (async, rerun: 32) io_uring_enter(r2, 0x6552, 0xba1a, 0x2, &(0x7f0000000180)={[0x10001]}, 0x8) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="68000000190001090000000000000000021800000000fd010000000008000100ac14140008000700ac141444080005000a010102060015000600000008000b000c000000140016"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000003, 0xd, 0xb, 0x7, 0x1}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) (rerun: 32) read$hidraw(r9, 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x4000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.772820191s ago: executing program 1 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x3, 0x0, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket(0x2a, 0x4, 0xff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01042abd7000fddbdf250100000000000000013c666ec165612cf7281255a0bf4bf581410000001800170000101c000083ff6574683a6261748064763000"], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2.772363741s ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x60}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[{0xff}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x4, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xd, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xfffd, 0xa00}, @md5sig={0x13, 0x12, "a5f505377135faea7289b4a8424d8b7e"}]}}}}}}, 0x5a) 2.749489112s ago: executing program 0 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x4000000000001, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(r1, &(0x7f0000000300)=""/197, 0xc5) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.745882152s ago: executing program 3 (id=134): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100"], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c00210003000000000000000500250001000000050017"], 0x64}}, 0x0) r7 = socket(0x1e, 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 2.689626954s ago: executing program 2 (id=135): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@struct={0x0, 0x9, 0x0, 0x4, 0x1, 0x9, [{0x10, 0x0, 0x3}, {0x7, 0x2, 0xe}, {0x7, 0x4}, {0x1, 0x4, 0xfffff000}, {0x7, 0x3, 0x28}, {0x8, 0x5}, {0xc, 0x2, 0x9}, {0xc, 0x4, 0xfffffffb}, {0x3, 0x1, 0x81}]}]}, {0x0, [0x61, 0x5f, 0x2e, 0x2e, 0x61, 0x2e, 0x5f, 0x30]}}, &(0x7f00000002c0)=""/4, 0x9a, 0x4, 0x1, 0xfffffff8}, 0x28) 2.644780196s ago: executing program 1 (id=136): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xeb17}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_usbip_server_init(0x1) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) (async) write$binfmt_elf32(r1, 0x0, 0x3c) (async) ftruncate(r0, 0x6000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0xff, @empty, 0x4}}, 0xabb8, 0x1067, 0xa53, 0xc4, 0x28, 0xffffff85, 0xa9}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.480365771s ago: executing program 2 (id=137): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x4, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000200)=0x0) capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f00000000c0)={0x5, 0x1, 0x9, 0x6, 0xb, 0x401}) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r6, &(0x7f0000000180), &(0x7f00000001c0)=0x10) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0xa) 2.322189816s ago: executing program 0 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x26}, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$random(0xffffffffffffff9c, 0x0, 0x508402, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000040)=0x1) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 2.044742655s ago: executing program 4 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\xcfD\xc4\xbf\x95@q\xf0\x0f \x02\xa8\xff\xa7\xfdi\xa7\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\xe7\xc9L\a\xfds1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\r\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f0000000a80)='t+\xdb\xaaU\x8e\xd6\x9b\xaa\xe0\xc0\x00r\xa1\xf7\x12\xfb\xed\r\f:\xef\xff\xa7x mT\x14\xafZ\xfa\xb5\xe5\x04\x03\'7\xa9\xf8\xb1O0\x05\xee\xc5\x81\xfd\xa5\xa3\xfe\x81\x06\x00>\xcdF8\xd2x\xb4\x05\x10\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x8cn\n.\xd0;7\xeb\xc5\xd8\x13\xfe\x13\x1a\x01\xa3nK3\xc2p\xb5\n\x0fU6\xc9\xc4\x1f`\x8a\xd6\xf1*~\fD\x8e\"\x1c\xa4\x19J3\xac5.E\xe8\x97K\x82Y\n\x0f\x15\xd7\xb0\xaf-\x89\xcc\xdb>\xd4\xa9F=\x7f\xd5`|MG\xf6FfJ\xcc\xa9(\xea\xb8\x82tXW\xeb\xbd\f/\xbd\x95\x01a\x86G\xbf$\xe3\xd7\x15\x8b\x84\xc4\xc0\xe4;\xcc\xda\xd0+\xc3\x1e\xc7\x12\x14\x95\xcf\x1d\x1a\xa0st\xd9^\x95\xbd\x14\x1e\xa5\xb7+\xa2\xd1\x7f\xae=\x96F\xb8\x94\xfd\xd5\xfdQ\xca\x17\n\x96\t\x1e\x8b%\x82)$\xb6\xca\xbe\x03\xd8\xc5\xde\x05\x81 \xcc\xa5\xb0Z\xfb\xae\xa5\x9b.\x88\x97\xbf\x0e\xa1\x86\x8a\xbb\xd2\x7f\xc5p\xc0vI\x80\f\x871C\xda .\xdc\xf7\xef\x1a\xdc\x97Y-\x04\xc0\xc7\xd3\xa8\xf6yy)\x15FK\xaa\xc4\xd5B\x90\xfe\xd6\xf0\xd6<\a\x91\x10\xf4\x8cl:\x90\x8fHt\x9e\xbb\x91!\x1a\xe7\x8ck\x8dE\xe9\xdcH\x16jK\xb57\x88\xebsvJ\xf1o\x9eC\xd9\x95E\x9aX%\x8a\xe1W\x7f\x1c\x0e\x86f\x93\aN\x02\"//\x14@8lYL\xc09\xc0Gu\xe7\x02\x9b]\xac\xa6!\x96\x91+>Z', 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000280)={0x0, 0xfcb0, 0x13100, 0x3, 0x124}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000220601030000000000000000010000001400078008005387000000000000004000"], 0x28}}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x5, {0x5, 0x9}, 0x2}, 0x1) readv(r1, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0) 2.030286895s ago: executing program 1 (id=140): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@grpid}, {@auto_da_alloc}, {@data_writeback}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a00010000000000000000000200000000000000"], 0x38}}, 0x0) 1.677263227s ago: executing program 2 (id=141): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x108, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xb}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x8b75, 0x1, 0x0, 0x180, 0x3c, 0x2}}, {0x8, 0x2, [0x8001, 0x8]}}, {{0x1c, 0x1, {0x1, 0x68, 0x7, 0x2, 0x0, 0x5, 0x1000, 0x1}}, {0x6, 0x2, [0x6d]}}, {{0x1c, 0x1, {0x95, 0x4, 0xe281, 0x69, 0x2, 0xc3, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x7, 0x8]}}, {{0x1c, 0x1, {0x80, 0x1, 0x9, 0x9, 0x0, 0x7ff, 0x674, 0x8}}, {0x14, 0x2, [0x1000, 0x10, 0xb8f, 0x3, 0x80, 0x8, 0x40, 0x6]}}, {{0x1c, 0x1, {0x1, 0xb, 0x50, 0x50, 0x1, 0x8, 0x2, 0x1}}, {0x6, 0x2, [0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1.24637404s ago: executing program 3 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044055}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe80000000000000000000000000001700000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x40044) 1.173192513s ago: executing program 4 (id=143): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") (async) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4", 0x1}], 0x1, 0xa001, 0x8, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x1, 0x384, &(0x7f0000000800)="$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") (async) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 1.170589482s ago: executing program 3 (id=144): r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.138442633s ago: executing program 3 (id=145): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@func={0x6, 0x0, 0x0, 0xc, 0x1}, @union={0x9, 0x1, 0x0, 0x5, 0x0, 0x80000001, [{0x1, 0x4, 0x9}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000080)=""/30, 0x4b, 0x1e, 0x0, 0x1, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xe8f}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r4, &(0x7f00000009c0), &(0x7f00000006c0)=@udp, 0x1}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x1000}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x14, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 979.329519ms ago: executing program 1 (id=146): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}}, 0x4000040) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e1f, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x40400d0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @local}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 896.610281ms ago: executing program 4 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r1, 0x84}], 0x1, 0x3ff) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x50}}, 0x40050) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x158200, 0x46, 0x20}, 0x18) openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x16) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) listen(r1, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000340), 0x0) 780.405875ms ago: executing program 1 (id=148): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x2c, 0x0, &(0x7f00000001c0)="b9ff036962aa7ebd11c7a25841a9", 0x0, 0xb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000d00)='./file0\x00', 0x2042802, &(0x7f0000001180)={[{@dioread_nolock}, {@noquota}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@inlinecrypt}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x4}}], [{@euid_gt}]}, 0xfa, 0x477, &(0x7f0000001900)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ptrace(0x10, r3) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa666ae27a87c986dd6900000000140601fe8000000000000000000000000039fe8000000000000000000000000000aa4e224e2400", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r0], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808719, &(0x7f0000000400)={[{@nogrpid}, {@nodiscard}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@barrier}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@minixdf}, {@noauto_da_alloc}, {@prjquota}, {@nouid32}, {@data_writeback}, {@dax_inode}], [], 0x2c}, 0x2, 0x50d, &(0x7f00000006c0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000f00)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r8, @ANYBLOB="34002cbd7000fcdbdf2505000000480002800800090009000000080009000a000000060002004e21000008000400b500000005000d000100000014000100fc000000000000000000000000000000e6ff0d000000000008000600080000002c000180080009003d0000000800080000e0ff1f080009004b000000080008000600000008000b007369700048000280060002004e2000000800080007000000edebed733a38f0c11913c1c7e9932c62a6f906000f002c09000006000e004e24000006000b0002000000080008008000000014000100fc0200000000"], 0xe0}}, 0xc0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000240)={0x2, 0x5, 0x5, 0x40, 0x3, 0x5a2}) ptrace$cont(0x21, r3, 0x80000001, 0x4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r9 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) ioctl$RTC_UIE_OFF(r9, 0x7004) creat(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x662800) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 246.843342ms ago: executing program 0 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x13}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}, 0x1, 0x20000, 0x0, 0x604ff3648f564820}, 0x40014) 73.502918ms ago: executing program 3 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x2, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc4}], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x2, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc4}], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, r1, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x1, 0x5001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000047c0)={0x0, 0xffa6, &(0x7f00000005c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000007a0001060000000001000000070000000000000060e99aae2160d2d731da917b366728bee6c3b06a3624b3c9cb4eade96503efbde7f72d96350b347cf929add40043d6c4be63df0586a990cc6e2254879aa09b3f0f44af4cfab961c089e28842786803da274afe926604fcce9a7787461651cb48563faa9b2b09cc22ce2cf9f34892a06fda1a36933eaaf77855349da4dc"], 0x18}], 0x1}, 0x0) 72.977938ms ago: executing program 0 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) creat(&(0x7f0000000000)='./file0\x00', 0x93) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0x25, 0x0}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f0000000140)=@data_c2h={{0x7, 0x8, 0x18, 0x6, 0x2d4a}, 0x9bab, 0x1, 0x8, 0xefe, "4076fe36"}, 0x80, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x1c, 0x6, 0x8, 0x5b, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7810, 0x80, 0xc, 0x10001}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000803}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000100003a20425bd0dbc4ff1298d9a11abda398fe760a40d0f0baa22c3939a", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677265001800028006000e0000000000060003000100000004001200"], 0x44}, 0x1, 0xba01, 0x0, 0x2000c000}, 0x20000040) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xa5e5, 0x451c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xc5b}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7fff}]]}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r8, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x7fff0006}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 0s ago: executing program 1 (id=152): socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918ff00000000000000860188a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf) r7 = syz_open_procfs$userns(r3, &(0x7f00000001c0)) fcntl$setflags(r7, 0x2, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11, r4, 0x200000) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x41, 0x9}}], 0x18}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$packet_int(r9, 0x107, 0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 29.285382][ T28] audit: type=1400 audit(1774943176.765:67): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.308965][ T28] audit: type=1400 audit(1774943176.785:68): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.309665][ T3299] cgroup: Unknown subsys name 'net' [ 29.338810][ T28] audit: type=1400 audit(1774943176.815:69): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.475689][ T3299] cgroup: Unknown subsys name 'cpuset' [ 29.482101][ T3299] cgroup: Unknown subsys name 'rlimit' [ 29.612194][ T28] audit: type=1400 audit(1774943177.085:70): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.639741][ T28] audit: type=1400 audit(1774943177.085:71): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.643812][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.662666][ T28] audit: type=1400 audit(1774943177.085:72): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.693380][ T28] audit: type=1400 audit(1774943177.085:73): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.704160][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.715520][ T28] audit: type=1400 audit(1774943177.095:74): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.750532][ T28] audit: type=1400 audit(1774943177.095:75): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.774932][ T28] audit: type=1400 audit(1774943177.105:76): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.816951][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.875619][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.938120][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.945968][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.953354][ T3319] bridge_slave_0: entered allmulticast mode [ 30.960139][ T3319] bridge_slave_0: entered promiscuous mode [ 30.968885][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.976129][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.983352][ T3319] bridge_slave_1: entered allmulticast mode [ 30.990570][ T3319] bridge_slave_1: entered promiscuous mode [ 31.001172][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.037331][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.046845][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.054259][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.061683][ T3312] bridge_slave_0: entered allmulticast mode [ 31.068132][ T3312] bridge_slave_0: entered promiscuous mode [ 31.076964][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.084246][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.091813][ T3312] bridge_slave_1: entered allmulticast mode [ 31.098422][ T3312] bridge_slave_1: entered promiscuous mode [ 31.109505][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.121917][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.152294][ T3319] team0: Port device team_slave_0 added [ 31.161020][ T3319] team0: Port device team_slave_1 added [ 31.177605][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.206555][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.232235][ T3312] team0: Port device team_slave_0 added [ 31.241034][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.248154][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.274676][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.290162][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.297134][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.323974][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.337609][ T3312] team0: Port device team_slave_1 added [ 31.346385][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.353607][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.361033][ T3311] bridge_slave_0: entered allmulticast mode [ 31.367791][ T3311] bridge_slave_0: entered promiscuous mode [ 31.377150][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.384334][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.391815][ T3311] bridge_slave_1: entered allmulticast mode [ 31.398340][ T3311] bridge_slave_1: entered promiscuous mode [ 31.429882][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.437499][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.464981][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.476524][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.484068][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.491605][ T3313] bridge_slave_0: entered allmulticast mode [ 31.498279][ T3313] bridge_slave_0: entered promiscuous mode [ 31.509516][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.516882][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.524101][ T3313] bridge_slave_1: entered allmulticast mode [ 31.530827][ T3313] bridge_slave_1: entered promiscuous mode [ 31.537336][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 31.546557][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.553679][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.580159][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.600763][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.621311][ T3319] hsr_slave_0: entered promiscuous mode [ 31.627883][ T3319] hsr_slave_1: entered promiscuous mode [ 31.634809][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.653828][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.664351][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.723737][ T3312] hsr_slave_0: entered promiscuous mode [ 31.730209][ T3312] hsr_slave_1: entered promiscuous mode [ 31.736523][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 31.742271][ T3312] Cannot create hsr debugfs directory [ 31.752110][ T3311] team0: Port device team_slave_0 added [ 31.760977][ T3313] team0: Port device team_slave_0 added [ 31.767693][ T3313] team0: Port device team_slave_1 added [ 31.780910][ T3311] team0: Port device team_slave_1 added [ 31.818841][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.826031][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.853394][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.865436][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.872630][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.899635][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.914658][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.922228][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.948523][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.965850][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.972810][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.000080][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.011062][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.018374][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.025746][ T3316] bridge_slave_0: entered allmulticast mode [ 32.032243][ T3316] bridge_slave_0: entered promiscuous mode [ 32.054662][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.062139][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.069493][ T3316] bridge_slave_1: entered allmulticast mode [ 32.076030][ T3316] bridge_slave_1: entered promiscuous mode [ 32.106633][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.117731][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.162293][ T3316] team0: Port device team_slave_0 added [ 32.174704][ T3311] hsr_slave_0: entered promiscuous mode [ 32.181093][ T3311] hsr_slave_1: entered promiscuous mode [ 32.187420][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.193203][ T3311] Cannot create hsr debugfs directory [ 32.207791][ T3316] team0: Port device team_slave_1 added [ 32.224053][ T3313] hsr_slave_0: entered promiscuous mode [ 32.230282][ T3313] hsr_slave_1: entered promiscuous mode [ 32.236443][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.242425][ T3313] Cannot create hsr debugfs directory [ 32.286170][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.293505][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.320801][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.333926][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.346159][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.353778][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.380477][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.396747][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.410012][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.421311][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.471899][ T3316] hsr_slave_0: entered promiscuous mode [ 32.478388][ T3316] hsr_slave_1: entered promiscuous mode [ 32.484301][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 32.490493][ T3316] Cannot create hsr debugfs directory [ 32.518922][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.533535][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.560302][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.569327][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.628103][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.637707][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.647329][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.656546][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.707561][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.717796][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.726918][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.735966][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.745983][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.783724][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.792250][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.800990][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.810696][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.820192][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.847322][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.856832][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.863920][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.873022][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.880706][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.905904][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.923197][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.931671][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.951822][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.959072][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.968724][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.975902][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.991066][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.998519][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.008435][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.015515][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.081465][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.098138][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.108989][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.138428][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.158997][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.167283][ T260] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.174741][ T260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.185613][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.192765][ T260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.206271][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.240252][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.247350][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.260944][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.268532][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.303814][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.313386][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.411135][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.451554][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.522763][ T3319] veth0_vlan: entered promiscuous mode [ 33.557310][ T3319] veth1_vlan: entered promiscuous mode [ 33.576177][ T3312] veth0_vlan: entered promiscuous mode [ 33.591995][ T3311] veth0_vlan: entered promiscuous mode [ 33.604553][ T3312] veth1_vlan: entered promiscuous mode [ 33.620600][ T3319] veth0_macvtap: entered promiscuous mode [ 33.630870][ T3311] veth1_vlan: entered promiscuous mode [ 33.637552][ T3316] veth0_vlan: entered promiscuous mode [ 33.650220][ T3319] veth1_macvtap: entered promiscuous mode [ 33.659672][ T3316] veth1_vlan: entered promiscuous mode [ 33.669074][ T3312] veth0_macvtap: entered promiscuous mode [ 33.681236][ T3312] veth1_macvtap: entered promiscuous mode [ 33.704448][ T3311] veth0_macvtap: entered promiscuous mode [ 33.712663][ T3313] veth0_vlan: entered promiscuous mode [ 33.725868][ T3311] veth1_macvtap: entered promiscuous mode [ 33.735695][ T3313] veth1_vlan: entered promiscuous mode [ 33.742360][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.753396][ T3316] veth0_macvtap: entered promiscuous mode [ 33.763243][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.771763][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.781293][ T3316] veth1_macvtap: entered promiscuous mode [ 33.795757][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.806547][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.817861][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.827054][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.837525][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.854277][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.863933][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.879598][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.894744][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904460][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.915132][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.923322][ T3313] veth0_macvtap: entered promiscuous mode [ 33.932107][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.943590][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.956099][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.976802][ T3313] veth1_macvtap: entered promiscuous mode [ 33.983956][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.013221][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.032385][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.052357][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.070106][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.095605][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.110400][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.121262][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.130202][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.143871][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.162256][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.235411][ T3491] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.284538][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.310919][ T3491] netlink: 'syz.2.3': attribute type 36 has an invalid length. [ 34.319185][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 34.319209][ T28] audit: type=1400 audit(1774943181.695:104): avc: denied { prog_load } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.370094][ T3495] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 34.449398][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.546277][ C1] hrtimer: interrupt took 65435 ns [ 34.558428][ T28] audit: type=1400 audit(1774943181.705:105): avc: denied { bpf } for pid=3486 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.690991][ T28] audit: type=1400 audit(1774943181.705:106): avc: denied { create } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.731286][ T3491] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 34.738277][ T28] audit: type=1400 audit(1774943181.705:107): avc: denied { write } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.741774][ T3491] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 34.772959][ T3495] macvlan1: entered allmulticast mode [ 34.779851][ T3495] veth1_vlan: entered allmulticast mode [ 34.787431][ T3495] team0: Port device macvlan1 added [ 34.794631][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.810739][ T3501] loop0: detected capacity change from 0 to 2048 [ 34.863835][ T28] audit: type=1400 audit(1774943181.705:108): avc: denied { nlmsg_write } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.884517][ T3482] loop4: detected capacity change from 0 to 32768 [ 35.279368][ T3504] loop3: detected capacity change from 0 to 512 [ 35.312638][ T3504] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.390816][ T3504] EXT4-fs (loop3): 1 orphan inode deleted [ 35.406886][ T3504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.430441][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 35.454179][ T3504] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.490647][ T3490] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 35.501105][ T3501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.530364][ T3490] syzkaller1: entered promiscuous mode [ 35.537553][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 35.550222][ T3490] syzkaller1: entered allmulticast mode [ 35.556325][ T3501] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.852020][ T28] audit: type=1400 audit(1774943181.725:109): avc: denied { write } for pid=3486 comm="syz.2.3" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.979358][ T28] audit: type=1400 audit(1774943181.775:110): avc: denied { name_bind } for pid=3481 comm="syz.4.5" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.003811][ T28] audit: type=1400 audit(1774943181.775:111): avc: denied { node_bind } for pid=3481 comm="syz.4.5" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.086115][ T3504] syz.3.4 (3504) used greatest stack depth: 9864 bytes left [ 36.136173][ T3515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1: bg 0: block 345: padding at end of block bitmap is not set [ 36.168790][ T28] audit: type=1400 audit(1774943181.835:112): avc: denied { create } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.694729][ T3519] hub 8-0:1.0: USB hub found [ 36.699697][ T3519] hub 8-0:1.0: 8 ports detected [ 36.720794][ T3519] netlink: 'syz.2.6': attribute type 36 has an invalid length. [ 36.772278][ T3519] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 36.782430][ T3519] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 36.809785][ T3519] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 36.818143][ T3519] veth1_vlan: left allmulticast mode [ 36.830561][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.942359][ T3515] EXT4-fs (loop0): Remounting filesystem read-only [ 37.147972][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.440833][ T3533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.482496][ T3520] loop1: detected capacity change from 0 to 2048 [ 37.500825][ T3535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3535 comm=syz.0.10 [ 37.549671][ T3535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.643628][ T3535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.789373][ T3523] loop3: detected capacity change from 0 to 512 [ 37.878124][ T3523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.926308][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.024439][ T3542] bond1: entered allmulticast mode [ 38.129469][ T3520] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.151640][ T3523] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7: iget: bad i_size value: 38620345925642 [ 38.224052][ T3523] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.234772][ T3523] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7: couldn't read orphan inode 15 (err -117) [ 38.234973][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 38.262438][ C1] EXT4-fs (loop3): initial error at time 1774943185: ext4_orphan_get:1397: inode 15 [ 38.271950][ C1] EXT4-fs (loop3): last error at time 1774943185: ext4_orphan_get:1397: inode 15 [ 38.302868][ T3551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13'. [ 38.314516][ T3523] loop3: lost filesystem error report for type 5 error -117 [ 38.530417][ T3542] syz.2.11 (3542) used greatest stack depth: 9736 bytes left [ 38.557666][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.707768][ T3521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 345: padding at end of block bitmap is not set [ 38.813424][ T3521] EXT4-fs (loop1): Remounting filesystem read-only [ 38.904552][ T3557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7: bg 0: block 5: invalid block bitmap [ 39.073036][ T3549] syz.4.13 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 39.116979][ T3557] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 28 with error 28 [ 39.186976][ T3549] CPU: 1 UID: 0 PID: 3549 Comm: syz.4.13 Not tainted syzkaller #0 PREEMPT(full) [ 39.187090][ T3549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.187103][ T3549] Call Trace: [ 39.187111][ T3549] [ 39.187120][ T3549] __dump_stack+0x1d/0x30 [ 39.187151][ T3549] dump_stack_lvl+0x95/0xd0 [ 39.187209][ T3549] dump_stack+0x15/0x1b [ 39.187256][ T3549] dump_header+0x80/0x240 [ 39.187282][ T3549] oom_kill_process+0x295/0x350 [ 39.187373][ T3549] out_of_memory+0x97d/0xb80 [ 39.187422][ T3549] try_charge_memcg+0x62e/0xa10 [ 39.187461][ T3549] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 39.187491][ T3549] __swap_cache_prepare_and_add+0x67/0x460 [ 39.187587][ T3549] ? alloc_pages_mpol+0x217/0x260 [ 39.187622][ T3549] swap_cache_alloc_folio+0xa2/0x120 [ 39.187670][ T3549] swap_cluster_readahead+0x26e/0x3d0 [ 39.187737][ T3549] swapin_readahead+0xde/0x840 [ 39.187764][ T3549] ? _raw_spin_unlock+0x9/0x30 [ 39.187789][ T3549] ? swap_put_entries_cluster+0x385/0x3a0 [ 39.187867][ T3549] ? swap_put_entries_cluster+0x71/0x3a0 [ 39.187905][ T3549] ? __rcu_read_unlock+0x4e/0x70 [ 39.187930][ T3549] ? swap_cache_get_folio+0x26f/0x280 [ 39.187960][ T3549] do_swap_page+0x2fe/0x21e0 [ 39.187992][ T3549] ? css_rstat_updated+0xbb/0x280 [ 39.188065][ T3549] ? __rcu_read_lock+0x36/0x50 [ 39.188152][ T3549] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 39.188247][ T3549] handle_mm_fault+0xb46/0x3020 [ 39.188282][ T3549] ? vma_start_read+0x1c7/0x2c0 [ 39.188353][ T3549] do_user_addr_fault+0x62f/0x1050 [ 39.188435][ T3549] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 39.188467][ T3549] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 39.188517][ T3549] ? trace_page_fault_user+0x1f/0xe0 [ 39.188551][ T3549] exc_page_fault+0x62/0xa0 [ 39.188619][ T3549] asm_exc_page_fault+0x26/0x30 [ 39.188638][ T3549] RIP: 0033:0x7f1103c94f74 [ 39.188657][ T3549] Code: ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 80 3d 9b d0 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 <80> 3d 6a 07 ee 00 00 49 89 f1 41 89 d2 89 cb c6 05 76 d0 3a 00 01 [ 39.188677][ T3549] RSP: 002b:00007fff64460f80 EFLAGS: 00010246 [ 39.188739][ T3549] RAX: 00007f1104045fa0 RBX: 00007f1104045fa0 RCX: 0000000000000026 [ 39.188755][ T3549] RDX: 0000000000000001 RSI: 00007f1104046038 RDI: 0000000000000004 [ 39.188770][ T3549] RBP: 00007f1104047da0 R08: 0000000000000001 R09: 0000000000000001 [ 39.188786][ T3549] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000009816 [ 39.188801][ T3549] R13: 00007f110404627c R14: 0000000000009756 R15: 00007f1104046270 [ 39.188822][ T3549] [ 39.345985][ T3557] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.345985][ T3557] [ 39.365642][ T3549] memory: usage 307200kB, limit 307200kB, failcnt 492 [ 39.366521][ T3557] EXT4-fs (loop3): Total free blocks count 0 [ 39.371106][ T3549] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 39.376151][ T3557] EXT4-fs (loop3): Free/Dirty block details [ 39.380621][ T3549] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 39.380636][ T3549] Memory cgroup stats for /syz4: [ 39.380785][ T3549] cache 94208 [ 39.403045][ T3557] EXT4-fs (loop3): free_blocks=0 [ 39.409344][ T3549] rss 0 [ 39.409359][ T3549] shmem 0 [ 39.409366][ T3549] mapped_file 94208 [ 39.409374][ T3549] dirty 0 [ 39.409381][ T3549] writeback 94208 [ 39.409389][ T3549] workingset_refault_anon 8 [ 39.409398][ T3549] workingset_refault_file 0 [ 39.409406][ T3549] swap 221184 [ 39.409413][ T3549] swapcached 253952 [ 39.409421][ T3549] pgpgin 4500 [ 39.409428][ T3549] pgpgout 4477 [ 39.409436][ T3549] pgfault 4470 [ 39.409443][ T3549] pgmajfault 8 [ 39.409477][ T3549] inactive_anon 0 [ 39.409548][ T3549] active_anon 0 [ 39.409579][ T3549] inactive_file 94208 [ 39.409587][ T3549] active_file 0 [ 39.409595][ T3549] unevictable 0 [ 39.409615][ T3549] hierarchical_memory_limit 314572800 [ 39.409625][ T3549] hierarchical_memsw_limit 9223372036854771712 [ 39.409635][ T3549] total_cache 94208 [ 39.409643][ T3549] total_rss 0 [ 39.409651][ T3549] total_shmem 0 [ 39.409658][ T3549] total_mapped_file 94208 [ 39.409793][ T3549] total_dirty 0 [ 39.409829][ T3549] total_writeback 94208 [ 39.409836][ T3549] total_workingset_refault_anon 8 [ 39.409847][ T3549] total_workingset_refault_file 0 [ 39.418670][ T3557] EXT4-fs (loop3): dirty_blocks=28 [ 39.426688][ T3549] total_swap 221184 [ 39.426702][ T3549] total_swapcached 253952 [ 39.426710][ T3549] total_pgpgin 4500 [ 39.426717][ T3549] total_pgpgout 4477 [ 39.426726][ T3549] total_pgfault 4470 [ 39.435230][ T3557] EXT4-fs (loop3): Block reservation details [ 39.443474][ T3549] total_pgmajfault 8 [ 39.443490][ T3549] total_inactive_anon 0 [ 39.452647][ T3557] EXT4-fs (loop3): i_reserved_data_blocks=28 [ 39.501364][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 39.501381][ T28] audit: type=1400 audit(1774943186.965:160): avc: denied { create } for pid=3522 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.509421][ T3549] total_active_anon 0 [ 39.616438][ T3523] syz.3.7 (3523) used greatest stack depth: 9352 bytes left [ 39.623041][ T3549] total_inactive_file 94208 [ 39.650292][ T3561] loop2: detected capacity change from 0 to 128 [ 39.654277][ T3549] total_active_file 0 [ 39.683116][ T3561] vfat: Unknown parameter '0000000000000000001300000000000000000013' [ 39.686292][ T3549] total_unevictable 0 [ 39.706672][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.728521][ T3549] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 39.758241][ T3560] bridge0: entered promiscuous mode [ 39.763998][ T3549] ,cpuset= [ 39.770647][ T3316] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 39.777863][ T3549] / [ 39.785020][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.789359][ T3549] ,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.13,pid=3549,uid=0 [ 39.868673][ T3549] Memory cgroup out of memory: Killed process 3549 (syz.4.13) total-vm:166044kB, anon-rss:1228kB, file-rss:26572kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 39.887156][ T3533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.961231][ T3566] capability: warning: `syz.1.15' uses 32-bit capabilities (legacy support in use) [ 39.973190][ T3550] syz.4.13 (3550) used greatest stack depth: 8824 bytes left [ 39.997912][ T3567] hub 8-0:1.0: USB hub found [ 40.003005][ T3567] hub 8-0:1.0: 8 ports detected [ 40.021112][ T3567] netlink: 'syz.3.16': attribute type 36 has an invalid length. [ 40.076893][ T3568] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 40.086394][ T3568] macvlan1: entered allmulticast mode [ 40.094570][ T3568] veth1_vlan: entered allmulticast mode [ 40.104739][ T3568] team0: Port device macvlan1 added [ 40.137010][ T3567] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 40.147531][ T3567] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 40.261323][ T28] audit: type=1400 audit(1774943187.735:161): avc: denied { write } for pid=3565 comm="syz.1.15" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.302325][ T3566] program syz.1.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.544466][ T28] audit: type=1400 audit(1774943187.765:162): avc: denied { open } for pid=3565 comm="syz.1.15" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.582387][ T28] audit: type=1400 audit(1774943188.055:163): avc: denied { create } for pid=3573 comm="syz.1.18" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.653960][ T3576] program syz.1.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.703431][ T3579] loop1: detected capacity change from 0 to 128 [ 40.716070][ T28] audit: type=1400 audit(1774943188.155:164): avc: denied { create } for pid=3570 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.743257][ T28] audit: type=1400 audit(1774943188.155:165): avc: denied { map } for pid=3570 comm="syz.4.17" path="socket:[5223]" dev="sockfs" ino=5223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.764502][ T3582] loop3: detected capacity change from 0 to 512 [ 40.794226][ T28] audit: type=1400 audit(1774943188.155:166): avc: denied { read accept } for pid=3570 comm="syz.4.17" path="socket:[5223]" dev="sockfs" ino=5223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.819274][ T28] audit: type=1400 audit(1774943188.185:167): avc: denied { mount } for pid=3578 comm="syz.1.20" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.842939][ T28] audit: type=1400 audit(1774943188.235:168): avc: denied { map } for pid=3578 comm="syz.1.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.868896][ T28] audit: type=1400 audit(1774943188.235:169): avc: denied { read write } for pid=3578 comm="syz.1.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.878206][ T3582] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 40.907925][ T3582] EXT4-fs (loop3): group descriptors corrupted! [ 41.024015][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 41.034551][ T3586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 41.043817][ T3586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 41.053126][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 41.087777][ T3533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.178878][ T3533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.221188][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 41.232597][ T3597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3597 comm=syz.3.24 [ 41.358338][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.371524][ T3602] tipc: Enabling of bearer rejected, failed to enable media [ 41.482210][ T3602] loop3: detected capacity change from 0 to 512 [ 41.501204][ T3602] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 41.530946][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.565467][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.760216][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.142794][ T3615] loop0: detected capacity change from 0 to 2048 [ 42.205556][ T3622] program syz.3.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.256145][ T3615] loop0: p2 < > p4 [ 42.261339][ T3615] loop0: p4 size 262144 extends beyond EOD, truncated [ 42.325520][ T3615] netlink: 564 bytes leftover after parsing attributes in process `syz.0.28'. [ 42.345264][ T3631] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.360346][ T3615] netlink: 564 bytes leftover after parsing attributes in process `syz.0.28'. [ 42.403238][ T3624] loop4: detected capacity change from 0 to 512 [ 42.411002][ T3624] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.428317][ T3624] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 42.453186][ T3624] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 42.471376][ T3624] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 42.497218][ T3615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28'. [ 42.515047][ T3624] System zones: 0-2, 18-18, 34-34 [ 42.593870][ T3638] loop3: detected capacity change from 0 to 2048 [ 42.652600][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.686058][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 42.698454][ T3648] netlink: 165 bytes leftover after parsing attributes in process `syz.1.35'. [ 42.743534][ T3648] hub 8-0:1.0: USB hub found [ 42.748765][ T3648] hub 8-0:1.0: 8 ports detected [ 42.763438][ T3648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35'. [ 42.780972][ T3648] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 42.797703][ T3648] netlink: 'syz.1.35': attribute type 10 has an invalid length. [ 42.866866][ T3648] macvlan1: entered allmulticast mode [ 42.876667][ T3648] veth1_vlan: entered allmulticast mode [ 42.886606][ T3648] team0: Port device macvlan1 added [ 42.902281][ T3624] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.31: bad orphan inode 15 [ 42.942938][ T3638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.979407][ T3624] loop4: lost filesystem error report for type 5 error -117 [ 42.979746][ T3624] ext4_test_bit(bit=14, block=18) = 1 [ 42.987404][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 42.987421][ C1] EXT4-fs (loop4): initial error at time 1774943190: ext4_orphan_get:1423 [ 42.987445][ C1] EXT4-fs (loop4): last error at time 1774943190: ext4_orphan_get:1423 [ 43.088510][ T3638] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.205054][ T3624] is_bad_inode(inode)=0 [ 43.209447][ T3624] NEXT_ORPHAN(inode)=2264924160 [ 43.217365][ T3624] max_ino=32 [ 43.227042][ T3624] i_nlink=0 [ 43.237780][ T3624] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.31: corrupted inode contents [ 43.272500][ T3624] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.272742][ T3624] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #15: comm syz.4.31: mark_inode_dirty error [ 43.366887][ T3624] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.370872][ T3624] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.31: corrupted inode contents [ 43.404114][ T3653] loop1: detected capacity change from 0 to 128 [ 43.411314][ T3653] msdos: Unknown parameter '' [ 43.417081][ T3653] ======================================================= [ 43.417081][ T3653] WARNING: The mand mount option has been deprecated and [ 43.417081][ T3653] and is ignored by this kernel. Remove the mand [ 43.417081][ T3653] option from the mount to silence this warning. [ 43.417081][ T3653] ======================================================= [ 43.456959][ T3624] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.457225][ T3624] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.31: mark_inode_dirty error [ 43.498755][ T3624] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.498941][ T3624] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.31: mark inode dirty (error -117) [ 43.539634][ T3659] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.34: bg 0: block 345: padding at end of block bitmap is not set [ 43.564326][ T3624] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.564681][ T3624] EXT4-fs warning (device loop4): ext4_evict_inode:285: xattr delete (err -117) [ 43.584690][ T3660] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.588913][ T3659] EXT4-fs (loop3): Remounting filesystem read-only [ 43.605547][ T3624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.656282][ T3663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3663 comm=syz.1.38 [ 43.706713][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.730036][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.771046][ T3656] syz.0.37 (3656) used greatest stack depth: 7256 bytes left [ 43.938733][ T3660] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.994744][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.053564][ T3660] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.089599][ T3680] program syz.3.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.104780][ T3668] loop0: detected capacity change from 0 to 512 [ 44.122433][ T3660] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.134481][ T3668] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.152276][ T3668] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 44.162225][ T3668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 44.171489][ T3668] System zones: 0-2, 18-18, 34-34 [ 44.177581][ T3668] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.40: bad orphan inode 15 [ 44.188048][ T3668] loop0: lost filesystem error report for type 5 error -117 [ 44.194980][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 44.196162][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.202578][ C0] EXT4-fs (loop0): initial error at time 1774943191: ext4_orphan_get:1423 [ 44.225098][ T3668] ext4_test_bit(bit=14, block=18) = 1 [ 44.230002][ C0] EXT4-fs (loop0): last error at time 1774943191: ext4_orphan_get:1423 [ 44.278141][ T3668] is_bad_inode(inode)=0 [ 44.301628][ T3668] NEXT_ORPHAN(inode)=2264924160 [ 44.307386][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.323475][ T3668] max_ino=32 [ 44.327029][ T3668] i_nlink=0 [ 44.339008][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.416112][ T3668] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.40: corrupted inode contents [ 44.432205][ T1269] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.441602][ T3668] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.449734][ T3694] hub 8-0:1.0: USB hub found [ 44.464817][ T3694] hub 8-0:1.0: 8 ports detected [ 44.491510][ T3694] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 44.509155][ T3694] netlink: 'syz.2.46': attribute type 10 has an invalid length. [ 44.550335][ T3668] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.40: mark_inode_dirty error [ 44.580090][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.614933][ T3668] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.615684][ T3668] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.40: corrupted inode contents [ 44.658093][ T3691] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.694620][ T3697] loop3: detected capacity change from 0 to 1024 [ 44.702053][ T3668] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.702338][ T3668] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.40: mark_inode_dirty error [ 44.738081][ T3697] EXT4-fs: inline encryption not supported [ 44.808880][ T3697] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 44.808880][ T3697] [ 44.821848][ T3668] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.822256][ T3668] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.40: mark inode dirty (error -117) [ 44.856084][ T3668] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.863336][ T3668] EXT4-fs warning (device loop0): ext4_evict_inode:285: xattr delete (err -117) [ 44.882420][ T3668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.898992][ T3691] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.915171][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 44.915189][ T28] audit: type=1400 audit(1774943192.385:197): avc: denied { getopt } for pid=3667 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.941382][ T28] audit: type=1400 audit(1774943192.395:198): avc: denied { connect } for pid=3700 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.963543][ T28] audit: type=1400 audit(1774943192.395:199): avc: denied { setopt } for pid=3700 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.988514][ T28] audit: type=1400 audit(1774943192.395:200): avc: denied { bind } for pid=3700 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.008768][ T28] audit: type=1400 audit(1774943192.415:201): avc: denied { write } for pid=3700 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.028720][ T28] audit: type=1400 audit(1774943192.415:202): avc: denied { read } for pid=3700 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.029775][ T3691] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.031072][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.084139][ T28] audit: type=1400 audit(1774943192.555:203): avc: denied { bind } for pid=3705 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.157858][ T28] audit: type=1400 audit(1774943192.635:204): avc: denied { read } for pid=3713 comm="syz.2.52" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.182136][ T28] audit: type=1400 audit(1774943192.635:205): avc: denied { open } for pid=3713 comm="syz.2.52" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.220632][ T28] audit: type=1400 audit(1774943192.655:206): avc: denied { ioctl } for pid=3713 comm="syz.2.52" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.276220][ T3691] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.328102][ T3717] bridge_slave_1: left allmulticast mode [ 45.340254][ T3717] bridge_slave_1: left promiscuous mode [ 45.355178][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.363601][ T3717] bridge_slave_0: left allmulticast mode [ 45.370485][ T3717] bridge_slave_0: left promiscuous mode [ 45.455516][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.547885][ T1269] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.564290][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.573166][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.788807][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.902334][ T3724] loop3: detected capacity change from 0 to 512 [ 45.920039][ T3724] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.937543][ T3724] EXT4-fs (loop3): 1 truncate cleaned up [ 45.951670][ T3724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.954098][ T3732] program syz.2.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.085279][ T3734] loop4: detected capacity change from 0 to 2048 [ 46.147679][ T3301] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 46.149329][ T3301] loop4: p4 size 8388608 extends beyond EOD, truncated [ 46.249006][ T3743] loop0: detected capacity change from 0 to 1024 [ 46.265483][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.280135][ T3743] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.307513][ T3745] loop3: detected capacity change from 0 to 512 [ 46.322464][ T3743] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #3: block 5: comm syz.0.60: lblock 5 mapped to illegal pblock 5 (length 1) [ 46.354977][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 46.361543][ C0] EXT4-fs (loop0): initial error at time 1774943193: ext4_map_blocks:828: inode 3: block 5 [ 46.367685][ T3743] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.60: Failed to acquire dquot type 0 [ 46.371669][ C0] EXT4-fs (loop0): last error at time 1774943193: ext4_map_blocks:828: inode 3: block 5 [ 46.394134][ T3743] loop0: lost filesystem error report for type 5 error -117 [ 46.394777][ T3743] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 5: comm syz.0.60: lblock 5 mapped to illegal pblock 5 (length 1) [ 46.445177][ T3743] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.60: Failed to acquire dquot type 0 [ 46.493390][ T3743] loop0: lost filesystem error report for type 5 error -117 [ 46.494151][ T3743] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.60: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.517598][ T3743] loop0: lost filesystem error report for type 5 error -117 [ 46.517880][ T3743] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 5: comm syz.0.60: lblock 5 mapped to illegal pblock 5 (length 1) [ 46.550851][ T3743] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.60: Failed to acquire dquot type 0 [ 46.562896][ T3743] loop0: lost filesystem error report for type 5 error -117 [ 46.563154][ T3743] EXT4-fs (loop0): 1 orphan inode deleted [ 46.578087][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.609719][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.703260][ T3742] loop2: detected capacity change from 0 to 2048 [ 46.791117][ T3750] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 46.791117][ T3750] The task syz.1.63 (3750) triggered the difference, watch for misbehavior. [ 46.817553][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.350300][ T3763] __nla_validate_parse: 7 callbacks suppressed [ 47.350318][ T3763] netlink: 165 bytes leftover after parsing attributes in process `syz.0.62'. [ 47.376624][ T3742] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.415116][ T3763] hub 8-0:1.0: USB hub found [ 47.420385][ T3763] hub 8-0:1.0: 8 ports detected [ 47.431837][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 47.447238][ T3763] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 47.457554][ T3763] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 47.470188][ T3763] netlink: 'syz.0.62': attribute type 10 has an invalid length. [ 47.722004][ T3768] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.59: bg 0: block 345: padding at end of block bitmap is not set [ 47.786756][ T3768] EXT4-fs (loop2): Remounting filesystem read-only [ 47.787443][ T3763] macvlan1: entered allmulticast mode [ 47.802890][ T3763] veth1_vlan: entered allmulticast mode [ 47.812799][ T3763] team0: Port device macvlan1 added [ 47.968438][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.999281][ T3773] program syz.3.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.143397][ T3784] Zero length message leads to an empty skb [ 48.444125][ T3734] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 48.448012][ T3734] loop4: p4 size 8388608 extends beyond EOD, truncated [ 48.877090][ T3800] loop0: detected capacity change from 0 to 164 [ 48.925811][ T3800] Unable to read rock-ridge attributes [ 49.017497][ T3800] Unable to read rock-ridge attributes [ 49.079664][ T3800] Unable to read rock-ridge attributes [ 49.088675][ T3809] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3809 comm=syz.1.74 [ 49.137054][ T3809] hub 8-0:1.0: USB hub found [ 49.141824][ T3809] hub 8-0:1.0: 8 ports detected [ 49.158084][ T3809] netlink: 'syz.1.74': attribute type 36 has an invalid length. [ 49.171736][ T3809] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 49.181847][ T3809] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 49.205724][ T3809] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 49.214179][ T3809] veth1_vlan: left allmulticast mode [ 49.294345][ T3800] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.952985][ T3827] netlink: 165 bytes leftover after parsing attributes in process `syz.0.77'. [ 50.008001][ T3829] program syz.3.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.091150][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 50.260918][ T3835] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 50.341485][ T3831] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 50.351803][ T3831] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.367924][ T3835] veth1_vlan: left allmulticast mode [ 50.934814][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 51.126182][ T28] audit: type=1400 audit(1774943198.405:282): avc: denied { create } for pid=3840 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.148812][ T3841] loop2: detected capacity change from 0 to 512 [ 51.219178][ T3841] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.233369][ T3848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3848 comm=syz.0.85 [ 51.289142][ T3848] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 51.300108][ T3841] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 51.314973][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 51.323444][ C1] EXT4-fs (loop2): initial error at time 1774943198: ext4_mb_generate_buddy:1317 [ 51.324739][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 51.333419][ C1] EXT4-fs (loop2): last error at time 1774943198: ext4_mb_generate_buddy:1317 [ 51.336580][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 51.344195][ T3841] Quota error (device loop2): write_blk: dquota write failed [ 51.355436][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p15, 10) failed: No such file or directory [ 51.363546][ T3841] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 51.384035][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p17, 10) failed: No such file or directory [ 51.424525][ T3855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 51.466209][ T3841] Quota error (device loop2): write_blk: dquota write failed [ 51.502559][ T3856] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 51.515947][ T28] audit: type=1400 audit(1774943198.895:283): avc: denied { create } for pid=3843 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.636105][ T3817] udevd[3817]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 51.646557][ T3810] udevd[3810]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 51.661896][ T3841] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 51.691400][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 51.881336][ T3812] udevd[3812]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 51.907635][ T3841] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.83: Failed to acquire dquot type 1 [ 51.931288][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 51.943465][ T3810] udevd[3810]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 51.995034][ T3841] loop2: lost filesystem error report for type 5 error -28 [ 51.998571][ T28] audit: type=1400 audit(1774943198.895:284): avc: denied { write } for pid=3843 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.035133][ T3841] EXT4-fs (loop2): 1 truncate cleaned up [ 52.045367][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.079177][ T3861] syzkaller0: entered promiscuous mode [ 52.084862][ T3861] syzkaller0: entered allmulticast mode [ 52.115107][ T3861] tc action pedit offset must be on 32 bit boundaries [ 52.122199][ T3861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34627 sclass=netlink_route_socket pid=3861 comm=syz.4.79 [ 52.184557][ T3858] process 'syz.0.86' launched 'syzkaller1' with NULL argv: empty string added [ 52.201888][ T28] audit: type=1400 audit(1774943198.975:285): avc: denied { mac_admin } for pid=3843 comm="syz.3.84" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.242250][ T3864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.283396][ T28] audit: type=1400 audit(1774943198.985:286): avc: denied { getopt } for pid=3843 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.377240][ T28] audit: type=1400 audit(1774943198.985:287): avc: denied { create } for pid=3843 comm="syz.3.84" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 52.539293][ T3871] loop3: detected capacity change from 0 to 1024 [ 52.675756][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.696775][ T3874] netlink: 'syz.4.90': attribute type 3 has an invalid length. [ 52.704566][ T3874] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 52.755316][ T3874] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.90'. [ 52.769845][ T3882] program syz.3.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.853679][ T3889] Illegal XDP return value 40101921 on prog (id 43) dev syz_tun, expect packet loss! [ 52.868623][ T3884] loop4: detected capacity change from 0 to 128 [ 53.115623][ T3901] netlink: 165 bytes leftover after parsing attributes in process `syz.0.95'. [ 53.178800][ T3901] hub 8-0:1.0: USB hub found [ 53.183725][ T3901] hub 8-0:1.0: 8 ports detected [ 53.191581][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 53.204281][ T3903] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 53.214560][ T3903] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 53.227170][ T3903] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 53.621497][ T3911] netlink: 'syz.4.100': attribute type 4 has an invalid length. [ 53.722259][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 54.038702][ T3924] netlink: 666 bytes leftover after parsing attributes in process `syz.3.104'. [ 54.793994][ T3943] loop2: detected capacity change from 0 to 1024 [ 54.815218][ T3943] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.834141][ T3943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.863510][ T3943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.884749][ T3946] batadv_slave_1: entered promiscuous mode [ 54.972289][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.989655][ T3956] loop3: detected capacity change from 0 to 512 [ 54.997267][ T3956] FAT-fs (loop3): bogus number of FAT sectors [ 55.003433][ T3956] FAT-fs (loop3): Can't find a valid FAT filesystem [ 55.093948][ T3965] loop0: detected capacity change from 0 to 512 [ 55.117255][ T3965] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 55.131163][ T3965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 55.192366][ T3968] netlink: 165 bytes leftover after parsing attributes in process `syz.3.115'. [ 55.235533][ T3968] hub 8-0:1.0: USB hub found [ 55.240343][ T3968] hub 8-0:1.0: 8 ports detected [ 55.253687][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 55.269696][ T3968] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 55.279742][ T3968] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 55.294893][ T3968] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 55.303356][ T3968] veth1_vlan: left allmulticast mode [ 55.355415][ T3963] loop2: detected capacity change from 0 to 512 [ 55.431181][ T3963] vfat: Unknown parameter '' [ 55.508000][ T3963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 55.581963][ T3963] tipc: Invalid UDP bearer configuration [ 55.582310][ T3963] tipc: Enabling of bearer rejected, failed to enable media [ 55.718753][ T3945] batadv_slave_1: left promiscuous mode [ 55.962671][ T3984] Cannot find set identified by id 0 to match [ 56.043132][ T3995] loop0: detected capacity change from 0 to 512 [ 56.076100][ T3984] loop3: detected capacity change from 0 to 128 [ 56.083779][ T3984] msdos: Unknown parameter '\-8a|G~Idos1xfloppy' [ 56.103504][ T3995] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 56.188285][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 56.188305][ T28] audit: type=1400 audit(1774943203.655:308): avc: denied { watch } for pid=4011 comm="syz.0.130" path="/proc/94" dev="proc" ino=6678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.238705][ T28] audit: type=1400 audit(1774943203.715:309): avc: denied { create } for pid=4017 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.245069][ T4026] netlink: 236 bytes leftover after parsing attributes in process `syz.0.133'. [ 56.345563][ T4034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 56.352212][ T4034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.365340][ T4034] vhci_hcd vhci_hcd.0: Device attached [ 56.421553][ T4038] hub 8-0:1.0: USB hub found [ 56.426491][ T4038] hub 8-0:1.0: 8 ports detected [ 56.442364][ T4038] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 56.452443][ T4038] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.467267][ T4038] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 56.608303][ T4042] capability: warning: `syz.2.137' uses deprecated v2 capabilities in a way that may be insecure [ 56.635128][ T23] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 56.924191][ T4035] vhci_hcd: connection reset by peer [ 56.946226][ T3610] vhci_hcd vhci_hcd.1: stop threads [ 57.269804][ T3610] vhci_hcd vhci_hcd.1: release socket [ 57.281827][ T4052] loop1: detected capacity change from 0 to 512 [ 57.726191][ T3610] vhci_hcd vhci_hcd.1: disconnect device [ 57.785013][ T4052] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 57.845242][ T4056] loop4: detected capacity change from 0 to 2048 [ 57.876057][ T4068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4068 comm=syz.2.141 [ 57.916260][ T4056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.963076][ T4072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.006195][ T4059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.037074][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.056744][ T4072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.115119][ T28] audit: type=1400 audit(1774943205.585:310): avc: denied { bind } for pid=4074 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.146642][ T4077] __nla_validate_parse: 3 callbacks suppressed [ 58.146728][ T4077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.147'. [ 58.197828][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 58.259753][ T4079] loop1: detected capacity change from 0 to 512 [ 58.329132][ T4083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 58.346921][ T28] audit: type=1400 audit(1774943205.815:311): avc: denied { append } for pid=4078 comm="syz.1.148" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.391353][ T4079] loop1: detected capacity change from 0 to 512 [ 58.439547][ T4079] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.815796][ T4059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.868542][ T28] audit: type=1400 audit(1774943206.345:312): avc: denied { read } for pid=4087 comm="syz.0.151" path="socket:[6831]" dev="sockfs" ino=6831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.914464][ T4059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.018960][ T4092] ================================================================== [ 59.027621][ T4092] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 59.028258][ T28] audit: type=1400 audit(1774943206.495:313): avc: denied { mounton } for pid=4087 comm="syz.0.151" path="/29/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.035117][ T4092] [ 59.035127][ T4092] write to 0xffff88813a41a000 of 4096 bytes by task 4091 on cpu 0: [ 59.035146][ T4092] _copy_from_iter+0x106/0xea0 [ 59.035173][ T4092] copy_page_from_iter+0x178/0x2a0 [ 59.035198][ T4092] process_vm_rw+0x6ad/0x9c0 [ 59.035216][ T4092] __x64_sys_process_vm_writev+0x78/0x90 [ 59.035237][ T4092] x64_sys_call+0x1592/0x3020 [ 59.083172][ T4088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4088 comm=syz.0.151 [ 59.088623][ T4092] do_syscall_64+0x12c/0x370 [ 59.088658][ T4092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.088680][ T4092] [ 59.088687][ T4092] write to 0xffff88813a41a000 of 4096 bytes by task 4092 on cpu 1: [ 59.088707][ T4092] _copy_from_iter+0x106/0xea0 [ 59.088736][ T4092] copy_page_from_iter+0x178/0x2a0 [ 59.088764][ T4092] process_vm_rw+0x6ad/0x9c0 [ 59.088785][ T4092] __x64_sys_process_vm_writev+0x78/0x90 [ 59.088805][ T4092] x64_sys_call+0x1592/0x3020 [ 59.088830][ T4092] do_syscall_64+0x12c/0x370 [ 59.088857][ T4092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.088878][ T4092] [ 59.164960][ T4092] Reported by Kernel Concurrency Sanitizer on: [ 59.171291][ T4092] CPU: 1 UID: 0 PID: 4092 Comm: syz.3.150 Not tainted syzkaller #0 PREEMPT(full) [ 59.180835][ T4092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.191071][ T4092] ================================================================== [ 59.226655][ T4059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.239544][ T4089] loop0: detected capacity change from 0 to 2048 [ 59.320486][ T4089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.346835][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.355331][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.374282][ T4089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.388979][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.401450][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.430205][ T4088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4088 comm=syz.0.151 [ 59.527931][ T4089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.151'. [ 59.794928][ T4083] Set syz1 is full, maxelem 65536 reached [ 61.695039][ T23] usb 3-1: enqueue for inactive port 0 [ 61.700561][ T23] usb 3-1: enqueue for inactive port 0 [ 61.775131][ T23] vhci_hcd vhci_hcd.1: vhci_device speed not set