last executing test programs: 13m13.948531836s ago: executing program 0 (id=1906): socket$qrtr(0x2a, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1}, 0xfffffff0}], 0x1, 0x0, 0x0) 13m13.860909251s ago: executing program 0 (id=1908): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @empty, @void, {@x25={0x805, {0x2, 0xfe, 0xf3, "18ce87d1dfe491e78ca8d07859f80dbfe1b7e3c8ed10a759b7edfa19a5093f44995996aa404a063ac8369a938d28cfc2ff3458823a3828efff6d6b133c66c284ede5c874e833dd3f8968a068559c2d5ea2f852e5674ede44e877564b251768223b6ea8ab3be60fdf8582f947970153ab9145d555cb09ad"}}}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 13m12.032390591s ago: executing program 0 (id=1917): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="3299", 0x2}], 0x1, 0x1) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r3, &(0x7f0000000340)="2c64c3d694", 0x5, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x4, 0x1000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6, r5}, 0x6) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d754", 0x67}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598", 0xb5}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="52c1200795785ced9271d7731e97f6ba83b9a7488c08cc478be431490c3017a7d076d747b2ff91a5", 0x28}, {&(0x7f0000000140)="b6320fd093b5ac9c5c5b77c78ebffdab874a16b30098fa6457cedc7b3573c56e40c88f6052bfb776d8d201c82788b44a97fcb7b5eff6bbd1e9b4d97a6fa970adac912dfbedbdcd97e57c9dafa68326357f94f16edb34fe14287113e29f81595a1a7747527a9edff498df115a1636c649366ac184ebc55de03f2174c92de259ea59328cf4a5e1e28d38859f253d16376c01d059d17a5b2f42c2e220e8f41bf1c4a178b4a7e78cdd67b238d3088a74a540f44914c42192c305b0c59b77084444e471bf5f7379d598de62b395cf532429", 0xcf}, {&(0x7f00000002c0)="a2295efe444f7f5a2ad997cfa7d82f3697ba9fa155cae0f0cec3e91e7b87a0d2eb5e0b652eb43503fee7ca81528aacc049e08354b345f6fd5225cb4cf11ba9f66c053fac23c8", 0x46}, {0x0}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13m11.109691426s ago: executing program 0 (id=1920): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r4 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x3d) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$inet(r7, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r12, @ANYBLOB="230525bd7000fedbdf25050000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f0000000680)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c51"], 0x34}}, 0x0) 13m10.638014609s ago: executing program 0 (id=1921): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x2, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827780, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x42, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x1, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r6, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xfd}, 0x6333, 0xffffffffffffffff, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_cancel(0x0, 0x0, 0x0) 13m9.61200925s ago: executing program 0 (id=1928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xd}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000680)="efa0", 0x2}], 0x1}, 0x8086) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000006c0)='E=', 0x2}], 0x1, 0x0, 0x0, 0x4011}, 0x844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="333254034acef498fb5617584d5e67e122864b6d03bfa8a16e2c9d2ea911106d72ef08ea53e04e0208b504c16b53661bffbfdc23b0", 0x35, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff80000001, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0xc010}, 0x40001) 13m9.569490372s ago: executing program 32 (id=1928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xd}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000680)="efa0", 0x2}], 0x1}, 0x8086) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000006c0)='E=', 0x2}], 0x1, 0x0, 0x0, 0x4011}, 0x844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="333254034acef498fb5617584d5e67e122864b6d03bfa8a16e2c9d2ea911106d72ef08ea53e04e0208b504c16b53661bffbfdc23b0", 0x35, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff80000001, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0xc010}, 0x40001) 5m17.335794307s ago: executing program 2 (id=4854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0xd, 0xd}, {0xffff, 0xb}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004894) 5m17.142084426s ago: executing program 2 (id=4857): request_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r2, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 5m17.06358813s ago: executing program 2 (id=4858): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r0, 0x0) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 5m17.000208124s ago: executing program 2 (id=4860): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 5m16.930605307s ago: executing program 2 (id=4862): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x30}}], 0x1, 0xc0) 5m16.833980942s ago: executing program 2 (id=4866): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x3d}, &(0x7f0000000180)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x244cd1, &(0x7f0000000480)={[{@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x284, &(0x7f0000000700)="$eJzs3E9rE10Ux/Ffk/5NaZPFwwMK4kE3uhna+AqCtCAGKrURdSFM7URDxqRkYiUitju3vguhuHQnqG+gG3fuxU0RBDddiJEmmSatgbbaONF8PxDmZs6czL2TmXBmIHf75vMHxXwQU0tM2tCOlNLeKg21YxrSqDpt6OLk1w9nrt+6fTWTze7G5jNLl9JmNn32zaMnL8+9q07eeDX9ekxbqTvbX9Ift/7fOrX9fSn89HLVXFsul6vusu/ZSiEoOmbXfM8NPCuUAq+yL573y6urNXNLK1OJ1YoXBOaWalb0alYtW7VSM/eeWyiZ4zg2ldCgiR87I7e5uOhmetIZRGGi28pKJePGuwZzm3+iUwAAoL+06n8n71YVG7ffrP/nFs2OVv/fLwRWCKx0WP0fE/V/71D/D4Ld+j/Run73o/4HAAAAAAAAAAAAAAAAAAAAAOBvsFOvJ+v1ejJchq8xSeOSwvdR9xO9wfc/2Dr+uDcu+c/Wcmu55rIZz+RVkC9PMyPSt8b50NJsz1/Jzs1YQ0pv/fVW/vpaLq6xMD+U6p4/28y3/fkjSnTuP62k/uuen+6aP6oL5zvyHSX1/q7K8rXSOK/b+U9nzS4vZA/kTzS2AwAAAADgX+DYnp/u3xtxx8JpQw7EmyvbzweUPOT5wIH762GdHo5u3AAAAAAADJKg9rjo+r5XoXGcxkKPDt2LfhlgPzRikiLa+2dJ/XEQTrTx6WHzqj/KxlH/MgEAAAA4ae2iP+qeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuI46eVi4/a/MPdaxu3g0owQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6w48AAAD//0zfHpw=") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500240012800b00010067726574617000001400028008000700e000000208000100", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbf9, 0x4}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616efd117dfd733d66642c7266", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000300)={[{@nogrpid}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'syzkaller0\x00', @remote}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r7) lseek(r3, 0x7, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m16.777237134s ago: executing program 33 (id=4866): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x3d}, &(0x7f0000000180)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x244cd1, &(0x7f0000000480)={[{@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x284, &(0x7f0000000700)="$eJzs3E9rE10Ux/Ffk/5NaZPFwwMK4kE3uhna+AqCtCAGKrURdSFM7URDxqRkYiUitju3vguhuHQnqG+gG3fuxU0RBDddiJEmmSatgbbaONF8PxDmZs6czL2TmXBmIHf75vMHxXwQU0tM2tCOlNLeKg21YxrSqDpt6OLk1w9nrt+6fTWTze7G5jNLl9JmNn32zaMnL8+9q07eeDX9ekxbqTvbX9Ift/7fOrX9fSn89HLVXFsul6vusu/ZSiEoOmbXfM8NPCuUAq+yL573y6urNXNLK1OJ1YoXBOaWalb0alYtW7VSM/eeWyiZ4zg2ldCgiR87I7e5uOhmetIZRGGi28pKJePGuwZzm3+iUwAAoL+06n8n71YVG7ffrP/nFs2OVv/fLwRWCKx0WP0fE/V/71D/D4Ld+j/Run73o/4HAAAAAAAAAAAAAAAAAAAAAOBvsFOvJ+v1ejJchq8xSeOSwvdR9xO9wfc/2Dr+uDcu+c/Wcmu55rIZz+RVkC9PMyPSt8b50NJsz1/Jzs1YQ0pv/fVW/vpaLq6xMD+U6p4/28y3/fkjSnTuP62k/uuen+6aP6oL5zvyHSX1/q7K8rXSOK/b+U9nzS4vZA/kTzS2AwAAAADgX+DYnp/u3xtxx8JpQw7EmyvbzweUPOT5wIH762GdHo5u3AAAAAAADJKg9rjo+r5XoXGcxkKPDt2LfhlgPzRikiLa+2dJ/XEQTrTx6WHzqj/KxlH/MgEAAAA4ae2iP+qeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuI46eVi4/a/MPdaxu3g0owQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6w48AAAD//0zfHpw=") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500240012800b00010067726574617000001400028008000700e000000208000100", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbf9, 0x4}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616efd117dfd733d66642c7266", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000300)={[{@nogrpid}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'syzkaller0\x00', @remote}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r7) lseek(r3, 0x7, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m36.570476407s ago: executing program 5 (id=5368): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080), 0x3, 0x473, &(0x7f0000000800)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getitimer(0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) 4m36.165844307s ago: executing program 5 (id=5372): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 4m35.89035006s ago: executing program 5 (id=5374): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee6888847", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m35.806184855s ago: executing program 5 (id=5375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) ftruncate(0xffffffffffffffff, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x4, 0x12) 4m35.08570722s ago: executing program 5 (id=5396): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f00000003c0)=ANY=[@ANYBLOB="0096397bb229f118b1f6c334ff95e9d57079d2a61ef7526c03c3a0d9cd515719956a0e5922340c97beade3e691744c236c61868da817036b0bab4516cc735ee856ef073c7b0b540347b358404ebe8e0c22e3a8a3caad47889d996a07d6988b211450783f4fdfbb8ae60572ea3bb70fb29560525b"], 0x83, 0x22e, &(0x7f0000000940)="$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") accept$unix(r1, 0x0, 0x0) 4m35.08534182s ago: executing program 5 (id=5398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) gettid() r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0xfc) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f8cc", 0x2}], 0x1}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 4m35.08235304s ago: executing program 34 (id=5398): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) gettid() r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0xfc) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f8cc", 0x2}], 0x1}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 4m27.313777495s ago: executing program 7 (id=5481): socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000340), &(0x7f0000000400)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @remote, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 4m27.173864792s ago: executing program 7 (id=5482): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x7c}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000000000a14000000020a0900000000000000000000000000140000001100010000000000000000000000010a"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00c124894da00000a09e9fab729edef134082c2cd558389b7445d071a21f8fe184d7aa9af87ef9cb2840937d8e9e467314e1bcb737c636df43ab30130d4345950b4432a37c1cdf99d46e2df1fac98ef3955807fa394bfbd232a83a82999cfeb6c1763cb2960f52d5bd297a100d21f6feb60224401e21ef59870e4e3deadc32e8f180cdb5b662de3f38c79e66d8176e328b55056e6898c51e1ed87116d529162f96a2e214e718b97aad33577a048b037868a5b5573e15c5361af5085f66a750ed1bcb1a4290f5532d1fe1c886231c720e8d60861e"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 4m26.864041477s ago: executing program 7 (id=5484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x4000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x41}}], 0x38}}], 0x1, 0x4880) 4m26.625743029s ago: executing program 7 (id=5485): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/64, 0x40) 4m26.115961995s ago: executing program 7 (id=5493): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000000400)={0x9, 0x10001, 0x2, 0x4, 0xedbf, 0x4, 0x809, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x20f6b1, 0x3180, 0x20000003, 0x60024e}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000500)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x12, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 4m25.693627156s ago: executing program 7 (id=5496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"77c14a5cd359c721417b883ecdcaba15", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) 4m25.693351336s ago: executing program 35 (id=5496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"77c14a5cd359c721417b883ecdcaba15", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) 2.945816524s ago: executing program 1 (id=7995): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x70}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000060a01040000000000000000090000000900010073797a31000000000900020073797a320000000014000480100001800c0001006269747769736500140000001100010000000000000000000100000a6db67dabfcb7ea90d4a42688cd8a4de9956118799ae5997dea15d868a51dbc1a29106af958ff68c35458ca5040e1991aefe64671d4e9ec243210a6e4d4616fdef7773f0a14ea3562ae8b2dd5a25593dbdcec389c59a6b949757f1ef838fcb709ab5c6652d161d0b13bd49ea880428804cb1dc7cb1b"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) 2.694787707s ago: executing program 4 (id=7996): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r4 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x3d) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$inet(r7, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r12, @ANYBLOB="230525bd7000fedbdf25050000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f0000000680)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c51"], 0x34}}, 0x0) 2.155674083s ago: executing program 3 (id=7999): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) socket$can_j1939(0x1d, 0x2, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100001040000000000000000000000005df9b3b9f6af8404a78c51dd056277141cebb28a0752b7765cdcf71bcc89fafef4e976aeb4d22a04a8d56151b7fe48b855b885d4d2e73003a6889039", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) 2.142316844s ago: executing program 4 (id=8000): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x85f6, 0x0, 0x0, 0x3ffffffffffff, 0xffffffffffbffffe, 0x7f, 0xfffffe06}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.120031955s ago: executing program 1 (id=8001): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 2.00977728s ago: executing program 3 (id=8002): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.896856306s ago: executing program 6 (id=8003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.826627389s ago: executing program 6 (id=8004): unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.673991547s ago: executing program 8 (id=8005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.673556507s ago: executing program 6 (id=8006): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x1) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0, 0xfffffffffffffff0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x203, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 1.602333061s ago: executing program 8 (id=8007): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0xf169, 0x400, 0x0, 0x2cf}, &(0x7f0000000380)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x15, 0x2004, @fd=r0, 0x4, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r1, 0x47ba, 0x100, 0x5, 0x0, 0x0) 1.601670131s ago: executing program 4 (id=8008): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020a00030700000000bd7000fbdbdf2505001a00ac14141c00c4f2de5e7b295627d64923742c82805debfafaedd3886a0013c24c2bff0bbc"], 0x38}}, 0x20000000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x636a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000580)={0xa, 0x4c23, 0xd2dc, @mcast2, 0x1}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @mcast1, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000240)="b4a2a344592453eb641e888e677cf8fa43280db31913ab053891732fc4765c9ce34a279ffe2cf3e6d4ebdbf60d8c7ad2665959fe74154cc18dbf64fe2a3d1d6ea066e3d0afeab30c4293ea36d39ab031695603d7", 0x54}, {&(0x7f00000002c0)="c33bb67c76f90156cca823e3387f196592bdf2756c740ccb114816b288", 0x1d}, {0x0}, {&(0x7f00000003c0)="422fe0acba4c20f89aa7b02cab1ae973a46e65500286620d0b57337b8c0db63c63cd6bf0556d47cb0aa18cd8a32d46d22df4db55fef5b653a19e1a335ac2b56430be008ffbd6542fc26f0a0b736bad08132d6a7d88d0fa61f05ca8a5d9248693acb2868c9d0373d1de6af74d1ac8f1e66f7b75cccfa7c41a0b845a01c16dece02c4e9ef772265aa407b73154b71aa37a51ebc7ea66eb33688a4b573df885d9edd0cd19caf3", 0xa5}], 0x5, &(0x7f0000000640)=[@rthdr={{0x68, 0x29, 0x39, {0x87, 0xa, 0x1, 0x81, 0x0, [@private1, @mcast2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private1]}}}, @tclass={{0x14, 0x29, 0x43, 0xe92a}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x1, 0x2, 0x0, [@mcast1, @loopback]}}}, @rthdr={{0x78, 0x29, 0x39, {0x29, 0xc, 0x2, 0x81, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x14}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}, @hopopts={{0x38, 0x29, 0x36, {0x1, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @mcast1}, @pad1, @jumbo={0xc2, 0x4, 0x8}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x5c, 0x1, '\x00', [@jumbo, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x33, 0x21, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x91, 0xd, "12312b53e409105390be7e5161"}, @pad1, @generic={0x3, 0xe7, "6a4a1f92e24987a1b8bcd58d91e060cfe48901239f4e7caa6dde0f8704c54ad7d1566b0faf107b2c8782e46fb10e00bddc80ee4fb3711834af3530cfd4f871289bd078b41cea4b33768424dc58c6dab8c4e538c748038164b7307edb0529a1c115b6b0e42a9b2f8dd34d2345cad668823ca75558b0473fb3ce40125b3b7ab24582689fdd0b8ee5d40665d7dbd07ec21c5441752fbd34381e308db74918aff1b2fea0ad8c891f44c6350bbfe2585cea3b2c719f1b5fce145faff19454d04e65de772b881a5cf2b977d4709cc43350eb46c78bd4efedc74d4a2259b73c27542eda8642692cad9eb3"}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x84, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x2f8}}], 0x2, 0x240400c0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 1.513541705s ago: executing program 8 (id=8009): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x100, 0x10000, 0x9, 0xc, "3baab70fa54b701783146d54d14809da99d633"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.499465596s ago: executing program 8 (id=8010): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.484512766s ago: executing program 4 (id=8011): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r4 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x3d) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$inet(r7, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r12, @ANYBLOB="230525bd7000fedbdf25050000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f0000000680)=0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c51"], 0x34}}, 0x0) 1.376561292s ago: executing program 1 (id=8012): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x4004810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.376074032s ago: executing program 6 (id=8013): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.335903903s ago: executing program 8 (id=8014): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x3d}, &(0x7f0000000180)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x244cd1, &(0x7f0000000480)={[{@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x284, &(0x7f0000000700)="$eJzs3E9rE10Ux/Ffk/5NaZPFwwMK4kE3uhna+AqCtCAGKrURdSFM7URDxqRkYiUitju3vguhuHQnqG+gG3fuxU0RBDddiJEmmSatgbbaONF8PxDmZs6czL2TmXBmIHf75vMHxXwQU0tM2tCOlNLeKg21YxrSqDpt6OLk1w9nrt+6fTWTze7G5jNLl9JmNn32zaMnL8+9q07eeDX9ekxbqTvbX9Ift/7fOrX9fSn89HLVXFsul6vusu/ZSiEoOmbXfM8NPCuUAq+yL573y6urNXNLK1OJ1YoXBOaWalb0alYtW7VSM/eeWyiZ4zg2ldCgiR87I7e5uOhmetIZRGGi28pKJePGuwZzm3+iUwAAoL+06n8n71YVG7ffrP/nFs2OVv/fLwRWCKx0WP0fE/V/71D/D4Ld+j/Run73o/4HAAAAAAAAAAAAAAAAAAAAAOBvsFOvJ+v1ejJchq8xSeOSwvdR9xO9wfc/2Dr+uDcu+c/Wcmu55rIZz+RVkC9PMyPSt8b50NJsz1/Jzs1YQ0pv/fVW/vpaLq6xMD+U6p4/28y3/fkjSnTuP62k/uuen+6aP6oL5zvyHSX1/q7K8rXSOK/b+U9nzS4vZA/kTzS2AwAAAADgX+DYnp/u3xtxx8JpQw7EmyvbzweUPOT5wIH762GdHo5u3AAAAAAADJKg9rjo+r5XoXGcxkKPDt2LfhlgPzRikiLa+2dJ/XEQTrTx6WHzqj/KxlH/MgEAAAA4ae2iP+qeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuI46eVi4/a/MPdaxu3g0owQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6w48AAAD//0zfHpw=") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500240012800b00010067726574617000001400028008000700e000000208000100", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbf9, 0x4}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616efd117dfd733d66642c7266", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000300)={[{@nogrpid}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'syzkaller0\x00', @remote}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r7) lseek(r3, 0x7, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.314128145s ago: executing program 1 (id=8015): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x202, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xf8d, 0x10000, 0x5, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) socket(0x11, 0x3, 0xfff) 1.313562945s ago: executing program 6 (id=8016): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) syz_open_dev$evdev(0x0, 0x2, 0x860b01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.220774019s ago: executing program 8 (id=8017): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0xffa6, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x1, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0}, 0x28) 1.108012495s ago: executing program 3 (id=8018): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x3000000, 0x4000010, r0, 0x4918e000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1.029554989s ago: executing program 3 (id=8019): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7fffffff, 0x3fff8000}, 0x8312, 0x32, 0x9718, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x121) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.022345399s ago: executing program 4 (id=8020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.00355371s ago: executing program 3 (id=8021): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000180)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) 669.798227ms ago: executing program 1 (id=8022): syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = syz_pidfd_open(r1, 0x0) unshare(0x22020400) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r4 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x73b, 0x10000, 0x2, 0x800024, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x2def, 0x9566, 0x0, 0x0, 0x0) connect$unix(r3, 0x0, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) 109.289724ms ago: executing program 6 (id=8023): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x5642, 0x80, 0x809, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair(0x22, 0x2, 0x23, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 49.653157ms ago: executing program 4 (id=8024): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2e04ea5cd43ab2a8d5acbf5d34d9f6e69156c0a4b1c5a64021d22ba4726652e6510b2d979b2c2cc09f55613536e5f41b808c2b75c3522c23173d00347fc8df07ffdf3f26f0a7564ed728404e9922288252fccfcb220dda58740139ae62ae841284aad1da657150498ebf624c9763124928e5c7fe83f68ec5e0610409277b28ee420489e42d327f55f165e885152ebf7a4f12114335cb6f30b3609f41ac8cf611bba6c64d0a69b443c09fe09e5d6ff0a14261a621dd983dd436b7cd08070695d0c3e397c0c2496e5a2bf781d0c7bb29f0fb8128aa5f01376b30c5a018395e3cfbb1768605cd0276dd5c151f774016fa3f14c6549be61f33fc61da79f325d352", @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r2}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x70}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000060a01040000000000000000090000000900010073797a31000000000900020073797a320000000014000480100001800c0001006269747769736500140000001100010000000000000000000100000a6db67dabfcb7ea90d4a42688cd8a4de9956118799ae5997dea15d868a51dbc1a29106af958ff68c35458ca5040e1991aefe64671d4e9ec243210a6e4d4616fdef7773f0a14ea3562ae8b2dd5a25593dbdcec389c59a6b949757f1ef838fcb709ab5c6652d161d0b13bd49ea880428804cb1dc7cb1b"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) 49.378787ms ago: executing program 3 (id=8025): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x101, 0x4) 0s ago: executing program 1 (id=8026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): - 0 [ 985.364295][T25261] netlink: 'syz.4.6079': attribute type 1 has an invalid length. [ 985.418141][T25261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 985.435791][T25263] vlan2: entered allmulticast mode [ 985.441778][T25263] bond3: entered allmulticast mode [ 985.487341][T25261] bond3: (slave geneve2): making interface the new active one [ 985.495096][T25261] geneve2: entered allmulticast mode [ 985.501970][T25261] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 985.516728][ T5935] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.633490][ T5935] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.648701][ T5935] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.669916][ T5935] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.773391][T25271] 9p: Bad value for 'wfdno' [ 986.994620][T25277] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6084'. [ 987.092460][T25283] ªªªªªª: renamed from vlan0 (while UP) [ 987.125992][T25283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6086'. [ 987.162307][T25283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6086'. [ 987.222943][T25283] syz_tun: entered promiscuous mode [ 987.247179][T25283] erspan0: entered promiscuous mode [ 987.385512][T25294] syzkaller0: entered promiscuous mode [ 987.510392][T25294] syzkaller0: entered allmulticast mode [ 987.543365][T25294] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 987.669587][T25300] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 987.689371][T25302] tipc: Enabled bearer , priority 0 [ 987.713979][T25298] syzkaller0: entered promiscuous mode [ 987.732415][T25298] syzkaller0: entered allmulticast mode [ 987.850068][T25293] tipc: Resetting bearer [ 987.861108][T25293] tipc: Disabling bearer [ 988.236265][T25305] loop8: detected capacity change from 0 to 128 [ 989.120842][T25313] loop8: detected capacity change from 0 to 512 [ 989.440130][T25313] EXT4-fs: Ignoring removed mblk_io_submit option [ 989.751670][T25313] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 989.802535][T25313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 989.880078][T25313] EXT4-fs (loop8): orphan cleanup on readonly fs [ 989.920870][T25313] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6091: bg 0: block 361: padding at end of block bitmap is not set [ 990.048912][T25313] loop8: lost filesystem error report for type 5 error -117 [ 990.049832][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 990.063693][ C0] EXT4-fs (loop8): initial error at time 2000000837: ext4_validate_block_bitmap:441 [ 990.073102][ C0] EXT4-fs (loop8): last error at time 2000000837: ext4_validate_block_bitmap:441 [ 990.084319][T25313] EXT4-fs (loop8): Remounting filesystem read-only [ 990.124049][T25313] EXT4-fs (loop8): 1 truncate cleaned up [ 990.130436][T25313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 990.155491][T25321] 9p: Bad value for 'wfdno' [ 990.302416][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 990.403499][T25329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6098'. [ 990.403985][T25323] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6097'. [ 990.427792][T25329] hsr_slave_0: left promiscuous mode [ 990.450962][T25329] hsr_slave_1: left promiscuous mode [ 990.551115][T25332] netlink: 'syz.4.6100': attribute type 1 has an invalid length. [ 990.564735][T25332] bond4: entered promiscuous mode [ 990.584284][T25332] bond4: entered allmulticast mode [ 990.589563][T25332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 990.617690][T25332] erspan1: entered allmulticast mode [ 990.625049][T25332] bond4: (slave erspan1): making interface the new active one [ 990.632775][T25332] erspan1: entered promiscuous mode [ 990.638988][T25332] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 990.649161][T25337] tipc: Started in network mode [ 990.654292][T25337] tipc: Node identity 7a2ad4cfb30b, cluster identity 4711 [ 990.654646][T25332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6100'. [ 990.699404][T25337] tipc: Enabled bearer , priority 0 [ 990.884778][T25332] bond4 (unregistering): (slave erspan1): Releasing active interface [ 990.894016][T25332] erspan1: left promiscuous mode [ 990.922663][T25332] bond4 (unregistering): Released all slaves [ 990.943880][T25343] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6102'. [ 990.953212][T25339] syzkaller0: entered promiscuous mode [ 990.958676][T25339] syzkaller0: entered allmulticast mode [ 990.976435][T25341] tipc: Resetting bearer [ 990.982776][T25341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.990969][T25341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.018256][T25336] tipc: Resetting bearer [ 991.044544][T25336] tipc: Disabling bearer [ 991.077574][T25354] tipc: Enabling of bearer rejected, failed to enable media [ 991.131083][T25362] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6108'. [ 991.142509][T25364] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 991.164319][T25365] lo speed is unknown, defaulting to 1000 [ 991.227199][T25359] 9p: Bad value for 'wfdno' [ 991.364682][T25367] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6111'. [ 991.488686][T25376] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6114'. [ 991.654205][T25387] vlan2: entered promiscuous mode [ 991.662589][T25387] batadv0: entered promiscuous mode [ 992.171083][T25395] tipc: Enabling of bearer rejected, failed to enable media [ 992.654305][T25404] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6121'. [ 992.835899][T25407] 9p: Bad value for 'wfdno' [ 993.057944][T25413] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6124'. [ 993.445341][T25426] loop8: detected capacity change from 0 to 1764 [ 995.176091][T25452] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6133'. [ 995.719934][T25459] tipc: Enabling of bearer rejected, failed to enable media [ 997.060153][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6144'. [ 997.111073][T25499] bond3: entered promiscuous mode [ 997.117397][T25502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6146'. [ 997.507168][T25509] xt_CT: No such helper "snmp_trap" [ 997.908982][T25515] loop6: detected capacity change from 0 to 4096 [ 997.959319][T25515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.945191][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.131673][T25539] 9p: Bad value for 'wfdno' [ 999.203513][T25543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6158'. [ 999.252785][T25552] bridge0: entered allmulticast mode [ 999.262465][T25552] batadv0: left allmulticast mode [ 999.268061][T25552] batadv0: left promiscuous mode [ 999.276721][T25552] bridge0: port 1(batadv0) entered disabled state [ 999.448943][T25563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 999.579337][T25565] netlink: 'syz.8.6163': attribute type 4 has an invalid length. [ 999.654203][T25567] lo speed is unknown, defaulting to 1000 [ 999.977161][T25594] syzkaller0: entered promiscuous mode [ 1000.010402][T25594] syzkaller0: entered allmulticast mode [ 1000.194781][T25608] 9p: Bad value for 'wfdno' [ 1000.313266][T25618] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6170'. [ 1002.000160][T25675] lo speed is unknown, defaulting to 1000 [ 1002.127929][T25700] 9p: Bad value for 'wfdno' [ 1002.139239][T25699] syzkaller0: entered promiscuous mode [ 1002.159886][T25699] syzkaller0: entered allmulticast mode [ 1002.641130][ T28] audit: type=1400 audit(2000000849.611:1891): avc: denied { write } for pid=25705 comm="syz.1.6181" path="socket:[75699]" dev="sockfs" ino=75699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1002.766711][T25710] batadv_slave_1: entered promiscuous mode [ 1002.800826][T25710] Invalid option length (63700) for dns_resolver key [ 1002.815669][T25710] batadv_slave_1: left promiscuous mode [ 1002.829059][T25712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6183'. [ 1002.949285][T25719] loop6: detected capacity change from 0 to 128 [ 1003.309541][T25725] loop6: detected capacity change from 0 to 512 [ 1003.340938][T25725] EXT4-fs: Ignoring removed mblk_io_submit option [ 1003.361144][T25725] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1003.372623][T25725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1003.382561][T25725] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1003.389666][T25725] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6186: bg 0: block 361: padding at end of block bitmap is not set [ 1003.404587][T25725] loop6: lost filesystem error report for type 5 error -117 [ 1003.404820][T25725] EXT4-fs (loop6): Remounting filesystem read-only [ 1003.412197][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1003.412213][ C1] EXT4-fs (loop6): initial error at time 2000000850: ext4_validate_block_bitmap:441 [ 1003.412249][ C1] EXT4-fs (loop6): last error at time 2000000850: ext4_validate_block_bitmap:441 [ 1003.474976][T25725] EXT4-fs (loop6): 1 truncate cleaned up [ 1003.491942][T25725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1003.495593][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6188'. [ 1003.582375][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1003.608400][T25746] 9p: Bad value for 'wfdno' [ 1004.609204][T25766] 9p: Bad value for 'wfdno' [ 1004.883341][T25781] 9p: Bad value for 'wfdno' [ 1005.054907][T25789] 9p: Bad value for 'wfdno' [ 1005.193217][T25795] lo speed is unknown, defaulting to 1000 [ 1005.235741][T25797] team_slave_1: Caught tx_queue_len zero misconfig [ 1005.960444][T25812] tipc: Enabling of bearer rejected, failed to enable media [ 1005.982420][T25805] loop8: detected capacity change from 0 to 512 [ 1006.020772][T25805] EXT4-fs (loop8): 1 truncate cleaned up [ 1006.032310][T25805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.274635][T25828] 9p: Bad value for 'wfdno' [ 1006.505467][T25869] loop6: detected capacity change from 0 to 128 [ 1007.159812][T25823] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 348: padding at end of block bitmap is not set [ 1007.934253][T25945] tipc: Enabling of bearer rejected, failed to enable media [ 1009.194266][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.249337][T25960] 9p: Bad value for 'wfdno' [ 1010.821835][T26061] 9p: Bad value for 'wfdno' [ 1011.007921][T26076] batman_adv: batadv0: Adding interface: dummy0 [ 1011.042670][T25978] loop8: detected capacity change from 0 to 512 [ 1011.070062][T26076] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1011.105523][T25978] EXT4-fs: Ignoring removed nobh option [ 1011.127951][T25978] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1011.148387][T26076] batman_adv: batadv0: Interface activated: dummy0 [ 1011.155279][T25978] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.6232: EA inode hash validation failed [ 1011.211075][T25978] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1011.318802][T25978] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.6232: corrupted inode contents [ 1011.358732][T26136] tipc: Enabling of bearer rejected, failed to enable media [ 1011.415805][T25978] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1011.416898][T25978] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.6232: mark_inode_dirty error [ 1011.426638][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1011.426768][ C0] EXT4-fs (loop8): initial error at time 2000000858: ext4_do_update_inode:5569: inode 15 [ 1011.427036][ C0] EXT4-fs (loop8): last error at time 2000000858: ext4_do_update_inode:5569: inode 15 [ 1011.469996][T25978] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1011.473939][T25978] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.6232: corrupted inode contents [ 1011.500459][T25978] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1011.509006][T25978] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.6232: mark_inode_dirty error [ 1011.537584][T25978] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1011.539356][T25978] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3002: inode #15: comm syz.8.6232: mark inode dirty (error -117) [ 1011.567418][T25978] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1011.579404][T25978] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 1011.631303][T25978] EXT4-fs (loop8): 1 orphan inode deleted [ 1011.683618][T25978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1011.725437][T26147] lo speed is unknown, defaulting to 1000 [ 1011.890918][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.280304][T26161] loop6: detected capacity change from 0 to 128 [ 1012.688875][T26166] loop6: detected capacity change from 0 to 512 [ 1012.766743][T26166] EXT4-fs: Ignoring removed mblk_io_submit option [ 1013.060545][T26147] 9p: Bad value for 'rfdno' [ 1013.072046][T26166] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1013.126700][T26166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1013.162514][T26166] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1013.198676][T26185] tipc: Enabling of bearer rejected, failed to enable media [ 1013.216036][T26173] loop8: detected capacity change from 0 to 128 [ 1013.237300][T26166] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6243: bg 0: block 361: padding at end of block bitmap is not set [ 1013.299895][T26166] loop6: lost filesystem error report for type 5 error -117 [ 1013.304204][T26166] EXT4-fs (loop6): Remounting filesystem read-only [ 1013.311605][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1013.311628][ C0] EXT4-fs (loop6): initial error at time 2000000860: ext4_validate_block_bitmap:441 [ 1013.311660][ C0] EXT4-fs (loop6): last error at time 2000000860: ext4_validate_block_bitmap:441 [ 1013.350156][T26166] EXT4-fs (loop6): 1 truncate cleaned up [ 1013.418916][T26166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1013.601700][T26202] lo speed is unknown, defaulting to 1000 [ 1013.650477][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1013.717383][T26173] loop8: detected capacity change from 0 to 512 [ 1013.734496][T26173] EXT4-fs: Ignoring removed mblk_io_submit option [ 1013.761575][T26173] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1013.785703][T26173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1013.831075][T26173] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1013.841537][T26173] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6246: bg 0: block 361: padding at end of block bitmap is not set [ 1013.856186][T26173] loop8: lost filesystem error report for type 5 error -117 [ 1013.856536][T26173] EXT4-fs (loop8): Remounting filesystem read-only [ 1013.864087][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1013.864154][ C0] EXT4-fs (loop8): initial error at time 2000000860: ext4_validate_block_bitmap:441 [ 1013.864295][ C0] EXT4-fs (loop8): last error at time 2000000860: ext4_validate_block_bitmap:441 [ 1013.899213][T26173] EXT4-fs (loop8): 1 truncate cleaned up [ 1013.909546][T26173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1014.004266][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1014.151910][T26225] loop8: detected capacity change from 0 to 512 [ 1014.213965][T26228] vlan0: entered promiscuous mode [ 1014.219440][T26228] vlan0: entered allmulticast mode [ 1014.230859][T26228] hsr_slave_1: entered allmulticast mode [ 1014.276794][T26231] tipc: Enabling of bearer rejected, failed to enable media [ 1014.277727][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6259'. [ 1014.322914][T26225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.421160][T26225] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.562629][T26239] netlink: 'syz.3.6261': attribute type 9 has an invalid length. [ 1014.570706][T26239] netlink: 'syz.3.6261': attribute type 7 has an invalid length. [ 1014.578659][T26239] netlink: 'syz.3.6261': attribute type 8 has an invalid length. [ 1014.737064][T26242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1014.768023][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1014.820173][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1015.954344][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.612613][T26255] loop8: detected capacity change from 0 to 128 [ 1016.809000][T26251] 9p: Bad value for 'wfdno' [ 1017.132760][T26255] loop8: detected capacity change from 0 to 512 [ 1017.161621][T26255] EXT4-fs: Ignoring removed mblk_io_submit option [ 1017.183201][T26255] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1017.261319][T26255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1018.261015][T26255] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1018.290430][T26255] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6264: bg 0: block 361: padding at end of block bitmap is not set [ 1018.745326][T26255] loop8: lost filesystem error report for type 5 error -117 [ 1018.747197][T26255] EXT4-fs (loop8): Remounting filesystem read-only [ 1018.754857][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1018.754934][ C1] EXT4-fs (loop8): initial error at time 2000000865: ext4_validate_block_bitmap:441 [ 1018.755067][ C1] EXT4-fs (loop8): last error at time 2000000865: ext4_validate_block_bitmap:441 [ 1018.895860][T26255] EXT4-fs (loop8): 1 truncate cleaned up [ 1018.905743][T26274] tipc: Enabling of bearer rejected, failed to enable media [ 1018.935935][T26255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1018.993890][T26281] vlan3: entered promiscuous mode [ 1018.999049][T26281] veth0: entered promiscuous mode [ 1019.114283][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1019.703577][T26292] loop6: detected capacity change from 0 to 128 [ 1019.876557][T26292] loop6: detected capacity change from 0 to 512 [ 1019.885579][T26292] EXT4-fs: Ignoring removed mblk_io_submit option [ 1019.896120][T26292] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1019.916626][T26292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1019.941092][T26292] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1019.953834][T26292] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6278: bg 0: block 361: padding at end of block bitmap is not set [ 1019.969852][T26292] loop6: lost filesystem error report for type 5 error -117 [ 1019.974056][T26292] EXT4-fs (loop6): Remounting filesystem read-only [ 1019.981788][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1019.981839][ C0] EXT4-fs (loop6): initial error at time 2000000866: ext4_validate_block_bitmap:441 [ 1019.982087][ C0] EXT4-fs (loop6): last error at time 2000000866: ext4_validate_block_bitmap:441 [ 1020.018168][T26307] vlan2: left allmulticast mode [ 1020.025470][T26292] EXT4-fs (loop6): 1 truncate cleaned up [ 1020.032651][T26307] bond3: left allmulticast mode [ 1020.037641][T26307] geneve2: left allmulticast mode [ 1020.094049][T26292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1020.117924][T26311] xt_hashlimit: size too large, truncated to 1048576 [ 1020.126518][T26307] erspan1: left allmulticast mode [ 1020.141860][T26021] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.151045][T26021] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.160302][T26021] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.182510][T26021] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.582613][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1020.688181][T26321] loop6: detected capacity change from 0 to 128 [ 1020.777284][T26325] loop8: detected capacity change from 0 to 8192 [ 1020.857648][T26321] loop6: detected capacity change from 0 to 512 [ 1020.871724][T26321] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.927969][T26321] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1021.015037][T26321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1021.080069][T26321] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1021.111618][T26321] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6284: bg 0: block 361: padding at end of block bitmap is not set [ 1021.390374][T26321] loop6: lost filesystem error report for type 5 error -117 [ 1021.397240][T26321] EXT4-fs (loop6): Remounting filesystem read-only [ 1021.405680][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1021.405772][ C0] EXT4-fs (loop6): initial error at time 2000000868: ext4_validate_block_bitmap:441 [ 1021.405852][ C0] EXT4-fs (loop6): last error at time 2000000868: ext4_validate_block_bitmap:441 [ 1021.448285][T26333] 9p: Bad value for 'wfdno' [ 1021.943157][T26321] EXT4-fs (loop6): 1 truncate cleaned up [ 1021.975962][T26335] 9p: Bad value for 'wfdno' [ 1021.988524][T26321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1022.115039][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1022.616183][T26346] futex_wake_op: syz.8.6291 tries to shift op by 32; fix this program [ 1024.333190][T26362] loop8: detected capacity change from 0 to 128 [ 1024.359740][T26354] loop6: detected capacity change from 0 to 8192 [ 1024.369189][T26362] syz.8.6296: attempt to access beyond end of device [ 1024.369189][T26362] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1024.392749][T26352] 9p: Bad value for 'wfdno' [ 1024.411980][T26360] syz.8.6296: attempt to access beyond end of device [ 1024.411980][T26360] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1024.445731][ T28] audit: type=1400 audit(2000000871.411:1892): avc: denied { mounton } for pid=26353 comm="syz.6.6290" path="/217/file2/file0" dev="loop6" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1024.480413][T26354] syz_tun: entered allmulticast mode [ 1024.525072][ T28] audit: type=1400 audit(2000000871.411:1893): avc: denied { mount } for pid=26353 comm="syz.6.6290" name="/" dev="hugetlbfs" ino=77740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1024.549178][ T28] audit: type=1400 audit(2000000871.451:1894): avc: denied { remount } for pid=26353 comm="syz.6.6290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1024.570356][T26360] syz.8.6296: attempt to access beyond end of device [ 1024.570356][T26360] loop8: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 1024.589719][T26360] syz.8.6296: attempt to access beyond end of device [ 1024.589719][T26360] loop8: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 1024.604166][T26360] buffer_io_error: 19 callbacks suppressed [ 1024.604180][T26360] Buffer I/O error on dev loop8, logical block 69, lost async page write [ 1024.618850][T26360] syz.8.6296: attempt to access beyond end of device [ 1024.618850][T26360] loop8: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 1024.632717][T26360] Buffer I/O error on dev loop8, logical block 70, lost async page write [ 1024.757938][T26360] syz.8.6296: attempt to access beyond end of device [ 1024.757938][T26360] loop8: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 1025.447390][T26360] Buffer I/O error on dev loop8, logical block 71, lost async page write [ 1025.454140][T26354] dvmrp8: entered allmulticast mode [ 1025.476733][T26354] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1025.485326][T26354] mroute: pending queue full, dropping entries [ 1025.493088][T26353] syz_tun: left allmulticast mode [ 1025.510392][T20954] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1025.517281][ T28] audit: type=1400 audit(2000000872.471:1895): avc: denied { unmount } for pid=20954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1025.550484][T26377] 9p: Bad value for 'wfdno' [ 1025.580018][T20954] FAT-fs (loop6): Filesystem has been set read-only [ 1025.700958][T26383] loop6: detected capacity change from 0 to 1024 [ 1025.707946][T26383] EXT4-fs: Ignoring removed orlov option [ 1025.764398][T26383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.009121][T26388] xt_hashlimit: max too large, truncated to 1048576 [ 1026.736400][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.024727][T26391] lo speed is unknown, defaulting to 1000 [ 1027.565310][T26399] loop6: detected capacity change from 0 to 1024 [ 1027.622981][T26399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1027.656892][T26396] netlink: 'syz.4.6305': attribute type 10 has an invalid length. [ 1027.698654][T26399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.783117][T26404] loop8: detected capacity change from 0 to 512 [ 1027.980798][T26404] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1028.149590][T26404] EXT4-fs (loop8): 1 orphan inode deleted [ 1028.159078][T26420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1028.198296][T26404] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.560766][T26429] netlink: 'syz.4.6310': attribute type 25 has an invalid length. [ 1028.654680][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.680433][T26432] 9p: Bad value for 'wfdno' [ 1028.933406][T26440] loop8: detected capacity change from 0 to 1024 [ 1028.952618][T26438] 9p: Bad value for 'wfdno' [ 1028.958638][T26440] EXT4-fs: test_dummy_encryption option not supported [ 1029.389448][T26443] loop8: detected capacity change from 0 to 512 [ 1029.452077][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.544359][T26443] EXT4-fs (loop8): 1 orphan inode deleted [ 1029.554589][T26443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.577028][T26443] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.598887][T26045] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1029.628539][T26443] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1029.725684][T26045] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:36: Failed to release dquot type 1 [ 1029.943944][ T28] audit: type=1400 audit(2000000876.911:1896): avc: denied { connect } for pid=26451 comm="syz.3.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1030.066972][T26454] loop6: detected capacity change from 0 to 128 [ 1030.342159][T26454] loop6: detected capacity change from 0 to 512 [ 1030.361594][T26454] EXT4-fs: Ignoring removed mblk_io_submit option [ 1030.705933][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.735159][T26454] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1030.827877][T26454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1030.895804][T26454] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1030.989902][T26454] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6315: bg 0: block 361: padding at end of block bitmap is not set [ 1031.033574][T26454] loop6: lost filesystem error report for type 5 error -117 [ 1031.039848][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1031.053640][ C1] EXT4-fs (loop6): initial error at time 2000000878: ext4_validate_block_bitmap:441 [ 1031.063072][ C1] EXT4-fs (loop6): last error at time 2000000878: ext4_validate_block_bitmap:441 [ 1031.132905][T26454] EXT4-fs (loop6): Remounting filesystem read-only [ 1031.294884][T26454] EXT4-fs (loop6): 1 truncate cleaned up [ 1031.317090][T26454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1031.414956][T26475] 9p: Bad value for 'wfdno' [ 1031.441572][T26483] loop8: detected capacity change from 0 to 512 [ 1031.513348][T26483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1031.583900][T26483] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1032.603704][T26483] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e119, mo2=0002] [ 1032.791211][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1032.844915][T26483] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1032.870588][T26483] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 1032.949916][T26483] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1033.072800][T26496] loop6: detected capacity change from 0 to 512 [ 1033.079096][T26483] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 1033.102629][T26496] EXT4-fs: Ignoring removed bh option [ 1033.149815][T26496] EXT4-fs: inline encryption not supported [ 1033.321545][T26496] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1033.341957][T26483] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6325: bg 0: block 40: padding at end of block bitmap is not set [ 1033.388290][T26496] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1033.402913][T26483] loop8: lost filesystem error report for type 5 error -117 [ 1033.403052][T26483] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1033.410386][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1033.410406][ C1] EXT4-fs (loop8): initial error at time 2000000880: ext4_validate_block_bitmap:441 [ 1033.410428][ C1] EXT4-fs (loop8): last error at time 2000000880: ext4_validate_block_bitmap:441 [ 1033.423725][ T28] audit: type=1400 audit(2000000880.391:1897): avc: denied { watch } for pid=26498 comm="syz.3.6329" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1033.429490][T26496] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6327: bg 0: block 248: padding at end of block bitmap is not set [ 1033.572864][T26483] loop8: lost filesystem error report for type 5 error -117 [ 1033.586242][T26496] loop6: lost filesystem error report for type 5 error -117 [ 1034.309808][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1034.323662][ C0] EXT4-fs (loop6): last error at time 2000000881: ext4_validate_block_bitmap:441 [ 1034.376925][T26496] Quota error (device loop6): write_blk: dquota write failed [ 1034.434564][T26483] EXT4-fs (loop8): 1 truncate cleaned up [ 1034.440410][T26496] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1034.453347][T26483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1034.480528][T26496] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6327: Failed to acquire dquot type 1 [ 1034.502043][T26496] loop6: lost filesystem error report for type 5 error -117 [ 1034.503373][T26496] EXT4-fs (loop6): 1 truncate cleaned up [ 1034.564385][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.580581][T26496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1034.594381][T26496] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1035.384555][T26536] loop8: detected capacity change from 0 to 128 [ 1035.410873][ T28] audit: type=1326 audit(2000000001.040:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.4.6338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d40ecc799 code=0x0 [ 1035.542020][T26536] loop8: detected capacity change from 0 to 512 [ 1035.553722][T26536] EXT4-fs: Ignoring removed mblk_io_submit option [ 1035.572608][T26536] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1035.592756][T26536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1035.606505][T26536] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1035.624963][T26536] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6336: bg 0: block 361: padding at end of block bitmap is not set [ 1035.650458][T26536] loop8: lost filesystem error report for type 5 error -117 [ 1035.651392][T26536] EXT4-fs (loop8): Remounting filesystem read-only [ 1035.665922][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1035.666027][ C0] EXT4-fs (loop8): initial error at time 2000000001: ext4_validate_block_bitmap:441 [ 1035.666212][ C0] EXT4-fs (loop8): last error at time 2000000001: ext4_validate_block_bitmap:441 [ 1035.701858][T26536] EXT4-fs (loop8): 1 truncate cleaned up [ 1035.715282][T26536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1035.852893][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1035.994864][T26559] loop8: detected capacity change from 0 to 512 [ 1036.002687][T26559] ext3: Unknown parameter 'euid<00000000000000000000' [ 1036.184257][ T28] audit: type=1400 audit(2000000001.720:1899): avc: denied { node_bind } for pid=26551 comm="syz.6.6343" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1037.684103][T26562] loop8: detected capacity change from 0 to 512 [ 1037.717036][T26562] EXT4-fs: Ignoring removed nobh option [ 1037.804229][T26562] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1037.881896][T26562] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.6344: EA inode hash validation failed [ 1037.910861][T26562] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1037.942214][T26562] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.6344: corrupted inode contents [ 1037.977123][T26562] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1037.978104][T26562] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.6344: mark_inode_dirty error [ 1037.987662][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1037.987793][ C0] EXT4-fs (loop8): initial error at time 2000000259: ext4_do_update_inode:5569: inode 15 [ 1037.988072][ C0] EXT4-fs (loop8): last error at time 2000000259: ext4_do_update_inode:5569: inode 15 [ 1038.156538][T26562] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1038.159361][T26562] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.6344: corrupted inode contents [ 1038.187735][T26562] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1038.189992][T26562] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.6344: mark_inode_dirty error [ 1038.219546][T26562] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1038.221245][T26562] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3002: inode #15: comm syz.8.6344: mark inode dirty (error -117) [ 1038.250456][T26562] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1038.259968][T26562] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 1038.281059][T26562] EXT4-fs (loop8): 1 orphan inode deleted [ 1038.369104][T26562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1038.602982][T26591] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1038.955245][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.196374][T26597] loop6: detected capacity change from 0 to 128 [ 1039.272875][T26597] loop6: detected capacity change from 0 to 512 [ 1039.312074][T26597] EXT4-fs: Ignoring removed mblk_io_submit option [ 1039.350049][T26597] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1039.405902][T26597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1039.625130][T26597] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1039.655311][T26597] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6353: bg 0: block 361: padding at end of block bitmap is not set [ 1039.716812][T26597] loop6: lost filesystem error report for type 5 error -117 [ 1039.717035][T26597] EXT4-fs (loop6): Remounting filesystem read-only [ 1039.724368][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1039.724390][ C1] EXT4-fs (loop6): initial error at time 2000000261: ext4_validate_block_bitmap:441 [ 1039.724431][ C1] EXT4-fs (loop6): last error at time 2000000261: ext4_validate_block_bitmap:441 [ 1039.880009][T26609] netlink: 'syz.4.6354': attribute type 1 has an invalid length. [ 1039.888582][T26597] EXT4-fs (loop6): 1 truncate cleaned up [ 1039.900233][T26597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1039.953575][T26609] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1039.954171][T26609] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1040.001150][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6354'. [ 1040.049799][T26611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1040.082015][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1040.105008][T26609] bond4: (slave gretap1): making interface the new active one [ 1040.113952][T26609] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1040.135631][T26609] macvlan3: entered promiscuous mode [ 1040.146056][T26614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.156053][T26609] macvlan3: entered allmulticast mode [ 1040.169419][T26614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.182892][T26609] bond4: entered promiscuous mode [ 1040.196426][T26609] gretap1: entered promiscuous mode [ 1040.208148][T26609] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1040.237019][T26609] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1040.270427][T26609] bond4: left promiscuous mode [ 1040.302190][T26609] gretap1: left promiscuous mode [ 1040.351892][T26617] loop6: detected capacity change from 0 to 512 [ 1040.367987][T26616] loop8: detected capacity change from 0 to 512 [ 1040.374798][T26617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.388437][T26617] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.461497][T26616] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1040.491304][T26616] EXT4-fs (loop8): 1 orphan inode deleted [ 1040.508144][T26616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.620728][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.205863][ T28] audit: type=1400 audit(2000000263.732:1900): avc: denied { kexec_image_load } for pid=26626 comm="syz.3.6357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1043.939940][T26636] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6359'. [ 1043.949107][T26636] bridge_slave_1: default FDB implementation only supports local addresses [ 1045.532115][ T28] audit: type=1400 audit(2000000267.162:1901): avc: denied { accept } for pid=26639 comm="syz.1.6360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1045.750874][T26647] hub 9-0:1.0: USB hub found [ 1045.756006][T26647] hub 9-0:1.0: 8 ports detected [ 1046.086774][T26649] 9p: Bad value for 'wfdno' [ 1046.117147][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.821716][T26661] loop6: detected capacity change from 0 to 128 [ 1046.829433][T26661] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1047.290534][T26661] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1049.758618][T26665] loop8: detected capacity change from 0 to 128 [ 1051.915938][T26677] loop6: detected capacity change from 0 to 512 [ 1052.089283][ T28] audit: type=1400 audit(2000000273.702:1902): avc: denied { getopt } for pid=26679 comm="syz.3.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1052.325656][T26677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.391558][T26677] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.462506][T26677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.611400][ T28] audit: type=1400 audit(2000000274.222:1903): avc: denied { write } for pid=26674 comm="syz.6.6370" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1052.703429][T26701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6375'. [ 1053.093571][T26707] loop8: detected capacity change from 0 to 1764 [ 1053.649970][T26709] loop6: detected capacity change from 0 to 1024 [ 1053.676007][T26709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1054.187125][T26709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.955789][T26727] loop8: detected capacity change from 0 to 1024 [ 1055.995147][T26727] EXT4-fs: test_dummy_encryption option not supported [ 1056.424364][T26732] loop8: detected capacity change from 0 to 512 [ 1056.483960][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.555765][T26732] EXT4-fs (loop8): 1 orphan inode deleted [ 1056.567256][T26732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.587610][T26732] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.611708][T26732] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1056.621423][T26052] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1056.721202][T26052] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:40: Failed to release dquot type 1 [ 1057.842634][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.233590][T26746] loop8: detected capacity change from 0 to 128 [ 1058.262039][T26746] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6386'. [ 1058.868435][T26750] loop8: detected capacity change from 0 to 128 [ 1060.148551][T26761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1060.469614][T26759] loop6: detected capacity change from 0 to 4096 [ 1060.481684][T26759] EXT4-fs: Ignoring removed bh option [ 1060.556762][T26759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.618527][T26768] loop8: detected capacity change from 0 to 256 [ 1060.693702][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.523565][T26773] loop6: detected capacity change from 0 to 8192 [ 1061.530439][T26773] msdos: Unknown parameter 'noLots' [ 1063.064056][T26789] loop6: detected capacity change from 0 to 512 [ 1064.036825][T26789] EXT4-fs (loop6): 1 orphan inode deleted [ 1064.043345][T26789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.081533][T26789] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.225381][T26795] loop8: detected capacity change from 0 to 256 [ 1064.280455][T26795] vfat: Unknown parameter '@' [ 1064.319863][ T28] audit: type=1326 audit(2000000285.942:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.459129][ T28] audit: type=1326 audit(2000000285.982:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.539803][ T28] audit: type=1326 audit(2000000285.982:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.540730][T26021] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1064.563468][ T28] audit: type=1326 audit(2000000285.982:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.563510][ T28] audit: type=1326 audit(2000000285.982:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.563530][ T28] audit: type=1326 audit(2000000286.002:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.654269][T26021] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:22: Failed to release dquot type 1 [ 1064.700630][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.779057][ T28] audit: type=1326 audit(2000000286.002:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.785671][T26802] tipc: Enabled bearer , priority 0 [ 1064.839785][ T28] audit: type=1326 audit(2000000286.012:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1064.871583][T26802] syzkaller0: entered promiscuous mode [ 1064.909820][T26802] syzkaller0: entered allmulticast mode [ 1064.948061][T26805] tipc: Resetting bearer [ 1064.955022][T26801] tipc: Resetting bearer [ 1064.961110][ T28] audit: type=1326 audit(2000000286.012:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.8.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1065.077832][T26801] tipc: Disabling bearer [ 1066.330520][T26823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6405'. [ 1066.339528][T26823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6405'. [ 1066.809517][T26809] syz.6.6401 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1066.879864][T26809] CPU: 0 UID: 0 PID: 26809 Comm: syz.6.6401 Tainted: G W syzkaller #0 PREEMPT(full) [ 1066.879920][T26809] Tainted: [W]=WARN [ 1066.879925][T26809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1066.879937][T26809] Call Trace: [ 1066.879944][T26809] [ 1066.879952][T26809] __dump_stack+0x1d/0x30 [ 1066.879977][T26809] dump_stack_lvl+0x95/0xd0 [ 1066.880047][T26809] dump_stack+0x15/0x1b [ 1066.880065][T26809] dump_header+0x80/0x240 [ 1066.880158][T26809] oom_kill_process+0x295/0x350 [ 1066.880180][T26809] out_of_memory+0x97d/0xb80 [ 1066.880202][T26809] try_charge_memcg+0x62e/0xa10 [ 1066.880365][T26809] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1066.880534][T26809] __swap_cache_prepare_and_add+0x386/0x530 [ 1066.880560][T26809] swap_cache_alloc_folio+0xa2/0x120 [ 1066.880583][T26809] swap_cluster_readahead+0x26e/0x3d0 [ 1066.880650][T26809] swapin_readahead+0xde/0x840 [ 1066.880673][T26809] ? _raw_spin_unlock+0x9/0x30 [ 1066.880771][T26809] ? swap_put_entries_cluster+0x385/0x3a0 [ 1066.880793][T26809] ? __rcu_read_unlock+0x4e/0x70 [ 1066.880809][T26809] ? swap_cache_get_folio+0x26f/0x280 [ 1066.880879][T26809] do_swap_page+0x30d/0x2220 [ 1066.880902][T26809] ? css_rstat_updated+0xbb/0x280 [ 1066.880917][T26809] ? __rcu_read_lock+0x36/0x50 [ 1066.880931][T26809] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1066.880993][T26809] handle_mm_fault+0xb46/0x3020 [ 1066.881082][T26809] ? vma_start_read+0x1c7/0x2c0 [ 1066.881122][T26809] do_user_addr_fault+0x62f/0x1050 [ 1066.881148][T26809] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 1066.881171][T26809] ? trace_page_fault_user+0x1f/0xe0 [ 1066.881196][T26809] exc_page_fault+0x62/0xa0 [ 1066.881261][T26809] asm_exc_page_fault+0x26/0x30 [ 1066.881278][T26809] RIP: 0033:0x7fe387deee5a [ 1066.881292][T26809] Code: fa 04 7d 2c 83 fa 01 7f 37 7c 03 40 88 37 c3 90 c5 fa 7f 07 c5 fa 7f 44 17 f0 c3 0f 1f 44 00 00 c5 f9 d6 07 c5 f9 d6 44 17 f8 0f 1f 44 00 00 c5 f9 7e 07 c5 f9 7e 44 17 fc c3 0f 1f 44 00 00 [ 1066.881309][T26809] RSP: 002b:00007ffda4102ce8 EFLAGS: 00010202 [ 1066.881326][T26809] RAX: 0000001b32523e26 RBX: 00007fe388bc5720 RCX: ffffffff818b27cd [ 1066.881417][T26809] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000001b32523e26 [ 1066.881428][T26809] RBP: 000000000000000a R08: 0000000000000008 R09: 0000000000000006 [ 1066.881440][T26809] R10: 0000000000000006 R11: 0000000000000004 R12: 00000000000001d0 [ 1066.881451][T26809] R13: 00000000000001c0 R14: 000000000000000a R15: 0000000000000000 [ 1066.881463][T26809] ? __vmalloc_node_range_noprof+0x7ad/0x12b0 [ 1066.881510][T26809] [ 1067.001605][T26809] memory: usage 307200kB, limit 307200kB, failcnt 474 [ 1067.182267][T26809] memory+swap: usage 307476kB, limit 9007199254740988kB, failcnt 0 [ 1067.308342][T26809] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 1067.336812][T26809] Memory cgroup stats for /syz6: [ 1067.338823][T26809] cache 0 [ 1067.364189][T26809] rss 4096 [ 1067.371998][T26809] shmem 0 [ 1067.379298][T26809] mapped_file 0 [ 1067.383579][T26809] dirty 0 [ 1067.390668][T26809] writeback 0 [ 1067.397938][T26809] workingset_refault_anon 1611 [ 1067.414247][T26809] workingset_refault_file 0 [ 1067.462285][T26809] swap 282624 [ 1067.465646][T26809] swapcached 462848 [ 1067.469455][T26809] pgpgin 282003 [ 1067.489794][T26809] pgpgout 281982 [ 1067.493364][T26809] pgfault 168606 [ 1067.496901][T26809] pgmajfault 63 [ 1067.509966][T26809] inactive_anon 8192 [ 1067.513970][T26809] active_anon 0 [ 1067.517530][T26809] inactive_file 77824 [ 1067.548441][T26809] active_file 0 [ 1067.552074][T26809] unevictable 0 [ 1067.555560][T26809] hierarchical_memory_limit 314572800 [ 1067.569803][T26809] hierarchical_memsw_limit 9223372036854771712 [ 1067.579840][T26809] total_cache 0 [ 1067.583351][T26809] total_rss 4096 [ 1067.597183][T26809] total_shmem 0 [ 1067.602642][T26809] total_mapped_file 0 [ 1067.631402][T26809] total_dirty 0 [ 1067.634883][T26809] total_writeback 0 [ 1067.646519][T26809] total_workingset_refault_anon 1611 [ 1067.659865][T26809] total_workingset_refault_file 0 [ 1067.664966][T26809] total_swap 282624 [ 1067.668766][T26809] total_swapcached 462848 [ 1067.679766][T26809] total_pgpgin 282003 [ 1067.684557][T26809] total_pgpgout 281982 [ 1067.688732][T26809] total_pgfault 168606 [ 1067.694220][T26809] total_pgmajfault 63 [ 1067.698192][T26809] total_inactive_anon 8192 [ 1067.709800][T26809] total_active_anon 0 [ 1067.713801][T26809] total_inactive_file 77824 [ 1067.719776][T26809] total_active_file 0 [ 1067.748643][T26809] total_unevictable 0 [ 1067.759751][T26809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.6401,pid=26809,uid=0 [ 1067.809308][T26809] Memory cgroup out of memory: Killed process 26809 (syz.6.6401) total-vm:94296kB, anon-rss:1228kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1068.810669][T26853] tipc: Enabling of bearer rejected, failed to enable media [ 1069.486980][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1069.486993][ T28] audit: type=1326 audit(2000000547.115:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.601441][ T28] audit: type=1326 audit(2000000547.155:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.661773][ T28] audit: type=1326 audit(2000000547.155:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.710551][ T28] audit: type=1326 audit(2000000547.155:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.750100][ T28] audit: type=1326 audit(2000000547.155:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.774455][ T28] audit: type=1326 audit(2000000547.155:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.818147][T26870] loop6: detected capacity change from 0 to 128 [ 1069.846693][ T28] audit: type=1326 audit(2000000547.155:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.847037][T26870] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1069.887597][ T28] audit: type=1326 audit(2000000547.155:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.915957][ T28] audit: type=1326 audit(2000000547.155:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1069.950139][ T28] audit: type=1326 audit(2000000547.155:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.3.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1070.550867][T26883] IPVS: Unknown mcast interface: hsr0 [ 1070.623701][T26879] loop6: detected capacity change from 0 to 1024 [ 1070.645641][T26879] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1070.655644][T26879] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1070.666453][T26879] EXT4-fs (loop6): invalid journal inode [ 1070.672420][T26879] EXT4-fs (loop6): can't get journal size [ 1070.678963][T26879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1070.909274][T26898] 9p: Bad value for 'wfdno' [ 1072.060956][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6429'. [ 1073.050427][T20954] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.884211][T26915] 8021q: VLANs not supported on wg2 [ 1073.912127][T26923] 9p: Bad value for 'rfdno' [ 1073.966136][T26921] sctp: [Deprecated]: syz.6.6430 (pid 26921) Use of int in maxseg socket option. [ 1073.966136][T26921] Use struct sctp_assoc_value instead [ 1075.101082][T26939] loop8: detected capacity change from 0 to 512 [ 1075.790701][T26939] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1075.797440][T26939] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.6435: ea_inode with extended attributes [ 1075.810220][T26939] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1075.819755][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1075.835301][ C1] EXT4-fs (loop8): initial error at time 2000000553: ext4_xattr_inode_iget:441: inode 11 [ 1075.845133][ C1] EXT4-fs (loop8): last error at time 2000000553: ext4_xattr_inode_iget:441: inode 11 [ 1076.175740][T26939] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.6435: error while reading EA inode 11 err=-117 [ 1076.188053][T26939] loop8: lost filesystem error report for type 5 error -117 [ 1076.822468][T26939] EXT4-fs (loop8): 1 orphan inode deleted [ 1076.836074][T26939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1077.236771][T23136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.900421][T26973] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6441'. [ 1077.948594][T26973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.011216][T26955] loop6: detected capacity change from 0 to 512 [ 1078.559026][T26955] EXT4-fs: Ignoring removed nobh option [ 1078.779838][T26980] batman_adv: batadv0: Interface deactivated: dummy0 [ 1078.786548][T26980] batman_adv: batadv0: Removing interface: dummy0 [ 1079.228729][T26980] bond0: (slave bridge_slave_1): Releasing backup interface [ 1079.240620][T26980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1080.212219][T26996] 9p: Bad value for 'source' [ 1080.570168][T26955] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1080.570640][T26955] EXT4-fs: failed to create workqueue [ 1081.143727][T26955] EXT4-fs (loop6): mount failed [ 1081.903170][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 1081.903184][ T28] audit: type=1326 audit(2000000559.535:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1081.944251][ T28] audit: type=1326 audit(2000000559.565:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1081.983201][ T28] audit: type=1326 audit(2000000559.565:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.035509][ T28] audit: type=1326 audit(2000000559.565:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.090477][ T28] audit: type=1326 audit(2000000559.575:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.138350][ T28] audit: type=1326 audit(2000000559.575:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.203712][T27012] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6451'. [ 1082.457290][T27015] loop6: detected capacity change from 0 to 128 [ 1082.562010][ T28] audit: type=1326 audit(2000000559.575:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.586113][ T28] audit: type=1326 audit(2000000559.595:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.610468][ T28] audit: type=1326 audit(2000000559.595:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.635544][ T28] audit: type=1326 audit(2000000559.595:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27003 comm="syz.8.6448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cedc7c799 code=0x7ffc0000 [ 1082.782592][T27023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49127 sclass=netlink_route_socket pid=27023 comm=syz.6.6453 [ 1083.402903][T27028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27028 comm=syz.3.6454 [ 1083.913281][T27044] 9p: Bad value for 'wfdno' [ 1084.007366][T27052] batman_adv: batadv0: Adding interface: dummy0 [ 1084.115258][T27052] batman_adv: batadv0: Interface activated: dummy0 [ 1084.543743][T27048] batadv0: mtu less than device minimum [ 1084.578386][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.589267][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.599983][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.610738][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.621358][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.631958][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.642657][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.653406][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1084.664119][T27048] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1085.242168][T27072] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1085.271102][T27072] bond4 (unregistering): Released all slaves [ 1085.780653][T27095] veth1_to_team: Caught tx_queue_len zero misconfig [ 1086.633491][T27107] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1087.553732][T27112] lo speed is unknown, defaulting to 1000 [ 1089.530285][T27153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6481'. [ 1089.821820][T27156] lo: entered promiscuous mode [ 1089.827040][T27156] tunl0: entered promiscuous mode [ 1089.832518][T27156] gre0: entered promiscuous mode [ 1089.837876][T27156] gretap0: entered promiscuous mode [ 1089.843664][T27156] erspan0: entered promiscuous mode [ 1089.849119][T27156] ip_vti0: entered promiscuous mode [ 1089.854449][T27156] ip6_vti0: entered promiscuous mode [ 1089.860032][T27156] sit0: entered promiscuous mode [ 1089.865648][T27156] ip6tnl0: entered promiscuous mode [ 1089.871623][T27156] ip6gre0: entered promiscuous mode [ 1089.877185][T27156] ip6gretap0: entered promiscuous mode [ 1089.883339][T27156] bond0: entered promiscuous mode [ 1089.888516][T27156] dummy0: entered promiscuous mode [ 1089.893954][T27156] nlmon0: entered promiscuous mode [ 1089.899425][T27156] caif0: entered promiscuous mode [ 1089.904570][T27156] vxcan0: entered promiscuous mode [ 1089.910001][T27156] vxcan1: entered promiscuous mode [ 1089.915929][T27156] veth1: entered promiscuous mode [ 1089.921296][T27156] wg1: entered promiscuous mode [ 1089.926425][T27156] wg2: entered promiscuous mode [ 1089.935389][T27156] veth0_to_bridge: entered promiscuous mode [ 1089.941481][T27156] bridge_slave_0: entered promiscuous mode [ 1089.947730][T27156] veth1_to_bridge: entered promiscuous mode [ 1089.953770][T27156] bridge_slave_1: entered promiscuous mode [ 1089.959898][T27156] veth0_to_bond: entered promiscuous mode [ 1089.965706][T27156] bond_slave_0: entered promiscuous mode [ 1089.971646][T27156] veth1_to_bond: entered promiscuous mode [ 1089.977517][T27156] bond_slave_1: entered promiscuous mode [ 1089.983271][T27156] veth1_to_team: entered promiscuous mode [ 1089.989447][T27156] team_slave_1: entered promiscuous mode [ 1089.995348][T27156] veth1_to_batadv: entered promiscuous mode [ 1090.001644][T27156] batadv_slave_1: entered promiscuous mode [ 1090.007895][T27156] xfrm0: entered promiscuous mode [ 1090.013215][T27156] veth0_to_hsr: entered promiscuous mode [ 1090.019532][T27156] hsr0: entered promiscuous mode [ 1090.025019][T27156] veth1_virt_wifi: entered promiscuous mode [ 1090.031783][T27156] veth0_virt_wifi: entered promiscuous mode [ 1090.038271][T27156] vlan0: entered promiscuous mode [ 1090.043537][T27156] vlan1: entered promiscuous mode [ 1090.048904][T27156] macvlan0: entered promiscuous mode [ 1090.054313][T27156] macvlan1: entered promiscuous mode [ 1090.059941][T27156] ipvlan0: entered promiscuous mode [ 1090.065449][T27156] ipvlan1: entered promiscuous mode [ 1090.071359][T27156] macvtap0: entered promiscuous mode [ 1090.077012][T27156] macsec0: entered promiscuous mode [ 1090.082721][T27156] geneve0: entered promiscuous mode [ 1090.088058][T27156] geneve1: entered promiscuous mode [ 1090.093585][T27156] ip6tnl1: entered promiscuous mode [ 1090.099070][T27156] batadv1: entered promiscuous mode [ 1090.104474][T27156] batadv2: entered promiscuous mode [ 1090.109883][T27156] veth2: entered promiscuous mode [ 1090.115143][T27156] veth3: entered promiscuous mode [ 1090.120431][T27156] batadv3: entered promiscuous mode [ 1090.126341][T27156] batadv4: entered promiscuous mode [ 1090.131844][T27156] batadv5: entered promiscuous mode [ 1090.137507][T27156] batadv6: entered promiscuous mode [ 1090.143704][T27156] batadv7: entered promiscuous mode [ 1090.149313][T27156] batadv8: entered promiscuous mode [ 1090.155196][T27156] bond1: entered promiscuous mode [ 1090.160579][T27156] dvmrp1: entered promiscuous mode [ 1090.165768][T27156] batadv9: entered promiscuous mode [ 1090.171050][T27156] batadv10: entered promiscuous mode [ 1090.176555][T27156] batadv11: entered promiscuous mode [ 1090.182014][T27156] batadv12: entered promiscuous mode [ 1090.187630][T27156] sit1: entered promiscuous mode [ 1090.192781][T27156] batadv13: entered promiscuous mode [ 1090.198158][T27156] batadv0: entered promiscuous mode [ 1090.204091][T27156] batadv14: entered promiscuous mode [ 1090.209826][T27156] batadv15: entered promiscuous mode [ 1090.215328][T27156] batadv16: entered promiscuous mode [ 1090.221116][T27156] batadv17: entered promiscuous mode [ 1090.226615][T27156] batadv18: entered promiscuous mode [ 1090.232081][T27156] macvlan2: entered promiscuous mode [ 1090.237592][T27156] batadv19: entered promiscuous mode [ 1090.248102][T27156] bond2: entered promiscuous mode [ 1090.253363][T27156] batadv20: entered promiscuous mode [ 1090.258798][T27156] ipvlan2: entered promiscuous mode [ 1090.264105][T27156] erspan0.1: entered promiscuous mode [ 1090.269663][T27156] batadv21: entered promiscuous mode [ 1090.275130][T27156] batadv22: entered promiscuous mode [ 1090.280571][T27156] ip6tnl2: entered promiscuous mode [ 1090.286116][T27156] batadv23: entered promiscuous mode [ 1090.291731][T27156] ipip0: entered promiscuous mode [ 1090.297151][T27156] batadv24: entered promiscuous mode [ 1090.302660][T27156] batadv25: entered promiscuous mode [ 1090.308060][T27156] batadv26: entered promiscuous mode [ 1090.313532][T27156] batadv27: entered promiscuous mode [ 1090.319297][T27156] batadv28: entered promiscuous mode [ 1090.324926][T27156] batadv29: entered promiscuous mode [ 1090.330639][T27156] batadv30: entered promiscuous mode [ 1090.336185][T27156] batadv31: entered promiscuous mode [ 1090.349921][T27156] batadv32: entered promiscuous mode [ 1090.355496][T27156] batadv33: entered promiscuous mode [ 1090.361090][T27156] batadv34: entered promiscuous mode [ 1090.366499][T27156] batadv35: entered promiscuous mode [ 1090.371908][T27156] ip6tnl3: entered promiscuous mode [ 1090.377396][T27156] batadv36: entered promiscuous mode [ 1090.382864][T27156] batadv37: entered promiscuous mode [ 1090.388528][T27156] batadv38: entered promiscuous mode [ 1090.394095][T27156] batadv39: entered promiscuous mode [ 1090.399502][T27156] batadv40: entered promiscuous mode [ 1090.405214][T27156] batadv41: entered promiscuous mode [ 1090.410671][T27156] batadv42: entered promiscuous mode [ 1090.416179][T27156] batadv43: entered promiscuous mode [ 1090.421746][T27156] batadv44: entered promiscuous mode [ 1090.427093][T27156] batadv45: entered promiscuous mode [ 1090.432546][T27156] batadv46: entered promiscuous mode [ 1090.437925][T27156] batadv47: entered promiscuous mode [ 1090.443604][T27156] batadv48: entered promiscuous mode [ 1090.449093][T27156] batadv49: entered promiscuous mode [ 1090.454736][T27157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6481'. [ 1090.467655][T27156] batadv50: entered promiscuous mode [ 1090.473508][T27156] dvmrp8: entered promiscuous mode [ 1090.478910][T27156] netdevsim netdevsim4 eth0: entered promiscuous mode [ 1090.486023][T27156] netdevsim netdevsim4 eth1: entered promiscuous mode [ 1090.493064][T27156] netdevsim netdevsim4 eth2: entered promiscuous mode [ 1090.499995][T27156] netdevsim netdevsim4 eth3: entered promiscuous mode [ 1090.506999][T27156] batadv51: entered promiscuous mode [ 1090.512564][T27156] veth4: entered promiscuous mode [ 1090.517872][T27156] veth5: entered promiscuous mode [ 1090.523366][T27156] bond3: entered promiscuous mode [ 1090.528416][T27156] geneve2: entered promiscuous mode [ 1090.534008][T27156] vlan2: entered promiscuous mode [ 1090.539615][T27156] erspan1: entered promiscuous mode [ 1090.545809][T27162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6481'. [ 1090.654790][T27156] bond4: entered promiscuous mode [ 1090.659934][T27156] gretap1: entered promiscuous mode [ 1090.765626][T27166] sctp: [Deprecated]: syz.3.6484 (pid 27166) Use of int in maxseg socket option. [ 1090.765626][T27166] Use struct sctp_assoc_value instead [ 1090.939514][T27157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6481'. [ 1090.950752][T27156] sit2: entered promiscuous mode [ 1091.100492][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 1091.100568][ T28] audit: type=1400 audit(2000000568.685:2241): avc: denied { read } for pid=27165 comm="syz.3.6484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1093.373549][T27159] siw: device registration error -23 [ 1094.188991][T27167] lo speed is unknown, defaulting to 1000 [ 1096.086108][T27221] 9p: Bad value for 'wfdno' [ 1096.104763][T27219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=27219 comm=syz.6.6494 [ 1097.256998][T27247] 9p: Bad value for 'wfdno' [ 1098.900006][T27281] 9p: Bad value for 'wfdno' [ 1099.147521][T27291] netlink: 'syz.4.6524': attribute type 1 has an invalid length. [ 1099.310973][T27284] sctp: [Deprecated]: syz.8.6522 (pid 27284) Use of int in maxseg socket option. [ 1099.310973][T27284] Use struct sctp_assoc_value instead [ 1100.193048][T27291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1100.325341][T27297] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1101.269777][T27338] 9p: Bad value for 'source' [ 1103.302078][T27344] net_ratelimit: 11 callbacks suppressed [ 1103.302096][T27344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1103.712816][T27334] 9p: Bad value for 'wfdno' [ 1104.251491][T27386] 9p: Bad value for 'wfdno' [ 1104.334380][T27383] lo speed is unknown, defaulting to 1000 [ 1104.466010][T27393] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1105.230311][T27412] 9p: Bad value for 'wfdno' [ 1105.453393][T27418] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1105.511455][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1105.553172][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1105.769828][T27424] dummy0: left promiscuous mode [ 1105.842669][T27439] sock: sock_timestamping_bind_phc: sock not bind to device [ 1105.901878][T27424] batman_adv: batadv0: Adding interface: dummy0 [ 1105.935450][T27435] 9p: Bad value for 'wfdno' [ 1105.944071][T27424] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.944412][T27424] batman_adv: batadv0: Interface activated: dummy0 [ 1106.150197][T27457] 9p: Bad value for 'wfdno' [ 1106.298199][T27459] 9p: Bad value for 'wfdno' [ 1106.325031][T27464] 9p: Bad value for 'wfdno' [ 1106.457348][T27450] 9p: Bad value for 'wfdno' [ 1106.617870][T27475] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1107.997960][T27496] 9p: Bad value for 'wfdno' [ 1108.440301][T27505] 9p: Bad value for 'wfdno' [ 1108.744685][T27519] 9p: Bad value for 'wfdno' [ 1111.419913][T27542] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1111.950208][T27549] 9p: Bad value for 'wfdno' [ 1112.078640][T27556] 9p: Bad value for 'wfdno' [ 1114.473969][T27584] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1116.467785][T27600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=27600 comm=syz.8.6633 [ 1116.578319][ T28] audit: type=1326 audit(2000000594.205:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1116.643498][ T28] audit: type=1326 audit(2000000594.205:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1116.701424][ T28] audit: type=1326 audit(2000000594.205:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1116.730411][ T28] audit: type=1326 audit(2000000594.235:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1117.089551][ T28] audit: type=1326 audit(2000000594.235:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1117.187577][ T28] audit: type=1326 audit(2000000594.235:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1117.247208][ T28] audit: type=1326 audit(2000000594.235:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1117.271728][ T28] audit: type=1326 audit(2000000594.235:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1117.297878][ T28] audit: type=1326 audit(2000000594.235:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1117.322464][ T28] audit: type=1326 audit(2000000594.235:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.1.6637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1117.432202][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1118.307416][T27653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6652'. [ 1118.948872][T27660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=27660 comm=syz.1.6657 [ 1119.255313][T27682] 9p: Bad value for 'wfdno' [ 1119.880957][T27706] netlink: 'syz.6.6669': attribute type 1 has an invalid length. [ 1119.895555][T27706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1120.394144][T27706] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1120.916522][T27715] 9p: Bad value for 'wfdno' [ 1121.164894][T27703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6671'. [ 1121.289178][T27725] 9p: Bad value for 'wfdno' [ 1121.664979][T27736] sctp: [Deprecated]: syz.1.6682 (pid 27736) Use of int in maxseg socket option. [ 1121.664979][T27736] Use struct sctp_assoc_value instead [ 1122.020706][T27756] 9p: Bad value for 'wfdno' [ 1122.528491][T27762] 9p: Bad value for 'wfdno' [ 1122.683705][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1122.683781][ T28] audit: type=1326 audit(2000000600.315:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27767 comm="syz.8.6696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x0 [ 1123.753998][T27786] 9p: Bad value for 'wfdno' [ 1123.977958][T27798] 9p: Bad value for 'wfdno' [ 1124.577846][T27820] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6711'. [ 1124.586903][T27820] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6711'. [ 1125.225299][T27850] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1125.237455][T27850] bond0: (slave lo): Error: Device can not be enslaved while up [ 1125.549523][ T28] audit: type=1326 audit(2000000603.175:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27870 comm="syz.1.6734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x0 [ 1125.682852][T27880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6738'. [ 1125.946665][T27892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6739'. [ 1126.666530][T27931] netlink: 'syz.1.6759': attribute type 1 has an invalid length. [ 1126.778567][T27931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1127.008786][T27935] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1127.715789][T27974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6772'. [ 1127.724754][T27974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.732231][T27974] batadv0: mtu less than device minimum [ 1127.738231][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.748943][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.759602][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.770480][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.781453][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.792484][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.803243][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.814332][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1127.825153][T27974] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1129.816490][T27974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.959375][T27986] 9p: Bad value for 'wfdno' [ 1130.097637][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6787'. [ 1130.145102][T28000] netlink: 'syz.8.6786': attribute type 1 has an invalid length. [ 1130.183293][T28000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1130.227551][T28004] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1130.286911][T28009] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6791'. [ 1130.479436][T28019] tipc: Enabling of bearer rejected, failed to enable media [ 1130.619350][T28024] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6796'. [ 1130.629021][T28026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1130.715603][T28029] 9p: Bad value for 'wfdno' [ 1130.726919][T28027] 9p: Bad value for 'wfdno' [ 1130.838967][T28043] tipc: Enabling of bearer rejected, failed to enable media [ 1131.065540][T28042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6805'. [ 1131.233223][T28069] 9p: Bad value for 'wfdno' [ 1131.278751][T28071] 9p: Bad value for 'wfdno' [ 1133.956942][ T28] audit: type=1326 audit(2000000611.585:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28116 comm="syz.3.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1134.945811][ T28] audit: type=1326 audit(2000000611.585:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28116 comm="syz.3.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1134.970410][ T28] audit: type=1326 audit(2000000611.585:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28116 comm="syz.3.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1135.600987][T28130] sit0: entered promiscuous mode [ 1135.652748][T28130] netlink: 'syz.3.6839': attribute type 1 has an invalid length. [ 1135.699636][T28130] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1135.954846][ T28] audit: type=1326 audit(2000000611.585:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28116 comm="syz.3.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1135.979774][ T28] audit: type=1326 audit(2000000611.585:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28116 comm="syz.3.6834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1136.050849][T28148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1136.302168][T28157] lo: entered promiscuous mode [ 1136.307174][T28157] tunl0: entered promiscuous mode [ 1136.312306][T28157] gre0: entered promiscuous mode [ 1136.317647][T28157] gretap0: entered promiscuous mode [ 1136.323266][T28157] erspan0: entered promiscuous mode [ 1136.328685][T28157] ip_vti0: entered promiscuous mode [ 1136.334140][T28157] ip6_vti0: entered promiscuous mode [ 1136.339537][T28157] sit0: entered promiscuous mode [ 1136.344599][T28157] ip6tnl0: entered promiscuous mode [ 1136.349952][T28157] ip6gre0: entered promiscuous mode [ 1136.355374][T28157] ip6gretap0: entered promiscuous mode [ 1136.361505][T28157] vcan0: entered promiscuous mode [ 1136.366780][T28157] bond0: entered promiscuous mode [ 1136.371990][T28157] team0: entered promiscuous mode [ 1136.377512][T28157] dummy0: entered promiscuous mode [ 1136.408137][T28158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1136.422431][T28157] nlmon0: entered promiscuous mode [ 1136.427890][T28157] caif0: entered promiscuous mode [ 1136.433464][T28157] wg0: entered promiscuous mode [ 1136.438538][T28157] wg1: entered promiscuous mode [ 1136.443613][T28157] wg2: entered promiscuous mode [ 1136.448710][T28157] veth0_to_bridge: entered promiscuous mode [ 1136.454713][T28157] bridge_slave_0: entered promiscuous mode [ 1136.461036][T28157] veth1_to_bridge: entered promiscuous mode [ 1136.467240][T28157] bridge_slave_1: entered promiscuous mode [ 1136.473370][T28157] veth0_to_bond: entered promiscuous mode [ 1136.479263][T28157] bond_slave_0: entered promiscuous mode [ 1136.485166][T28157] veth1_to_bond: entered promiscuous mode [ 1136.491230][T28157] bond_slave_1: entered promiscuous mode [ 1136.496979][T28157] veth0_to_team: entered promiscuous mode [ 1136.502985][T28157] team_slave_0: entered promiscuous mode [ 1136.508923][T28157] veth1_to_team: entered promiscuous mode [ 1136.515040][T28157] team_slave_1: entered promiscuous mode [ 1136.520856][T28157] xfrm0: entered promiscuous mode [ 1136.526182][T28157] veth0_to_hsr: entered promiscuous mode [ 1136.532224][T28157] hsr0: entered promiscuous mode [ 1136.537529][T28157] veth1_virt_wifi: entered promiscuous mode [ 1136.547766][T28157] veth0_virt_wifi: entered promiscuous mode [ 1136.554043][T28157] macvtap0: entered promiscuous mode [ 1136.559660][T28157] macsec0: entered promiscuous mode [ 1136.565129][T28157] geneve0: entered promiscuous mode [ 1136.570745][T28157] geneve1: entered promiscuous mode [ 1136.576179][T28157] batadv1: entered promiscuous mode [ 1136.581586][T28157] bridge1: entered promiscuous mode [ 1136.587172][T28157] batadv2: entered promiscuous mode [ 1136.592788][T28157] batadv3: entered promiscuous mode [ 1136.598059][T28157] bridge2: entered promiscuous mode [ 1136.603459][T28157] batadv4: entered promiscuous mode [ 1136.608829][T28157] bridge3: entered promiscuous mode [ 1136.614261][T28157] batadv5: entered promiscuous mode [ 1136.619773][T28157] batadv6: entered promiscuous mode [ 1136.625176][T28157] batadv7: entered promiscuous mode [ 1136.630742][T28157] bond1: entered promiscuous mode [ 1136.635911][T28157] bridge4: entered promiscuous mode [ 1136.641367][T28159] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1136.655250][T28157] batadv8: entered promiscuous mode [ 1136.660932][T28157] batadv9: entered promiscuous mode [ 1136.666639][T28157] batadv10: entered promiscuous mode [ 1136.672199][T28157] batadv0: entered promiscuous mode [ 1136.677754][T28157] vxlan0: entered promiscuous mode [ 1136.683265][T28157] ipip0: entered promiscuous mode [ 1136.688580][T28157] batadv11: entered promiscuous mode [ 1136.694099][T28157] geneve2: entered promiscuous mode [ 1136.699614][T28157] vlan2: entered promiscuous mode [ 1136.704806][T28157] batadv12: entered promiscuous mode [ 1136.710234][T28157] batadv13: entered promiscuous mode [ 1136.715819][T28157] syztnl1: entered promiscuous mode [ 1136.721096][T28157] batadv14: entered promiscuous mode [ 1136.726583][T28157] batadv15: entered promiscuous mode [ 1136.732057][T28157] erspan0.1: entered promiscuous mode [ 1136.738231][T28157] batadv16: entered promiscuous mode [ 1136.743806][T28157] batadv17: entered promiscuous mode [ 1136.749231][T28157] batadv18: entered promiscuous mode [ 1136.755569][T28157] batadv19: entered promiscuous mode [ 1136.761023][T28157] vlan3: entered promiscuous mode [ 1136.766803][T28157] batadv20: entered promiscuous mode [ 1136.837419][T28157] bond2: entered promiscuous mode [ 1137.817981][T28157] veth0: entered promiscuous mode [ 1137.823344][T28157] veth1: entered promiscuous mode [ 1137.848886][T28157] batadv21: entered promiscuous mode [ 1137.854482][T28157] batadv22: entered promiscuous mode [ 1137.860512][T28157] batadv23: entered promiscuous mode [ 1137.865845][T28157] batadv24: entered promiscuous mode [ 1137.871315][T28157] ip6tnl1: entered promiscuous mode [ 1137.876635][T28157] batadv25: entered promiscuous mode [ 1137.882019][T28157] batadv26: entered promiscuous mode [ 1137.887332][T28157] batadv27: entered promiscuous mode [ 1137.893350][T28157] batadv28: entered promiscuous mode [ 1137.898681][T28157] batadv29: entered promiscuous mode [ 1137.904103][T28157] batadv30: entered promiscuous mode [ 1137.909507][T28157] ip6erspan0: entered promiscuous mode [ 1137.915225][T28157] batadv31: entered promiscuous mode [ 1137.921171][T28157] batadv32: entered promiscuous mode [ 1137.926607][T28157] batadv33: entered promiscuous mode [ 1137.932001][T28157] batadv34: entered promiscuous mode [ 1137.937393][T28157] batadv35: entered promiscuous mode [ 1137.942739][T28157] batadv36: entered promiscuous mode [ 1137.948069][T28157] batadv37: entered promiscuous mode [ 1137.954029][T28157] batadv38: entered promiscuous mode [ 1137.959353][T28157] batadv39: entered promiscuous mode [ 1137.964741][T28157] batadv40: entered promiscuous mode [ 1137.970143][T28157] batadv41: entered promiscuous mode [ 1137.975616][T28157] batadv42: entered promiscuous mode [ 1137.981605][T28157] gtp0: entered promiscuous mode [ 1137.986682][T28157] batadv43: entered promiscuous mode [ 1137.992325][T28157] batadv44: entered promiscuous mode [ 1137.997692][T28157] batadv45: entered promiscuous mode [ 1138.009210][T28157] batadv46: entered promiscuous mode [ 1138.015293][T28157] batadv47: entered promiscuous mode [ 1138.020652][T28157] ip6erspan1: entered promiscuous mode [ 1138.026219][T28157] batadv48: entered promiscuous mode [ 1138.031737][T28157] batadv49: entered promiscuous mode [ 1138.037117][T28157] batadv50: entered promiscuous mode [ 1138.043542][T28157] sit1: entered promiscuous mode [ 1138.070966][T28157] batadv51: entered promiscuous mode [ 1138.076573][T28157] sit2: entered promiscuous mode [ 1138.081773][T28157] netdevsim netdevsim1 eth0: entered promiscuous mode [ 1138.088672][T28157] netdevsim netdevsim1 eth1: entered promiscuous mode [ 1138.095535][T28157] netdevsim netdevsim1 eth2: entered promiscuous mode [ 1138.102966][T28157] netdevsim netdevsim1 eth3: entered promiscuous mode [ 1138.169841][T28157] bridge0: entered promiscuous mode [ 1138.176124][T28157] batadv52: entered promiscuous mode [ 1138.181580][T28157] batadv53: entered promiscuous mode [ 1138.186898][T28157] syztnl0: entered promiscuous mode [ 1138.193056][T28157] sit3: entered promiscuous mode [ 1138.224720][T28157] bond4: entered promiscuous mode [ 1138.232411][T28157] veth2: entered promiscuous mode [ 1138.239857][T28157] veth3: entered promiscuous mode [ 1138.575147][T28179] lo speed is unknown, defaulting to 1000 [ 1140.131518][T28209] ip6erspan0: entered allmulticast mode [ 1140.206555][T28215] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6866'. [ 1140.253346][T28221] net_ratelimit: 11 callbacks suppressed [ 1140.253366][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.283450][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.305560][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.329185][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.365929][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.384472][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.408861][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.423125][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.442082][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1140.463140][T28221] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (0); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1141.048083][T28255] 9p: Bad value for 'wfdno' [ 1141.500946][T28263] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6884'. [ 1141.857806][T28278] netlink: 'syz.1.6890': attribute type 1 has an invalid length. [ 1141.916569][T28278] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1142.016823][T28278] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 1142.177477][T28278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6890'. [ 1142.235925][T28288] bond5: (slave gretap1): making interface the new active one [ 1142.259608][T28288] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1142.292498][T28278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1142.321723][T28278] macvlan0: entered promiscuous mode [ 1142.336200][T28278] macvlan0: entered allmulticast mode [ 1142.347950][T28278] bond5: entered promiscuous mode [ 1142.360977][T28278] gretap1: entered promiscuous mode [ 1142.372879][T28278] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1142.392226][T28278] bond5: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1142.411913][T28278] bond5: left promiscuous mode [ 1142.416820][T28278] gretap1: left promiscuous mode [ 1142.518002][T28291] 9p: Bad value for 'wfdno' [ 1142.699022][T28295] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6895'. [ 1144.057354][T28328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6907'. [ 1144.073447][T28322] 9p: Bad value for 'wfdno' [ 1144.788965][T28346] 9p: Bad value for 'wfdno' [ 1145.279816][ T28] audit: type=1400 audit(2000000622.825:2283): avc: denied { getopt } for pid=28393 comm="syz.6.6935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1145.392751][ T28] audit: type=1326 audit(2000000623.025:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.501909][ T28] audit: type=1326 audit(2000000623.045:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.527262][ T28] audit: type=1326 audit(2000000623.055:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.552959][ T28] audit: type=1326 audit(2000000623.055:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.602409][ T28] audit: type=1326 audit(2000000623.055:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.627449][ T28] audit: type=1326 audit(2000000623.055:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.665032][ T28] audit: type=1326 audit(2000000623.055:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.713856][ T28] audit: type=1326 audit(2000000623.065:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1145.741817][ T28] audit: type=1326 audit(2000000623.065:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28403 comm="syz.3.6940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1146.421814][T28448] 9p: Bad value for 'rfdno' [ 1146.722886][T28472] netlink: 'syz.1.6970': attribute type 10 has an invalid length. [ 1146.928430][T28474] net_ratelimit: 246 callbacks suppressed [ 1146.928460][T28474] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1148.641074][T28526] netlink: 375 bytes leftover after parsing attributes in process `syz.1.6992'. [ 1148.678932][T28526] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 1148.688444][T28526] openvswitch: netlink: Message has 20 unknown bytes. [ 1148.719037][T28531] tipc: Enabling of bearer rejected, failed to enable media [ 1148.794118][T28529] 9p: Bad value for 'wfdno' [ 1148.908031][T28546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1149.008265][T28564] tipc: Enabling of bearer rejected, failed to enable media [ 1149.102576][T28570] 9p: Bad value for 'wfdno' [ 1149.496041][T28589] lo speed is unknown, defaulting to 1000 [ 1150.055155][T28606] tipc: Enabling of bearer rejected, failed to enable media [ 1150.233140][T28608] 9p: Bad value for 'wfdno' [ 1151.430868][T28657] bond_slave_0: Caught tx_queue_len zero misconfig [ 1151.670132][T28672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1151.786583][T28668] 9p: Bad value for 'wfdno' [ 1151.905420][T28691] tipc: Enabling of bearer rejected, failed to enable media [ 1152.072510][T28704] 9p: Bad value for 'wfdno' [ 1152.411129][T28725] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1153.898964][T28733] tipc: Enabling of bearer rejected, failed to enable media [ 1153.961668][T28736] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7080'. [ 1155.073707][T28839] netlink: 'syz.1.7123': attribute type 12 has an invalid length. [ 1155.086115][T28839] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7123'. [ 1155.095639][T28838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7122'. [ 1155.107003][T28843] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7125'. [ 1155.445611][T28912] tipc: Cannot configure node identity twice [ 1155.878756][T28971] netlink: 'syz.4.7184': attribute type 10 has an invalid length. [ 1155.906285][T28971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7184'. [ 1155.925499][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1155.925515][ T28] audit: type=1326 audit(2000000633.545:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28972 comm="syz.3.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1155.944923][T28977] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7187'. [ 1155.958466][ T28] audit: type=1326 audit(2000000633.545:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28972 comm="syz.3.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1155.991483][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7188'. [ 1156.014957][ T28] audit: type=1326 audit(2000000633.545:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28972 comm="syz.3.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1156.050375][ T28] audit: type=1326 audit(2000000633.545:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28972 comm="syz.3.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1156.075268][ T28] audit: type=1326 audit(2000000633.545:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28972 comm="syz.3.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1156.170840][T28995] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7195'. [ 1156.180495][T28995] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7195'. [ 1156.203757][ T28] audit: type=1326 audit(2000000633.825:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.4.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d40ecc799 code=0x7ffc0000 [ 1156.239333][ T28] audit: type=1326 audit(2000000633.825:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.4.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d40ecc799 code=0x7ffc0000 [ 1156.263526][ T28] audit: type=1326 audit(2000000633.825:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.4.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d40ecc799 code=0x7ffc0000 [ 1156.266120][T29000] batadv0: mtu less than device minimum [ 1156.313810][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1156.325006][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1156.325437][ T28] audit: type=1326 audit(2000000633.825:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.4.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d40ecc799 code=0x7ffc0000 [ 1156.335958][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1156.359009][ T28] audit: type=1326 audit(2000000633.825:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.4.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d40ecc799 code=0x7ffc0000 [ 1156.369645][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1156.403655][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1156.414688][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1156.425577][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1156.436650][T29000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1157.779416][T29076] netlink: 'syz.3.7229': attribute type 10 has an invalid length. [ 1157.815547][T29081] tipc: Enabling of bearer rejected, failed to enable media [ 1158.051499][T29119] batman_adv: batadv0: Adding interface: dummy0 [ 1158.058083][T29119] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1158.131820][T29119] batman_adv: batadv0: Interface activated: dummy0 [ 1158.184109][T29108] net_ratelimit: 11 callbacks suppressed [ 1158.184248][T29108] batadv0: mtu less than device minimum [ 1158.224193][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.238970][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.253792][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.268863][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.284872][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.300392][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.314892][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.332050][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.346782][T29108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1158.855084][T29172] 9p: Bad value for 'wfdno' [ 1159.146044][T29196] 9p: Bad value for 'wfdno' [ 1159.265957][T29210] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7287'. [ 1159.275498][T29208] netlink: 23 bytes leftover after parsing attributes in process `syz.8.7286'. [ 1159.437443][T29235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1159.477471][T29239] macvtap1: entered promiscuous mode [ 1159.490315][T29239] macvtap1: entered allmulticast mode [ 1159.502146][T29239] dummy0: entered allmulticast mode [ 1159.517750][T29239] dummy0: entered promiscuous mode [ 1159.548470][T29239] team0: Device macvtap1 failed to register rx_handler [ 1159.559969][T29239] dummy0: left allmulticast mode [ 1159.565034][T29239] dummy0: left promiscuous mode [ 1159.989543][T29281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7319'. [ 1160.002112][T29281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7319'. [ 1160.365946][T29333] Process accounting resumed [ 1160.617048][T29356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7353'. [ 1161.138935][T29430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'. [ 1161.183761][T29439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'. [ 1161.346793][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 1161.346807][ T28] audit: type=1326 audit(2000000638.975:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.408982][ T28] audit: type=1326 audit(2000000638.975:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.434277][ T28] audit: type=1326 audit(2000000638.975:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.468292][ T28] audit: type=1326 audit(2000000638.975:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.585957][ T28] audit: type=1326 audit(2000000638.975:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.674926][ T28] audit: type=1326 audit(2000000638.975:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.701345][ T28] audit: type=1326 audit(2000000638.975:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.774349][ T28] audit: type=1326 audit(2000000638.975:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.918436][ T28] audit: type=1326 audit(2000000638.975:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.942543][ T28] audit: type=1326 audit(2000000638.975:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.1.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1161.954548][T29511] netlink: 'syz.1.7419': attribute type 2 has an invalid length. [ 1162.263819][T29543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7432'. [ 1163.312378][T29639] bridge0: port 1(vlan0) entered blocking state [ 1163.318704][T29639] bridge0: port 1(vlan0) entered disabled state [ 1163.325268][T29639] vlan0: entered allmulticast mode [ 1163.331165][T29639] bond0: entered allmulticast mode [ 1163.336791][T29639] vlan0: entered promiscuous mode [ 1163.884841][T29708] 9p: Bad value for 'wfdno' [ 1164.228014][T29736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1164.662642][T29780] net_ratelimit: 12 callbacks suppressed [ 1164.662662][T29780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1165.947133][T29877] tipc: Enabling of bearer rejected, failed to enable media [ 1166.492609][T29911] 9p: Bad value for 'wfdno' [ 1166.923876][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1166.923945][ T28] audit: type=1326 audit(2000000644.555:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.3.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1167.021866][ T28] audit: type=1326 audit(2000000644.555:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.3.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1167.054093][ T28] audit: type=1326 audit(2000000644.555:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.3.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1167.082927][ T28] audit: type=1326 audit(2000000644.555:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.3.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1167.115066][ T28] audit: type=1326 audit(2000000644.555:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.3.7601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1168.120040][ T28] audit: type=1400 audit(2000000645.755:2390): avc: denied { bind } for pid=30016 comm="syz.4.7627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1168.490440][ T28] audit: type=1400 audit(2000000646.115:2391): avc: denied { read } for pid=30054 comm="syz.3.7633" path="socket:[87610]" dev="sockfs" ino=87610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1168.592610][T30066] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1168.651336][T30070] netlink: 'syz.4.7645': attribute type 4 has an invalid length. [ 1168.669447][T30072] batadv_slave_1: entered promiscuous mode [ 1168.686413][T30071] batadv_slave_1: left promiscuous mode [ 1168.694377][T30076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7647'. [ 1168.838684][T30092] 9p: Bad value for 'wfdno' [ 1169.072419][T30127] tipc: Enabling of bearer rejected, failed to enable media [ 1169.407311][T30173] tipc: Enabling of bearer rejected, failed to enable media [ 1169.609283][T30196] netlink: 'syz.6.7695': attribute type 30 has an invalid length. [ 1169.646738][T30196] bond2: option arp_missed_max: invalid value (0) [ 1169.654146][T30196] bond2: option arp_missed_max: allowed values 1 - 255 [ 1169.693016][T30196] bond2 (unregistering): Released all slaves [ 1170.931450][T30285] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7735'. [ 1171.232934][T30309] IPv6: NLM_F_CREATE should be specified when creating new route [ 1171.372784][T30325] batadv_slave_1: entered promiscuous mode [ 1171.379154][T30324] batadv_slave_1: left promiscuous mode [ 1171.505058][T30332] 9p: Bad value for 'wfdno' [ 1171.650661][T30344] lo speed is unknown, defaulting to 1000 [ 1171.710159][ T28] audit: type=1326 audit(2000000649.335:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30343 comm="syz.8.7758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cedc7c799 code=0x0 [ 1171.774327][T30355] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1172.088316][T30390] sctp: [Deprecated]: syz.1.7772 (pid 30390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1172.088316][T30390] Use struct sctp_sack_info instead [ 1172.120550][ T28] audit: type=1400 audit(2000000649.735:2393): avc: denied { mounton } for pid=30391 comm="syz.6.7773" path="/file1" dev="bpf" ino=89011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1172.202463][T30397] 9p: Bad value for 'wfdno' [ 1172.581786][T30427] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1173.241921][T30441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1173.289781][T30441] netlink: 'syz.4.7789': attribute type 30 has an invalid length. [ 1173.332955][T26042] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.364816][T26042] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.394752][T30441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1173.409854][T26042] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.433164][T30441] netlink: 'syz.4.7789': attribute type 30 has an invalid length. [ 1173.446909][T26042] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1173.457928][ T28] audit: type=1400 audit(2000000651.085:2394): avc: denied { read } for pid=30451 comm="syz.8.7796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1173.559896][T30441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1173.569503][T30441] netlink: 'syz.4.7789': attribute type 30 has an invalid length. [ 1173.766015][T30456] 9p: Bad value for 'wfdno' [ 1173.996601][ T28] audit: type=1326 audit(2000000651.625:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30470 comm="syz.6.7803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe387e1c799 code=0x0 [ 1174.141388][T30481] 9p: Bad value for 'wfdno' [ 1174.325123][T30497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1174.704357][T30510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1174.714650][T30510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1175.142191][T30514] 9p: Bad value for 'wfdno' [ 1176.112468][T30536] 9p: Bad value for 'wfdno' [ 1176.233718][T30545] 9p: Bad value for 'wfdno' [ 1176.260433][T30549] lo speed is unknown, defaulting to 1000 [ 1176.436690][T30566] IPv6: NLM_F_CREATE should be specified when creating new route [ 1176.565379][T30571] 9p: Bad value for 'wfdno' [ 1176.717726][T30581] 9p: Bad value for 'wfdno' [ 1176.987858][T30601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7854'. [ 1177.197614][T30607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7833'. [ 1177.314616][T30631] 9p: Bad value for 'rfdno' [ 1177.392419][T30641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7869'. [ 1177.401693][T30641] vlan0: left allmulticast mode [ 1177.408818][T30641] bond0: left allmulticast mode [ 1177.430663][T30641] vlan0: left promiscuous mode [ 1177.435745][T30641] bridge0: port 1(vlan0) entered disabled state [ 1177.616639][T30651] 9p: Bad value for 'wfdno' [ 1177.744274][T30657] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1177.784450][T30659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7876'. [ 1178.239161][T30685] 9p: Bad value for 'wfdno' [ 1178.317207][T30695] lo speed is unknown, defaulting to 1000 [ 1178.372997][T30696] lo speed is unknown, defaulting to 1000 [ 1178.505393][ T28] audit: type=1326 audit(2000000656.135:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.556402][ T28] audit: type=1326 audit(2000000656.135:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.583801][ T28] audit: type=1326 audit(2000000656.135:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.614013][ T28] audit: type=1326 audit(2000000656.135:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.640075][ T28] audit: type=1326 audit(2000000656.135:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.665740][ T28] audit: type=1326 audit(2000000656.135:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.690240][ T28] audit: type=1326 audit(2000000656.135:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.714326][ T28] audit: type=1326 audit(2000000656.135:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.738343][ T28] audit: type=1326 audit(2000000656.135:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1178.810748][ T28] audit: type=1326 audit(2000000656.135:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30703 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f42bd4fc799 code=0x7ffc0000 [ 1179.289047][T30779] netlink: 'syz.3.7916': attribute type 4 has an invalid length. [ 1179.317562][T30779] netlink: 'syz.3.7916': attribute type 4 has an invalid length. [ 1179.448519][T30804] lo speed is unknown, defaulting to 1000 [ 1179.725734][T30785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7918'. [ 1180.233373][T30841] 9p: Bad value for 'wfdno' [ 1180.666598][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7941'. [ 1180.763094][T30859] lo speed is unknown, defaulting to 1000 [ 1180.982848][T30861] lo speed is unknown, defaulting to 1000 [ 1181.256364][T30870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7946'. [ 1181.338279][T30870] unsupported nlmsg_type 40 [ 1181.535865][T30872] 9p: Bad value for 'wfdno' [ 1181.838606][T30885] tipc: Enabling of bearer rejected, failed to enable media [ 1182.302577][T30916] 9p: Bad value for 'wfdno' [ 1182.794485][T30930] 9p: Bad value for 'wfdno' [ 1183.199447][T30942] 9p: Bad value for 'wfdno' [ 1183.345855][T30950] 9p: Bad value for 'wfdno' [ 1183.937330][T30966] 9p: Bad value for 'wfdno' [ 1184.132897][T30961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7979'. [ 1184.537381][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1184.537396][ T28] audit: type=1326 audit(2000000662.165:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1184.626719][ T28] audit: type=1326 audit(2000000662.165:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1184.682472][ T28] audit: type=1326 audit(2000000662.165:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1184.720621][ T28] audit: type=1326 audit(2000000662.205:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1184.750192][ T28] audit: type=1326 audit(2000000662.205:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1184.774955][ T28] audit: type=1326 audit(2000000662.205:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1184.814594][ T28] audit: type=1326 audit(2000000662.205:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1184.852605][ T28] audit: type=1326 audit(2000000662.205:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7806bfc799 code=0x7ffc0000 [ 1185.044527][ T28] audit: type=1326 audit(2000000662.205:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7806bfc502 code=0x7ffc0000 [ 1185.147740][ T28] audit: type=1326 audit(2000000662.205:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.1.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7806bbcfce code=0x7ffc0000 [ 1185.648331][T31007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7996'. [ 1185.791551][T31016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7999'. [ 1186.143957][T31028] io-wq is not configured for unbound workers [ 1186.353565][T31038] netlink: 'syz.4.8008': attribute type 10 has an invalid length. [ 1186.390893][T31038] netlink: 'syz.4.8008': attribute type 10 has an invalid length. [ 1186.407703][T31038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8008'. [ 1186.627642][T31054] 9p: Bad value for 'wfdno' [ 1186.869251][T31066] 9p: Bad value for 'rfdno' [ 1186.880674][T31044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8011'. [ 1187.363126][T31080] lo speed is unknown, defaulting to 1000 [ 1187.467448][T31082] lo speed is unknown, defaulting to 1000 [ 1187.837265][T31087] delete_channel: no stack [ 1187.846250][T31087] delete_channel: no stack [ 1188.289857][T31094] ================================================================== [ 1188.297960][T31094] BUG: KCSAN: data-race in touch_atime / touch_atime [ 1188.304730][T31094] [ 1188.307053][T31094] write to 0xffff888138e9d830 of 4 bytes by task 31093 on cpu 0: [ 1188.314850][T31094] touch_atime+0x1d7/0x330 [ 1188.319271][T31094] shmem_file_read_iter+0x477/0x540 [ 1188.324468][T31094] copy_splice_read+0x471/0x6c0 [ 1188.329311][T31094] splice_direct_to_actor+0x28f/0x670 [ 1188.334693][T31094] do_splice_direct+0x119/0x1a0 [ 1188.339536][T31094] do_sendfile+0x382/0x650 [ 1188.343945][T31094] __x64_sys_sendfile64+0x105/0x150 [ 1188.349138][T31094] x64_sys_call+0x2dc4/0x3020 [ 1188.353813][T31094] do_syscall_64+0x12c/0x370 [ 1188.358401][T31094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.364299][T31094] [ 1188.366608][T31094] read to 0xffff888138e9d830 of 4 bytes by task 31094 on cpu 1: [ 1188.374226][T31094] touch_atime+0x16c/0x330 [ 1188.378633][T31094] shmem_file_read_iter+0x477/0x540 [ 1188.383821][T31094] copy_splice_read+0x471/0x6c0 [ 1188.388664][T31094] splice_direct_to_actor+0x28f/0x670 [ 1188.394032][T31094] do_splice_direct+0x119/0x1a0 [ 1188.398869][T31094] do_sendfile+0x382/0x650 [ 1188.403275][T31094] __x64_sys_sendfile64+0x105/0x150 [ 1188.408467][T31094] x64_sys_call+0x2dc4/0x3020 [ 1188.413568][T31094] do_syscall_64+0x12c/0x370 [ 1188.418161][T31094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.424050][T31094] [ 1188.426365][T31094] value changed: 0x368d63b1 -> 0x3725fa31 [ 1188.432067][T31094] [ 1188.434381][T31094] Reported by Kernel Concurrency Sanitizer on: [ 1188.440524][T31094] CPU: 1 UID: 0 PID: 31094 Comm: syz.1.8026 Tainted: G W syzkaller #0 PREEMPT(full) [ 1188.451449][T31094] Tainted: [W]=WARN [ 1188.455237][T31094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1188.465291][T31094] ==================================================================