(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000340)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fadb5822c0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x10000) 23:14:06 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000340)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fadb5822c0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x10000) 23:14:06 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581801, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="840100001a0001000000000000000000ac1414aa000000100000000000000000e00000021300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d636500"/316], 0x184}}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220200, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/69, 0x100}) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) 23:14:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581801, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="840100001a0001000000000000000000ac1414aa000000100000000000000000e00000021300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d636500"/316], 0x184}}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220200, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/69, 0x100}) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) [ 537.219487][T27226] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.232653][T27224] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 537.247100][T27224] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:14:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581801, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="840100001a0001000000000000000000ac1414aa000000100000000000000000e00000021300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d636500"/316], 0x184}}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220200, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/69, 0x100}) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) [ 537.302866][T27229] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. 23:14:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581801, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="840100001a0001000000000000000000ac1414aa000000100000000000000000e00000021300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d636500"/316], 0x184}}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220200, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/69, 0x100}) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) 23:14:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0x66}, [@call={0x25}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 23:14:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0x66}, [@call={0x25}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 23:14:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0x66}, [@call={0x25}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 23:14:07 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6513}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 23:14:07 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581801, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="840100001a0001000000000000000000ac1414aa000000100000000000000000e00000021300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d636500"/316], 0x184}}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220200, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/69, 0x100}) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) 23:14:07 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000340)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fadb5822c0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r4, 0x0, 0x10000) 23:14:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0x66}, [@call={0x25}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 23:14:07 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6513}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 23:14:07 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6513}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 23:14:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2e9200", 0x54, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000007f, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x8, 0x3}, @mss={0x2, 0x5}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x3, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 23:14:07 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6513}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) [ 538.127301][T27252] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:14:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2e9200", 0x54, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000007f, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x8, 0x3}, @mss={0x2, 0x5}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x3, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) [ 538.191405][T27258] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:14:08 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x581801, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="840100001a0001000000000000000000ac1414aa000000100000000000000000e00000021300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861312d636500"/316], 0x184}}, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220200, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/69, 0x100}) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x8bd9e}], 0x1, 0x0, 0x1f4}, 0x700) 23:14:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2e9200", 0x54, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000007f, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x8, 0x3}, @mss={0x2, 0x5}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x3, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 23:14:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bfff"], 0xdc}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 23:14:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000380)) [ 538.969183][T27262] __nla_validate_parse: 2 callbacks suppressed [ 538.969197][T27262] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 538.974973][T27264] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:14:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000380)) 23:14:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2e9200", 0x54, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000007f, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x8, 0x3}, @mss={0x2, 0x5}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x3, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 23:14:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000380)) [ 539.042771][T27272] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:14:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000380)) 23:14:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bfff"], 0xdc}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 23:14:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000380)) 23:14:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 23:14:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:14:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000380)) 23:14:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 23:14:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000380)) 23:14:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 539.923897][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 539.923928][ T39] audit: type=1804 audit(1647990849.508:166590): pid=27282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir694494776/syzkaller.VMOeZA/165/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 23:14:09 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x103) 23:14:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 23:14:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bfff"], 0xdc}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 23:14:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:14:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0xfffffffffffffffe}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001580)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 23:14:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611244000000000061138c0000000000bf200000000000007600000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff06006706000002000000070600000e050000bf050000000000002d65000000000000650700000200000007070000310000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000022a4f0432631c31f660fff44c5c702520eca2fea093d9adcc1be5441b59b3e4ec15ababdfa556910ab5e7a182c3658d0e4a4857cb0367fb3311b0ac15a2aca70ec8d472d25654526c003a23b5099953c6959cf7048c184ab35338bd251c8d7027bc969b8b91a819018a0ab4567228574822035259b0ffd625e0c760e749bcdce074bb2304ea873742bdf6d6bb411c791acaf54427fef09480cd4b71438795b3be8f01dbf7cd851f23f5bcf5c52a5e74a97826e26e22aa61e0b951dfbdf7f27575589738e9ab5492c6b8650ebe8c4692d6dbbc930068dc9feeeb62b42570900062b5ecda14e86da51ba97053e31ad67c18ce765b3da5c65b1716709652c82f0051952426c782e39fbb99706ffd44fe34da5581361b54f7f435fce789ee2aedd311535247d39681670b6c4d7d6d925bba73aba3083767298033ff03a5a9ff138a1a0cde40a14df74745f83690006967906fcefbcc9022453aa983f62e02a30e8b1be4ec82ab6a86db9569defbea8e72297ca0ae16006472a573e84b90c6bc3f46b53812b840fe1ce2890ab51b9a74655d08d5ea386a7abeed2183c7bb82a164aed332a5fd545965487e3f18b8114e04efa45a62af5027450528b700f5080935634db2de6b57b283e61e38f6561dfbc5b2a100efcc3229726f5490d6ee25e69d248f4a375ad777d9c62048fadcbef67f8a98e4905763fe14217966305ace5fe5e64b5e05f101494bf540a2ecb4438e3fb40497429f4d06034ecd27d9dc884e2007f70028bd946a5c7d242828a2023f7558e71ece18f527bd45ec9a737365bcf56f03938941bc913b464d14501fc4c168dc183fcba09398528bf13c0b079a348df3b6a9efffd4217314f98f86f1cb783241b2170f62e4f673147d5ee6986faef150c9926ffb5e1a25ad3eed3b4bc6028469f3741d39b87e1fb6a17b567f567c57b205eb9e7be62ef7f3583c1556392091bd86c8214482471ed72a38f5ebaab58227f3cd5fc26d3891f61b06477a9e58c61181efd3dcff144844e863a6bcda63c846cdd77ad8a72a32af404d9e870e9a153955f89ccfcf"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:14:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 23:14:09 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001b00)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x28}], 0x1}, 0x0) 23:14:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c746572220000000000000000000000000000000000000000000000000002"], 0x48) [ 540.292391][ T39] audit: type=1804 audit(1647990849.878:166591): pid=27302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir694494776/syzkaller.VMOeZA/166/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 23:14:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c746572220000000000000000000000000000000000000000000000000002"], 0x48) 23:14:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001b00)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x28}], 0x1}, 0x0) 23:14:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bfff"], 0xdc}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 23:14:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c746572220000000000000000000000000000000000000000000000000002"], 0x48) 23:14:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001b00)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x28}], 0x1}, 0x0) 23:14:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001b00)={0x28, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0xf, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x28}], 0x1}, 0x0) 23:14:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="66696c746572220000000000000000000000000000000000000000000000000002"], 0x48) 23:14:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 540.704292][ T39] audit: type=1804 audit(1647990850.288:166592): pid=27337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir694494776/syzkaller.VMOeZA/167/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 23:14:10 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0xe, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9d594813"}}) 23:14:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) 23:14:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0xa, 0xb05, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 23:14:10 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0xa, 0xb05, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 23:14:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0xa, 0xb05, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 23:14:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0xa, 0xb05, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 23:14:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') 23:14:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8101001001"], 0x20) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:14:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 23:14:10 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:14:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 23:14:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') 23:14:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 23:14:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 23:14:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') 23:14:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) pwritev(r1, &(0x7f0000000000), 0x0, 0x401, 0x7fffffff) 23:14:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') 23:14:11 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:14:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) pwritev(r1, &(0x7f0000000000), 0x0, 0x401, 0x7fffffff) 23:14:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x48, 0x12, 0x202, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x24}, [@IFLA_WEIGHT={0x8, 0xf, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff800}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4ab065cfdf847d2eb5ba242d80080444b95420a1b4bd0e6c38df554f56401e3f42959eb02457771f7c4344b154897941cfa253c2a2356b032ef4acc4a647f186", @ANYRES16=r5, @ANYBLOB="1300000000000000df25010000000c00030036c48bf0000000000d7299812bd41248699e6b5295b316a5aee7df06e165f7b30100f5501928920914171d1c61a4735bd9cd8c01eeda46adca0290da74c79b1c235716af0d17307f14d2b414000000f2e1f1f2ca08f293acd1b7b1000000000000000000000000000000475726986c95871c07dd91b411e95860032016fdc13d3c7a8b805617c7ecaccc0a6c3ddc29ab69739940838ed3195bfbc4121309628d98402a0615291b408ff22434147bfb202aeee0661b95b4ac6fc25d8b96929c40ec6ef0e55ce5c1"], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x8080) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x300, {0x0, 0x0, 0x0, 0x0, 0x12a00}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:14:11 executing program 1: io_setup(0x7, &(0x7f0000000180)=0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x5, 0x0, r1, 0x0}]) 23:14:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) pwritev(r1, &(0x7f0000000000), 0x0, 0x401, 0x7fffffff) 23:14:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) pwritev(r1, &(0x7f0000000000), 0x0, 0x401, 0x7fffffff) 23:14:11 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:14:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x48, 0x12, 0x202, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x24}, [@IFLA_WEIGHT={0x8, 0xf, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff800}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4ab065cfdf847d2eb5ba242d80080444b95420a1b4bd0e6c38df554f56401e3f42959eb02457771f7c4344b154897941cfa253c2a2356b032ef4acc4a647f186", @ANYRES16=r5, @ANYBLOB="1300000000000000df25010000000c00030036c48bf0000000000d7299812bd41248699e6b5295b316a5aee7df06e165f7b30100f5501928920914171d1c61a4735bd9cd8c01eeda46adca0290da74c79b1c235716af0d17307f14d2b414000000f2e1f1f2ca08f293acd1b7b1000000000000000000000000000000475726986c95871c07dd91b411e95860032016fdc13d3c7a8b805617c7ecaccc0a6c3ddc29ab69739940838ed3195bfbc4121309628d98402a0615291b408ff22434147bfb202aeee0661b95b4ac6fc25d8b96929c40ec6ef0e55ce5c1"], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x8080) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x300, {0x0, 0x0, 0x0, 0x0, 0x12a00}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:14:12 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:14:12 executing program 1: io_setup(0x7, &(0x7f0000000180)=0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x5, 0x0, r1, 0x0}]) 23:14:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x48, 0x12, 0x202, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x24}, [@IFLA_WEIGHT={0x8, 0xf, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff800}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4ab065cfdf847d2eb5ba242d80080444b95420a1b4bd0e6c38df554f56401e3f42959eb02457771f7c4344b154897941cfa253c2a2356b032ef4acc4a647f186", @ANYRES16=r5, @ANYBLOB="1300000000000000df25010000000c00030036c48bf0000000000d7299812bd41248699e6b5295b316a5aee7df06e165f7b30100f5501928920914171d1c61a4735bd9cd8c01eeda46adca0290da74c79b1c235716af0d17307f14d2b414000000f2e1f1f2ca08f293acd1b7b1000000000000000000000000000000475726986c95871c07dd91b411e95860032016fdc13d3c7a8b805617c7ecaccc0a6c3ddc29ab69739940838ed3195bfbc4121309628d98402a0615291b408ff22434147bfb202aeee0661b95b4ac6fc25d8b96929c40ec6ef0e55ce5c1"], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x8080) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x300, {0x0, 0x0, 0x0, 0x0, 0x12a00}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:14:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x48, 0x12, 0x202, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x24}, [@IFLA_WEIGHT={0x8, 0xf, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff800}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4ab065cfdf847d2eb5ba242d80080444b95420a1b4bd0e6c38df554f56401e3f42959eb02457771f7c4344b154897941cfa253c2a2356b032ef4acc4a647f186", @ANYRES16=r5, @ANYBLOB="1300000000000000df25010000000c00030036c48bf0000000000d7299812bd41248699e6b5295b316a5aee7df06e165f7b30100f5501928920914171d1c61a4735bd9cd8c01eeda46adca0290da74c79b1c235716af0d17307f14d2b414000000f2e1f1f2ca08f293acd1b7b1000000000000000000000000000000475726986c95871c07dd91b411e95860032016fdc13d3c7a8b805617c7ecaccc0a6c3ddc29ab69739940838ed3195bfbc4121309628d98402a0615291b408ff22434147bfb202aeee0661b95b4ac6fc25d8b96929c40ec6ef0e55ce5c1"], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x8080) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x300, {0x0, 0x0, 0x0, 0x0, 0x12a00}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:14:12 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:14:12 executing program 1: io_setup(0x7, &(0x7f0000000180)=0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x5, 0x0, r1, 0x0}]) 23:14:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x48, 0x12, 0x202, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x24}, [@IFLA_WEIGHT={0x8, 0xf, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff800}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4ab065cfdf847d2eb5ba242d80080444b95420a1b4bd0e6c38df554f56401e3f42959eb02457771f7c4344b154897941cfa253c2a2356b032ef4acc4a647f186", @ANYRES16=r5, @ANYBLOB="1300000000000000df25010000000c00030036c48bf0000000000d7299812bd41248699e6b5295b316a5aee7df06e165f7b30100f5501928920914171d1c61a4735bd9cd8c01eeda46adca0290da74c79b1c235716af0d17307f14d2b414000000f2e1f1f2ca08f293acd1b7b1000000000000000000000000000000475726986c95871c07dd91b411e95860032016fdc13d3c7a8b805617c7ecaccc0a6c3ddc29ab69739940838ed3195bfbc4121309628d98402a0615291b408ff22434147bfb202aeee0661b95b4ac6fc25d8b96929c40ec6ef0e55ce5c1"], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x8080) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x300, {0x0, 0x0, 0x0, 0x0, 0x12a00}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:14:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x48, 0x12, 0x202, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x24}, [@IFLA_WEIGHT={0x8, 0xf, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff800}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4ab065cfdf847d2eb5ba242d80080444b95420a1b4bd0e6c38df554f56401e3f42959eb02457771f7c4344b154897941cfa253c2a2356b032ef4acc4a647f186", @ANYRES16=r5, @ANYBLOB="1300000000000000df25010000000c00030036c48bf0000000000d7299812bd41248699e6b5295b316a5aee7df06e165f7b30100f5501928920914171d1c61a4735bd9cd8c01eeda46adca0290da74c79b1c235716af0d17307f14d2b414000000f2e1f1f2ca08f293acd1b7b1000000000000000000000000000000475726986c95871c07dd91b411e95860032016fdc13d3c7a8b805617c7ecaccc0a6c3ddc29ab69739940838ed3195bfbc4121309628d98402a0615291b408ff22434147bfb202aeee0661b95b4ac6fc25d8b96929c40ec6ef0e55ce5c1"], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x8080) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x300, {0x0, 0x0, 0x0, 0x0, 0x12a00}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:14:13 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:14:13 executing program 1: io_setup(0x7, &(0x7f0000000180)=0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x5, 0x0, r1, 0x0}]) 23:14:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x48, 0x12, 0x202, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x1, 0x24}, [@IFLA_WEIGHT={0x8, 0xf, 0x800}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffff800}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4ab065cfdf847d2eb5ba242d80080444b95420a1b4bd0e6c38df554f56401e3f42959eb02457771f7c4344b154897941cfa253c2a2356b032ef4acc4a647f186", @ANYRES16=r5, @ANYBLOB="1300000000000000df25010000000c00030036c48bf0000000000d7299812bd41248699e6b5295b316a5aee7df06e165f7b30100f5501928920914171d1c61a4735bd9cd8c01eeda46adca0290da74c79b1c235716af0d17307f14d2b414000000f2e1f1f2ca08f293acd1b7b1000000000000000000000000000000475726986c95871c07dd91b411e95860032016fdc13d3c7a8b805617c7ecaccc0a6c3ddc29ab69739940838ed3195bfbc4121309628d98402a0615291b408ff22434147bfb202aeee0661b95b4ac6fc25d8b96929c40ec6ef0e55ce5c1"], 0x20}, 0x1, 0x0, 0x0, 0x28944}, 0x8080) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x300, {0x0, 0x0, 0x0, 0x0, 0x12a00}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:14:13 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0xfffffffffffffffc) 23:14:13 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 23:14:13 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0xfffffffffffffffc) 23:14:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 23:14:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 23:14:14 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0xfffffffffffffffc) 23:14:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 23:14:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x2, @remote}, 0x10, 0x0}}], 0x1, 0x0) 23:14:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 23:14:14 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0xfffffffffffffffc) 23:14:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1000, 0x4) 23:14:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x3) 23:14:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0xffffff1f, 0x40, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x6}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x58}}, 0x0) 23:14:14 executing program 2: syz_emit_ethernet(0x2c6, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0x290, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce540b259808000000000002623493b87aafaffffffffffffff230a2472eefa45ad9657926974f68a9426152b9fb6e22634348202b38e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a1811"}, {0x0, 0x1, "ffffefffc5dcf62ae9db598c"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c027247d611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1b2399907cbaa39eb8164e240069f656d3a05fecf894222a1411bf50900c6f46cd5adcab2b90aa23e667016effc5dc49dfb58d893100"}, {0x0, 0xd, "b2983cd6569b1fd77921b6d1fe14db4ad8f2f4f5a6a19006913b48aabf840689f1a9f4a73265018644e28ca709ebd97347f34a2c9a5fd353b64728a136d0b46f0fd042c8caf90fa562ba86d1462205a1f25eb4582f6c7126000000000000000000000000000001"}, {0x1, 0x0, "bf83154139"}]}}}}}}, 0x0) 23:14:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delvlan={0x18, 0x71, 0x1}, 0x18}}, 0x0) [ 544.872624][T27480] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) 23:14:14 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000900)={0x0, 0x0, 0x0, 'queue1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 23:14:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0xffffff1f, 0x40, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x6}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x58}}, 0x0) 23:14:14 executing program 2: syz_emit_ethernet(0x2c6, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0x290, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce540b259808000000000002623493b87aafaffffffffffffff230a2472eefa45ad9657926974f68a9426152b9fb6e22634348202b38e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a1811"}, {0x0, 0x1, "ffffefffc5dcf62ae9db598c"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c027247d611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1b2399907cbaa39eb8164e240069f656d3a05fecf894222a1411bf50900c6f46cd5adcab2b90aa23e667016effc5dc49dfb58d893100"}, {0x0, 0xd, "b2983cd6569b1fd77921b6d1fe14db4ad8f2f4f5a6a19006913b48aabf840689f1a9f4a73265018644e28ca709ebd97347f34a2c9a5fd353b64728a136d0b46f0fd042c8caf90fa562ba86d1462205a1f25eb4582f6c7126000000000000000000000000000001"}, {0x1, 0x0, "bf83154139"}]}}}}}}, 0x0) 23:14:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delvlan={0x18, 0x71, 0x1}, 0x18}}, 0x0) 23:14:14 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00./']}) 23:14:14 executing program 2: syz_emit_ethernet(0x2c6, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0x290, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce540b259808000000000002623493b87aafaffffffffffffff230a2472eefa45ad9657926974f68a9426152b9fb6e22634348202b38e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a1811"}, {0x0, 0x1, "ffffefffc5dcf62ae9db598c"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c027247d611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1b2399907cbaa39eb8164e240069f656d3a05fecf894222a1411bf50900c6f46cd5adcab2b90aa23e667016effc5dc49dfb58d893100"}, {0x0, 0xd, "b2983cd6569b1fd77921b6d1fe14db4ad8f2f4f5a6a19006913b48aabf840689f1a9f4a73265018644e28ca709ebd97347f34a2c9a5fd353b64728a136d0b46f0fd042c8caf90fa562ba86d1462205a1f25eb4582f6c7126000000000000000000000000000001"}, {0x1, 0x0, "bf83154139"}]}}}}}}, 0x0) [ 544.931376][T27491] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) 23:14:14 executing program 2: syz_emit_ethernet(0x2c6, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00', 0x290, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce540b259808000000000002623493b87aafaffffffffffffff230a2472eefa45ad9657926974f68a9426152b9fb6e22634348202b38e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a1811"}, {0x0, 0x1, "ffffefffc5dcf62ae9db598c"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c027247d611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1b2399907cbaa39eb8164e240069f656d3a05fecf894222a1411bf50900c6f46cd5adcab2b90aa23e667016effc5dc49dfb58d893100"}, {0x0, 0xd, "b2983cd6569b1fd77921b6d1fe14db4ad8f2f4f5a6a19006913b48aabf840689f1a9f4a73265018644e28ca709ebd97347f34a2c9a5fd353b64728a136d0b46f0fd042c8caf90fa562ba86d1462205a1f25eb4582f6c7126000000000000000000000000000001"}, {0x1, 0x0, "bf83154139"}]}}}}}}, 0x0) 23:14:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delvlan={0x18, 0x71, 0x1}, 0x18}}, 0x0) 23:14:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0xffffff1f, 0x40, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x6}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x58}}, 0x0) 23:14:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delvlan={0x18, 0x71, 0x1}, 0x18}}, 0x0) 23:14:14 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) [ 544.993097][T27504] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) 23:14:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62405}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) 23:14:14 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x58, 0x10, 0xffffff1f, 0x40, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x6}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x58}}, 0x0) 23:14:14 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62405}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) 23:14:14 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) [ 545.074715][T27516] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) 23:14:14 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62405}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) 23:14:14 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0) 23:14:14 executing program 3: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0xdd7, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000dd000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 23:14:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62405}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) 23:14:14 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "be82faa38bfab42643b5f0f1e403a8547d85c1febe3f303c28f3ac1ff2ac3c537ead260646612cb8d0b29611259612c07742f30480bb69b3ec254a78d1523900"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) 23:14:14 executing program 3: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0xdd7, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000dd000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 23:14:14 executing program 3: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0xdd7, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000dd000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 23:14:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5423, &(0x7f0000000240)=0x8) 23:14:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 23:14:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0) 23:14:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 23:14:15 executing program 3: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0xdd7, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000dd000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 23:14:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5423, &(0x7f0000000240)=0x8) 23:14:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 23:14:15 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r0, &(0x7f00000000c0)) 23:14:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5423, &(0x7f0000000240)=0x8) 23:14:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x501, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x6}]}, 0x28}}, 0x0) [ 546.073260][ T39] audit: type=1400 audit(1647990855.658:166593): avc: denied { read } for pid=27562 comm="syz-executor.3" name="uhid" dev="devtmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 546.099368][ T39] audit: type=1400 audit(1647990855.658:166594): avc: denied { open } for pid=27562 comm="syz-executor.3" path="/dev/uhid" dev="devtmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 546.105555][T27570] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 546.142939][T27570] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 23:14:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0) 23:14:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 23:14:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5423, &(0x7f0000000240)=0x8) 23:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:16 executing program 1: syz_clone(0x60006000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 23:14:16 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x101, 0x4) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 23:14:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 547.202611][ T39] audit: type=1400 audit(1647990856.788:166595): avc: denied { search } for pid=3110 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 23:14:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3}]}}}}}}}, 0x0) 23:14:17 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x101, 0x4) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 23:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:17 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x101, 0x4) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 23:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:14:17 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x1000000000003e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x101, 0x4) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 23:14:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x580000b, 0x12, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1a, 0x0, 0x0) 23:14:17 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@fsname={'fsname', 0x3d, '\x00'}}]}}) 23:14:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x580000b, 0x12, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1a, 0x0, 0x0) 23:14:17 executing program 1: r0 = epoll_create(0x1) r1 = syz_usbip_server_init(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10000000}) 23:14:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x580000b, 0x12, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1a, 0x0, 0x0) 23:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x580000b, 0x12, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1a, 0x0, 0x0) 23:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000740)={'nat\x00', 0x4, "2543f482"}, &(0x7f0000000000)=0x2c) 23:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000740)={'nat\x00', 0x4, "2543f482"}, &(0x7f0000000000)=0x2c) 23:14:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x15, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000001c0)="9d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) 23:14:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000740)={'nat\x00', 0x4, "2543f482"}, &(0x7f0000000000)=0x2c) 23:14:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = getpgrp(0x0) tgkill(r1, r2, 0x0) 23:14:18 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 23:14:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000740)={'nat\x00', 0x4, "2543f482"}, &(0x7f0000000000)=0x2c) 23:14:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10fbd6000000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "7f7845f6baaf52098ff67180069d44372f0016"}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1) 23:14:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r0, 0xf, 0x20000000) 23:14:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r0, 0xf, 0x20000000) 23:14:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = getpgrp(0x0) tgkill(r1, r2, 0x0) 23:14:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10fbd6000000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "7f7845f6baaf52098ff67180069d44372f0016"}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1) 23:14:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r0, 0xf, 0x20000000) 23:14:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = getpgrp(0x0) tgkill(r1, r2, 0x0) 23:14:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setstatus(r0, 0xf, 0x20000000) 23:14:19 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 23:14:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10fbd6000000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "7f7845f6baaf52098ff67180069d44372f0016"}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1) 23:14:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = getpgrp(0x0) tgkill(r1, r2, 0x0) 23:14:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 23:14:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10fbd6000000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "7f7845f6baaf52098ff67180069d44372f0016"}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1) 23:14:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10fbd6000000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "7f7845f6baaf52098ff67180069d44372f0016"}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1) 23:14:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = getpgrp(0x0) tgkill(r1, r2, 0x0) 23:14:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 23:14:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10fbd6000000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "7f7845f6baaf52098ff67180069d44372f0016"}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1) 23:14:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = getpgrp(0x0) tgkill(r1, r2, 0x0) 23:14:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = getpgrp(0x0) tgkill(r1, r2, 0x0) 23:14:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 23:14:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "006d10fbd6000000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "7f7845f6baaf52098ff67180069d44372f0016"}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/171, 0xab}], 0x1) 23:14:20 executing program 0: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f0000000280)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000009100)={0x2, &(0x7f00000090c0)=[{0x81, 0x0, 0xf1}, {0x6, 0x0, 0x0, 0x4}]}) io_setup(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f000000a800), 0x0, 0x0) 23:14:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 550.820761][ T39] audit: type=1326 audit(1647990860.408:166596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff383496049 code=0x0 [ 550.921331][ T39] audit: type=1400 audit(1647990860.508:166597): avc: denied { read } for pid=27763 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 550.945666][ T39] audit: type=1400 audit(1647990860.508:166598): avc: denied { open } for pid=27763 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 23:14:21 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 23:14:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 23:14:21 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 23:14:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 23:14:21 executing program 0: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f0000000280)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000009100)={0x2, &(0x7f00000090c0)=[{0x81, 0x0, 0xf1}, {0x6, 0x0, 0x0, 0x4}]}) io_setup(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f000000a800), 0x0, 0x0) 23:14:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 551.760924][ T39] audit: type=1326 audit(1647990861.348:166599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27822 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff383496049 code=0x0 23:14:21 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc098f912, 0x0, "e452182303fbb657393fbc8d9897bd207b07ae3218da48bbc6d361524e60d483"}) 23:14:21 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc098f912, 0x0, "e452182303fbb657393fbc8d9897bd207b07ae3218da48bbc6d361524e60d483"}) 23:14:22 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc098f912, 0x0, "e452182303fbb657393fbc8d9897bd207b07ae3218da48bbc6d361524e60d483"}) 23:14:22 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) [ 552.477037][ T39] audit: type=1400 audit(1647990862.058:166600): avc: denied { read } for pid=27833 comm="syz-executor.3" name="autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 552.501358][ C1] vkms_vblank_simulate: vblank timer overrun 23:14:22 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc098f912, 0x0, "e452182303fbb657393fbc8d9897bd207b07ae3218da48bbc6d361524e60d483"}) 23:14:22 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) [ 552.508173][ T39] audit: type=1400 audit(1647990862.058:166601): avc: denied { open } for pid=27833 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 552.536939][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.544696][ T39] audit: type=1400 audit(1647990862.068:166602): avc: denied { ioctl } for pid=27833 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=103 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 552.575618][ C1] vkms_vblank_simulate: vblank timer overrun 23:14:22 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="050f1d00031d"], 0x2, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x41, &(0x7f0000000400)=@string={0x41, 0x3, "66cb2395ad50f5df87aec78d66d5332c3f4da8588c275675d5ec15e50529f4c9fd21d17ec8530351bc09ae357d351da5075415eccbad9f4871de9fd9b959c1"}}]}) 23:14:22 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 23:14:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac18fe08"}}) 23:14:22 executing program 0: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f0000000280)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000009100)={0x2, &(0x7f00000090c0)=[{0x81, 0x0, 0xf1}, {0x6, 0x0, 0x0, 0x4}]}) io_setup(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f000000a800), 0x0, 0x0) 23:14:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac18fe08"}}) 23:14:22 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) [ 552.729160][ T39] audit: type=1326 audit(1647990862.318:166603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27845 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff383496049 code=0x0 23:14:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000480)='GPL\x00', 0x4, 0xa0, &(0x7f00000002c0)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_allocate_inode\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="02fbddfe272cfe64500196db049769e6548294b3f697"], 0x16) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfef0) 23:14:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac18fe08"}}) 23:14:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000000a) 23:14:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ac18fe08"}}) 23:14:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000480)='GPL\x00', 0x4, 0xa0, &(0x7f00000002c0)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_allocate_inode\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="02fbddfe272cfe64500196db049769e6548294b3f697"], 0x16) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfef0) [ 553.242942][ T39] audit: type=1800 audit(1647990862.828:166604): pid=27861 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1167 res=0 errno=0 23:14:23 executing program 2: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000", 0xfffff, 0xfffffffffffffffc) 23:14:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1={0xff, 0x5}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x44}}, 0x0) 23:14:23 executing program 0: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f0000000280)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000009100)={0x2, &(0x7f00000090c0)=[{0x81, 0x0, 0xf1}, {0x6, 0x0, 0x0, 0x4}]}) io_setup(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f000000a800), 0x0, 0x0) 23:14:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000480)='GPL\x00', 0x4, 0xa0, &(0x7f00000002c0)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_allocate_inode\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="02fbddfe272cfe64500196db049769e6548294b3f697"], 0x16) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfef0) 23:14:23 executing program 2: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000", 0xfffff, 0xfffffffffffffffc) 23:14:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000480)='GPL\x00', 0x4, 0xa0, &(0x7f00000002c0)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_allocate_inode\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f0000002a00)=ANY=[@ANYBLOB="02fbddfe272cfe64500196db049769e6548294b3f697"], 0x16) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfef0) 23:14:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1={0xff, 0x5}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x44}}, 0x0) [ 553.711277][T27867] MPTCP: kernel_bind error, err=-22 [ 553.737281][ T39] audit: type=1326 audit(1647990863.318:166605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27868 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff383496049 code=0x0 23:14:23 executing program 2: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000", 0xfffff, 0xfffffffffffffffc) 23:14:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1={0xff, 0x5}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x44}}, 0x0) [ 553.770489][T27875] MPTCP: kernel_bind error, err=-22 23:14:24 executing program 2: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000", 0xfffff, 0xfffffffffffffffc) 23:14:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 23:14:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1={0xff, 0x5}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x44}}, 0x0) 23:14:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) [ 553.801306][T27879] MPTCP: kernel_bind error, err=-22 [ 554.715022][ T39] audit: type=1400 audit(1647990864.298:166606): avc: denied { read write } for pid=27883 comm="syz-executor.3" name="rdma_cm" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.718195][T27884] MPTCP: kernel_bind error, err=-22 23:14:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) [ 554.720327][ T39] audit: type=1400 audit(1647990864.298:166607): avc: denied { open } for pid=27883 comm="syz-executor.3" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 23:14:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 23:14:24 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000006380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 23:14:24 executing program 1: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) 23:14:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 23:14:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) [ 554.872808][ T39] audit: type=1400 audit(1647990864.458:166608): avc: denied { unmount } for pid=27891 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 23:14:24 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) 23:14:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 0: socketpair(0xa, 0x3, 0x3a, &(0x7f0000000280)) 23:14:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303001003030303030303134303030f12c757365725f69643d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,default_permissions,euid<', @ANYRESDEC=r4, @ANYBLOB=',seclabel,subj_role=\\,fsmagic=0x0000000100000000,obj_user=#\'[^/,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x401, 0x0, 0x3, 0x80000001}, {0x1, 0x1, 0x80, 0x7fffffff}, {0xbd5, 0x1f, 0x7, 0x1}, {0x200, 0x2, 0x5, 0x80000000}, {0x8, 0x1, 0x1, 0x4}, {0x0, 0x42, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000000c0)={0x0}) unshare(0x8000200) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/131, 0x83}], 0x1, 0x4, 0x1) r9 = mq_open(&(0x7f0000000000)='m$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={r8, 0x3, r1, 0x7}) mq_getsetattr(r9, 0x0, &(0x7f00000001c0)) 23:14:24 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) 23:14:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) 23:14:24 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) 23:14:24 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000004780), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000047c0)={0x0, "dd18d7de4ac4ac70733cc8100d0a7cec2d33560d4edeedcac8226a2efa469b36abc117f99b0c696b9f22ecec15830f0230b86fb7bacfbdbc912fc8fac041926f", {0xbb3a}}) 23:14:24 executing program 3: gettid() syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="cf33fb1c69e3aacfcb6e86e89a21c5b8bf43964aaff17e030652841cd323498038b56287b77a4bfc57ba61399403814befa246092b2aab2a71") r0 = syz_clone(0x40002000, &(0x7f0000000180)="f96c19979fda3885194379872afa6c1a25da", 0x12, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="8e4ba9b1f2d09df5faf56d03599e0aef8cfb6b1c79a5e5f0eb3e73898689c46ecf646da33983ba645990f361a550cb1bf90ab99ddd1caf9dd6eb65156f0b282a82f1bace23dcdb758f15fa2e402f3c64cf086e9c") syz_open_procfs$namespace(r0, 0x0) 23:14:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) 23:14:24 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x11a1002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000001240)='<', 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = dup(r0) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TCXONC(r1, 0x5437, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 23:14:24 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) 23:14:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x5c}}, 0x0) 23:14:24 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:14:24 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x2007ffe) r1 = open(&(0x7f0000000200)='./bus\x00', 0xc6002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = gettid() openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) pipe(&(0x7f0000000280)) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xba, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0xba, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 23:14:24 executing program 0: r0 = syz_io_uring_setup(0x2d6d, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001a80)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 23:14:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0200", 0x6}]) 23:14:24 executing program 0: r0 = syz_io_uring_setup(0x2d6d, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001a80)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 23:14:24 executing program 0: r0 = syz_io_uring_setup(0x2d6d, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001a80)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 23:14:24 executing program 0: r0 = syz_io_uring_setup(0x2d6d, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001a80)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 23:14:24 executing program 0: r0 = syz_io_uring_setup(0x2d6d, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001a80)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) [ 555.267600][T18844] Bluetooth: hci3: command 0x0406 tx timeout 23:14:25 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:14:25 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x2007ffe) r1 = open(&(0x7f0000000200)='./bus\x00', 0xc6002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = gettid() openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) pipe(&(0x7f0000000280)) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xba, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0xba, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 23:14:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0200", 0x6}]) 23:14:25 executing program 0: r0 = syz_io_uring_setup(0x2d6d, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001a80)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 23:14:25 executing program 0: r0 = syz_io_uring_setup(0x2d6d, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001a80)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 23:14:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0200", 0x6}]) 23:14:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0200", 0x6}]) 23:14:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0200", 0x6}]) 23:14:25 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:14:25 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x2007ffe) r1 = open(&(0x7f0000000200)='./bus\x00', 0xc6002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = gettid() openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) pipe(&(0x7f0000000280)) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xba, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0xba, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 23:14:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0200", 0x6}]) 23:14:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xa, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x40000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0200", 0x6}]) 23:14:25 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) recvmmsg(r0, &(0x7f0000000e80), 0x3fffffffffffd56, 0x10060, 0x0) 23:14:25 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="240000001a005f3814ecf4070009030180002000000000000000000008000f0040000000", 0x24) 23:14:25 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) recvmmsg(r0, &(0x7f0000000e80), 0x3fffffffffffd56, 0x10060, 0x0) 23:14:25 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="240000001a005f3814ecf4070009030180002000000000000000000008000f0040000000", 0x24) 23:14:26 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:14:26 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x2007ffe) r1 = open(&(0x7f0000000200)='./bus\x00', 0xc6002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = gettid() openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) pipe(&(0x7f0000000280)) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0xba, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0xba, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 23:14:26 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) recvmmsg(r0, &(0x7f0000000e80), 0x3fffffffffffd56, 0x10060, 0x0) 23:14:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="240000001a005f3814ecf4070009030180002000000000000000000008000f0040000000", 0x24) 23:14:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="240000001a005f3814ecf4070009030180002000000000000000000008000f0040000000", 0x24) 23:14:26 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) recvmmsg(r0, &(0x7f0000000e80), 0x3fffffffffffd56, 0x10060, 0x0) 23:14:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 23:14:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 23:14:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, r1, 0x121, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x3}]}]}]}, 0x38}}, 0x0) 23:14:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 23:14:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 23:14:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc1105511, &(0x7f0000000080)=0xb) 23:14:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='^', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, r1, 0x121, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x3}]}]}]}, 0x38}}, 0x0) 23:14:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc1105511, &(0x7f0000000080)=0xb) 23:14:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc1105511, &(0x7f0000000080)=0xb) 23:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, r1, 0x121, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x3}]}]}]}, 0x38}}, 0x0) 23:14:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @dev}, 0x1c) 23:14:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc1105511, &(0x7f0000000080)=0xb) 23:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, r1, 0x121, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x3}]}]}]}, 0x38}}, 0x0) 23:14:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 23:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 23:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 23:14:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 23:14:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:14:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:14:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600010a000000000000000000000000d0"], 0x78}}, 0x0) 23:14:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600010a000000000000000000000000d0"], 0x78}}, 0x0) 23:14:27 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "6aea93", 0x10, 0x21, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 'S,j', 0x0, "a57c0f"}}}}}}}, 0x0) 23:14:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) 23:14:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600010a000000000000000000000000d0"], 0x78}}, 0x0) 23:14:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000e00"}) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 557.534103][ T39] kauditd_printk_skb: 9 callbacks suppressed 23:14:27 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "6aea93", 0x10, 0x21, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 'S,j', 0x0, "a57c0f"}}}}}}}, 0x0) 23:14:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) [ 557.534122][ T39] audit: type=1400 audit(1647990867.118:166618): avc: denied { ioctl } for pid=28112 comm="syz-executor.2" path="/dev/udmabuf" dev="devtmpfs" ino=695 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 23:14:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600010a000000000000000000000000d0"], 0x78}}, 0x0) 23:14:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) 23:14:27 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "6aea93", 0x10, 0x21, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 'S,j', 0x0, "a57c0f"}}}}}}}, 0x0) 23:14:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) 23:14:27 executing program 1: socket(0x0, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xf6e3, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ff99, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400e00000040"], 0xdc}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1ff, 0xffe) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) splice(r2, &(0x7f00000002c0)=0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x6, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x7) 23:14:27 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:14:27 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "6aea93", 0x10, 0x21, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 'S,j', 0x0, "a57c0f"}}}}}}}, 0x0) 23:14:27 executing program 0: r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x98f907, 0x3}) 23:14:27 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup2(r1, r0) 23:14:27 executing program 0: r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x98f907, 0x3}) 23:14:27 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup2(r1, r0) 23:14:27 executing program 0: r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x98f907, 0x3}) 23:14:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup2(r1, r0) 23:14:28 executing program 1: socket(0x0, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xf6e3, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ff99, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400e00000040"], 0xdc}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1ff, 0xffe) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) splice(r2, &(0x7f00000002c0)=0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x6, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x7) 23:14:28 executing program 0: r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x98f907, 0x3}) 23:14:28 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:14:28 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup2(r1, r0) 23:14:28 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:14:28 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@loopback=0x7f000003}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) 23:14:28 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@loopback=0x7f000003}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) 23:14:28 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@loopback=0x7f000003}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) 23:14:29 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@loopback=0x7f000003}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) 23:14:29 executing program 1: socket(0x0, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xf6e3, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ff99, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400e00000040"], 0xdc}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1ff, 0xffe) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) splice(r2, &(0x7f00000002c0)=0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x6, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x7) 23:14:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r0) 23:14:29 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:14:29 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:14:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r0) 23:14:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r0) 23:14:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r0) 23:14:29 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc020660b, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) 23:14:29 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc020660b, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) 23:14:29 executing program 1: socket(0x0, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xf6e3, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ff99, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a01020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400e00000040"], 0xdc}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1ff, 0xffe) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) splice(r2, &(0x7f00000002c0)=0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x6, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x7) 23:14:30 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc020660b, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) 23:14:30 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:14:30 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 23:14:30 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc020660b, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) 23:14:30 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000512a31320732f390000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 560.651315][T28227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 560.662127][T28227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:14:30 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) [ 561.271286][ T39] audit: type=1800 audit(1647990870.858:166619): pid=28232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1155 res=0 errno=0 23:14:31 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000512a31320732f390000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:14:31 executing program 2: lchown(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) [ 561.510663][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 561.523375][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:14:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 23:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2}) 23:14:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 23:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2}) 23:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2}) 23:14:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 23:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2}) 23:14:31 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) 23:14:31 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000512a31320732f390000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:14:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 562.316448][ T39] audit: type=1800 audit(1647990871.898:166620): pid=28256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1157 res=0 errno=0 23:14:31 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) 23:14:31 executing program 2: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) [ 562.354113][T28262] loop0: detected capacity change from 0 to 262160 [ 562.354162][T28263] loop2: detected capacity change from 0 to 262160 [ 562.383236][ T39] audit: type=1400 audit(1647990871.968:166621): avc: denied { mount } for pid=28260 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 562.429145][T28264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 562.444878][ T39] audit: type=1800 audit(1647990871.978:166622): pid=28263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048807 res=0 errno=0 [ 562.458807][T28264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 562.497107][ T39] audit: type=1800 audit(1647990871.988:166623): pid=28262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048809 res=0 errno=0 23:14:32 executing program 2: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) 23:14:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) [ 563.100605][ T39] audit: type=1400 audit(1647990872.688:166624): avc: denied { unmount } for pid=22688 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 23:14:32 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000512a31320732f390000000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:14:32 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) [ 563.230130][T28276] loop2: detected capacity change from 0 to 262160 [ 563.239668][ T39] audit: type=1800 audit(1647990872.828:166625): pid=28274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1142 res=0 errno=0 [ 563.253770][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.279254][ T39] audit: type=1800 audit(1647990872.868:166626): pid=28276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048811 res=0 errno=0 [ 563.279652][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.280361][T28279] loop0: detected capacity change from 0 to 262160 [ 563.310689][ T39] audit: type=1800 audit(1647990872.898:166627): pid=28279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048813 res=0 errno=0 23:14:33 executing program 2: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) 23:14:33 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) [ 564.028058][T28287] loop2: detected capacity change from 0 to 262160 23:14:33 executing program 3: r0 = syz_io_uring_setup(0x3a45, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000654000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x7fbd60b2f35bd77f}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 564.071314][ T39] audit: type=1800 audit(1647990873.658:166628): pid=28287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048815 res=0 errno=0 23:14:33 executing program 3: r0 = syz_io_uring_setup(0x3a45, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000654000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x7fbd60b2f35bd77f}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:14:33 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)='nfsd\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) sendfile(r0, r1, 0x0, 0x8000000a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) eventfd(0x8) [ 564.127148][T28291] loop0: detected capacity change from 0 to 262160 23:14:33 executing program 3: r0 = syz_io_uring_setup(0x3a45, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000654000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x7fbd60b2f35bd77f}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 564.140550][ T39] audit: type=1800 audit(1647990873.728:166629): pid=28295 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1166 res=0 errno=0 23:14:33 executing program 3: r0 = syz_io_uring_setup(0x3a45, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000654000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0x7fbd60b2f35bd77f}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 564.184284][ T39] audit: type=1800 audit(1647990873.768:166630): pid=28291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048817 res=0 errno=0 23:14:33 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) 23:14:34 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) 23:14:34 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) 23:14:34 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) 23:14:34 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x80047453, 0x0) 23:14:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS_MASK={0x4}, @CTA_FILTER={0x4}, @CTA_ZONE={0x6}]}, 0x34}}, 0x0) 23:14:34 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) 23:14:34 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x80047453, 0x0) 23:14:34 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) 23:14:34 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x80047453, 0x0) 23:14:34 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x7f) 23:14:34 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x80047453, 0x0) 23:14:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS_MASK={0x4}, @CTA_FILTER={0x4}, @CTA_ZONE={0x6}]}, 0x34}}, 0x0) 23:14:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 23:14:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004506, 0x0) 23:14:34 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010600)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000140)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000010e00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011200)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x401320}, {&(0x7f0000011300)="00000014000000020c60", 0xa, 0x401380}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}, {&(0x7f0000012e00)="0000000000000000000001000000010000000002000000010000000003000000013c", 0x22, 0xc00000}, {&(0x7f0000014300)="ed4100005cf90100535f010003000000001000000000000002", 0x19, 0x3c01000}, {&(0x7f0000014500)="00000000000000000300000003", 0xd, 0x3c01fe0}], 0x0, &(0x7f0000014900)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 565.218067][T28336] loop3: detected capacity change from 0 to 245791 23:14:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004506, 0x0) [ 565.233959][T28336] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:14:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS_MASK={0x4}, @CTA_FILTER={0x4}, @CTA_ZONE={0x6}]}, 0x34}}, 0x0) [ 565.248322][T28336] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 23:14:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004506, 0x0) [ 565.278583][T28336] F2FS-fs (loop3): invalid crc_offset: 0 23:14:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) [ 565.321129][T28336] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15564030943740312791, 0) 23:14:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS_MASK={0x4}, @CTA_FILTER={0x4}, @CTA_ZONE={0x6}]}, 0x34}}, 0x0) 23:14:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x80004506, 0x0) 23:14:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) [ 565.421628][T28336] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 565.430659][T28336] F2FS-fs (loop3): Mounted with checkpoint version = 7ad43cd7 23:14:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 23:14:35 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010600)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000140)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000010e00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011200)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x401320}, {&(0x7f0000011300)="00000014000000020c60", 0xa, 0x401380}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}, {&(0x7f0000012e00)="0000000000000000000001000000010000000002000000010000000003000000013c", 0x22, 0xc00000}, {&(0x7f0000014300)="ed4100005cf90100535f010003000000001000000000000002", 0x19, 0x3c01000}, {&(0x7f0000014500)="00000000000000000300000003", 0xd, 0x3c01fe0}], 0x0, &(0x7f0000014900)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 23:14:35 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 23:14:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 23:14:35 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 23:14:35 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 23:14:35 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 23:14:35 executing program 1: r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 565.674533][T28372] loop3: detected capacity change from 0 to 245791 [ 565.688315][T28372] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 565.696209][T28372] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 565.708516][T28372] F2FS-fs (loop3): invalid crc_offset: 0 [ 565.720044][T28372] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15564030943740312791, 0) [ 565.784674][T28372] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 565.792397][T28372] F2FS-fs (loop3): Mounted with checkpoint version = 7ad43cd7 23:14:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 23:14:35 executing program 1: r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 23:14:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:14:35 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010600)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000140)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000010e00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011200)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x401320}, {&(0x7f0000011300)="00000014000000020c60", 0xa, 0x401380}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}, {&(0x7f0000012e00)="0000000000000000000001000000010000000002000000010000000003000000013c", 0x22, 0xc00000}, {&(0x7f0000014300)="ed4100005cf90100535f010003000000001000000000000002", 0x19, 0x3c01000}, {&(0x7f0000014500)="00000000000000000300000003", 0xd, 0x3c01fe0}], 0x0, &(0x7f0000014900)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 23:14:35 executing program 1: r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 566.349914][T28383] loop3: detected capacity change from 0 to 245791 [ 566.367698][T28383] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 23:14:35 executing program 1: r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 566.382021][T28383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 566.400068][T28383] F2FS-fs (loop3): invalid crc_offset: 0 23:14:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) [ 566.424808][T28383] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15564030943740312791, 0) 23:14:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) [ 566.496988][T28383] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 566.505128][T28383] F2FS-fs (loop3): Mounted with checkpoint version = 7ad43cd7 23:14:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 23:14:36 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010600)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000140)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000010e00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011200)="000000000000000000000000000000000000000000120000000510ec", 0x1c, 0x401320}, {&(0x7f0000011300)="00000014000000020c60", 0xa, 0x401380}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}, {&(0x7f0000012e00)="0000000000000000000001000000010000000002000000010000000003000000013c", 0x22, 0xc00000}, {&(0x7f0000014300)="ed4100005cf90100535f010003000000001000000000000002", 0x19, 0x3c01000}, {&(0x7f0000014500)="00000000000000000300000003", 0xd, 0x3c01fe0}], 0x0, &(0x7f0000014900)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 567.217464][T28403] loop3: detected capacity change from 0 to 245791 [ 567.234054][T28403] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 567.243468][T28403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 567.255339][T28403] F2FS-fs (loop3): invalid crc_offset: 0 [ 567.265966][T28403] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15564030943740312791, 0) 23:14:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 23:14:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) [ 567.337091][T28403] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 567.345037][T28403] F2FS-fs (loop3): Mounted with checkpoint version = 7ad43cd7 23:14:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x19) 23:14:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x19) 23:14:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x19) 23:14:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x19) 23:14:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 23:14:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @dev}]}}}]}, 0x3c}}, 0x0) 23:14:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 23:14:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7}, 0x10) write(r0, &(0x7f00000000c0)="240000005a001f221007f4f9002304000a04f5110800e919e6190086b7020881698d0b92", 0x24) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 23:14:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @dev}]}}}]}, 0x3c}}, 0x0) 23:14:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @dev}]}}}]}, 0x3c}}, 0x0) 23:14:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @dev}]}}}]}, 0x3c}}, 0x0) 23:14:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0010140}]}) [ 568.551199][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.558109][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 23:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0010140}]}) 23:14:38 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3ce937", 0xa, 0x0, 0x0, @private1, @local, {[@routing], "fa9b"}}}}}, 0x0) 23:14:38 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3ce937", 0xa, 0x0, 0x0, @private1, @local, {[@routing], "fa9b"}}}}}, 0x0) 23:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0010140}]}) 23:14:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000002580)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}, 0x0) 23:14:38 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:14:38 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3ce937", 0xa, 0x0, 0x0, @private1, @local, {[@routing], "fa9b"}}}}}, 0x0) 23:14:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000002580)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}, 0x0) 23:14:38 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:14:38 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3ce937", 0xa, 0x0, 0x0, @private1, @local, {[@routing], "fa9b"}}}}}, 0x0) 23:14:38 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0010140}]}) 23:14:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000002580)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}, 0x0) 23:14:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:14:38 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:14:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:14:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000002580)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}, 0x0) 23:14:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:38 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) 23:14:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:38 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 23:14:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:39 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 23:14:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:39 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 23:14:39 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 23:14:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r3, r2}) 23:14:39 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fstat(r0, &(0x7f0000000080)) 23:14:39 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)) 23:14:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x8400ae8e, 0x0) 23:14:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x138, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 23:14:39 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) [ 569.528864][T28531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:14:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008ae88, &(0x7f0000001a40)={"06000000dd245c8445030000c9c8dc19643272a96fa42b76ce0000002bec0ba41f0100003a40c8a4750100003b00041f04000000003c5ca222000040ee377abaece6b88378e3d63ab7000040361d264ffa8b46485f02baee014d564b4252066178868d1ef4b5365c5dc26ca097ddda7c21a9845c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5eddec2d1cc39035caef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0f768f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666843badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 569.561943][ T39] audit: type=1400 audit(1647990879.148:166631): avc: denied { connect } for pid=28534 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 23:14:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x5}, 0x48) 23:14:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x138, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 23:14:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x5}, 0x48) [ 569.628542][T28543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:14:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x5}, 0x48) 23:14:39 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)) 23:14:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x138, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) [ 569.710877][T28550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:14:40 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) 23:14:40 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)) 23:14:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x138, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 23:14:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x5}, 0x48) 23:14:40 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) [ 570.423627][T28557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:14:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)) 23:14:40 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)) 23:14:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)) 23:14:40 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) 23:14:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "02040165000000ffff00400000000000000020"}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1) 23:14:40 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000040)) 23:14:40 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) 23:14:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "02040165000000ffff00400000000000000020"}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1) 23:14:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "02040165000000ffff00400000000000000020"}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1) 23:14:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "02040165000000ffff00400000000000000020"}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1) 23:14:40 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 571.510134][ T39] audit: type=1804 audit(1647990881.098:166632): pid=28590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir116171013/syzkaller.zfiMFH/554/bus" dev="sda1" ino=1144 res=1 errno=0 [ 571.543146][ T39] audit: type=1800 audit(1647990881.108:166633): pid=28590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1144 res=0 errno=0 23:14:41 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) 23:14:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:41 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name, 0x10) 23:14:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:41 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:41 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 572.389870][ T39] audit: type=1804 audit(1647990881.978:166634): pid=28609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir116171013/syzkaller.zfiMFH/555/bus" dev="sda1" ino=1165 res=1 errno=0 [ 572.432415][ T39] audit: type=1800 audit(1647990881.978:166635): pid=28609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 572.488122][ T39] audit: type=1804 audit(1647990882.078:166636): pid=28611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1201760477/syzkaller.kdtbBm/286/bus" dev="sda1" ino=1167 res=1 errno=0 [ 572.520303][ T39] audit: type=1800 audit(1647990882.078:166637): pid=28611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1167 res=0 errno=0 23:14:42 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) [ 573.031225][T28615] device bond5 left promiscuous mode [ 573.037991][T28615] device ip6gretap1 left promiscuous mode [ 573.126980][ T39] audit: type=1804 audit(1647990882.708:166638): pid=28618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir694494776/syzkaller.VMOeZA/301/bus" dev="sda1" ino=1168 res=1 errno=0 23:14:42 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) [ 573.182296][ T39] audit: type=1800 audit(1647990882.768:166639): pid=28618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1168 res=0 errno=0 23:14:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:42 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 573.283486][ T39] audit: type=1804 audit(1647990882.868:166640): pid=28627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir116171013/syzkaller.zfiMFH/556/bus" dev="sda1" ino=1142 res=1 errno=0 23:14:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:43 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:43 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:43 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:44 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) ftruncate(r2, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0x7, 0x1}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000018c0)={'veth1_to_bridge\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="e7d0529fd2f297879126b30a1c9680dee6d23f33858e58a8714f281fbe8dd6f53485733a130d") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'vlan1\x00', {}, 0x6}) ioctl$sock_SIOCOUTQ(r2, 0x890b, &(0x7f0000000680)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x4}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x48) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="e30f", 0x2}, {&(0x7f0000000340)="a7d20f1dd61e10020032733da925d8764b0a2925997ead5dc091444eaecd81974b8485212608bf7e4d6b", 0x2a}, {&(0x7f0000000380)="b5408df91ce08bac7f62473962da5a325b66eeebb87a052c51f1fb7ed0becbdcabb7318b81e3acc52866ce81299927773126d47d6a64ff96daedbae4936dcc39980575b9152227533270e92465ea0eb1da28da60d8e87aeb31f6efbfdbb0ef42fa954a12165a9a0ea4e48252da05a41e2674b804eb5b71e86fd3", 0x7a}, {&(0x7f0000000400)="0ee115ae459d32e73ba295b9601a75e3aacfe40c0792cf623df89b03c12c6a654e110a2a04e3126860f2efad21661dcc2514dca30f8b8ec19eb9aa95526f7dc20741e764ff70d46d606a03d1e5b7b93db6bc161c4969cd893499c7dbd3fef28853e5d306be9b2b06612f0c7a0da64f", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000000000000200000030ffffff0000000014000000000000000000000001000000e0000000000000001100000000000000000000000100000013000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001c00000000000000f0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="ac1e00017f000001000000001100000000000000000000000100000005000000000000001c000000000000000000000007000000860a000000010104fc730000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000014000000000000000000000002000000c8850000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000100000000"], 0x118}}], 0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000080)) 23:14:44 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x2000, 0x0) [ 575.004010][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 575.004028][ T39] audit: type=1804 audit(1647990884.588:166650): pid=28665 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir694494776/syzkaller.VMOeZA/303/bus" dev="sda1" ino=1151 res=1 errno=0 23:14:44 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x2000, 0x0) [ 575.054432][ T39] audit: type=1800 audit(1647990884.598:166651): pid=28665 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1151 res=0 errno=0 23:14:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@local}, {}, {@broadcast}]}]}}}}}}}, 0x0) 23:14:44 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x2000, 0x0) 23:14:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@local}, {}, {@broadcast}]}]}}}}}}}, 0x0) 23:14:45 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000003900)='fd/3\x00') 23:14:45 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x20000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x2000, 0x0) 23:14:45 executing program 1: syz_emit_ethernet(0x8a, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@local}, {}, {@broadcast}]}]}}}}}}}, 0x0) 23:14:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x43, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000001c0000006a706700000000006769660000000000706e670000000000617669000000000064697678000000006d703400000000006d703300000000003367700000000000776d760000000000776d6100000000006d706567000000006d6b7600000000006d6f76000000000061737800000000006173660000000000776d78000000000073766900000000007776780000000000776d0000000000006d706700000000006d70650000000000726d0000000000006f676700000000006a70656700000000766964656f00000061706b0000000000736f000000000000636f6c6400000000646200"/288, 0x120, 0x860}, {&(0x7f0000010300)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xa80}, {&(0x7f0000010400)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xb80}, {&(0x7f0000010500)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f0000010600)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x1400}, {&(0x7f0000010700)="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"/288, 0x120, 0x1860}, {&(0x7f0000010900)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1a80}, {&(0x7f0000010a00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1b80}, {&(0x7f0000010b00)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010c00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x200000}, {&(0x7f0000010d00)="000000000000000000000000000000000000000000000000000000004529836b0000030000000003000000001000"/64, 0x40, 0x200fe0}, {&(0x7f0000010e00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x2011e0}, {&(0x7f0000010f00)="0000000000000000000000010000000510ec00"/32, 0x20, 0x201240}, {&(0x7f0000011000)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x201280}, {&(0x7f0000011100)="000000000000000300000004007800"/32, 0x20, 0x2012e0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x201320}, {&(0x7f0000011300)="0000000b000000000400"/32, 0x20, 0x201380}, {&(0x7f0000011400)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x2013e0}, {&(0x7f0000011500)="03000000000000030000000000000400"/32, 0x20, 0x202000}, {&(0x7f0000011600)="00008c00"/32, 0x20, 0x202e00}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x202fe0}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x203fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x204fe0}, {&(0x7f0000011a00)="000000000000000000000000000000000000000000000000000000004529836b", 0x20, 0x205fe0}, {&(0x7f0000011b00)="513521154529836b00"/32, 0x20, 0x3ff000}, {&(0x7f0000011c00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x3ff040}, {&(0x7f0000011d00)="503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x400000}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000232b3fa20000030000000003000000001000"/64, 0x40, 0x400fe0}, {&(0x7f0000011f00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x4011e0}, {&(0x7f0000012000)="0000000000000000000000010000000510ec00"/32, 0x20, 0x401240}, {&(0x7f0000012100)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x401280}, {&(0x7f0000012200)="000000000000000300000004007800"/32, 0x20, 0x4012e0}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x401320}, {&(0x7f0000012400)="0000000b000000000400"/32, 0x20, 0x401380}, {&(0x7f0000012500)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000012600)="03000000000000030000000000000400"/32, 0x20, 0x402000}, {&(0x7f0000012700)='\x00\x00p\x00'/32, 0x20, 0x402e00}, {&(0x7f0000012800)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000012900)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000012a00)="0000000000000000000000000000000000000000000000000000000100000000503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x404fe0}, {&(0x7f0000012b00)="00000000000000000000000000000000000000000000000000000000232b3fa2", 0x20, 0x405fe0}, {&(0x7f0000012c00)="50352115232b3fa200"/32, 0x20, 0x5ff000}, {&(0x7f0000012d00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f0000012e00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000005120000000900000004120000000000000000", 0x60, 0xa00000}, {&(0x7f0000012f00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000003120000000900000004120000000000000000", 0x60, 0xc00000}, {&(0x7f0000013000)="ed4100005cf90100535f010003000000001000000000000002000000000000000fbc645f0000000012bc645f0000000012bc645f00000000000000009367773493677734000000000100"/96, 0x60, 0x1001000}, {&(0x7f0000013100)="0000000000000000011600"/32, 0x20, 0x1001160}, {&(0x7f0000013200)="00000000000000000300000003000000000000004d3521150000000002100000ed410005000000000000000002000000a00d000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773465ce8ac8000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x1001fe0}, {&(0x7f0000013300)="0000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dcece450600000005000700"/96, 0x60, 0x1002160}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x1002940}, {&(0x7f0000013500)="00000000000000000400000004000000000000004d3521150000000003100000", 0x20, 0x1002fe0}, {&(0x7f0000013600)="ed81000b0000000000000000010000001a04000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773498e36519000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x1200000}, {&(0x7f0000013700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1088, 0x440, 0x1200160}, {&(0x7f0000013c00)="00000000000000000500000005000000010000004d3521150000000001120000ffa1000b0000000000000000010000002600000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777343545a3f2000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x1200fe0}, {&(0x7f0000013d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen950016867/file0/file0\x00'/64, 0x40, 0x1201160}, {&(0x7f0000013e00)="00000000000000000600000006000000010000004d3521150000000002120000ed81000b0000000000000000010000000a00000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777344ebc68fc000000000000000000000000030000000500000066696c653100"/160, 0xa0, 0x1201fe0}, {&(0x7f0000013f00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00'/32, 0x20, 0x1202160}, {&(0x7f0000014000)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x1202f00}, {&(0x7f0000014100)="00000000000000000700000007000000010000004d3521150000000003120000", 0x20, 0x1202fe0}, {&(0x7f0000014200)="ed81010b0000000000000000010000006400000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773491a9bcd9000000000000000000000000030000000900000066696c652e636f6c6400"/128, 0x80, 0x1204000}, {&(0x7f0000014300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x1204160}, {&(0x7f0000014400)="00000000000000000900000009000000010000004d3521150000000005120000ed8102010000000000000000020000002823000000000000040000000000000012bc645f0000000012bc645f0000000012bc645f00000000936777349367773493677734cb55d571000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x1204fe0}, {&(0x7f0000014500)="02160000030000000216000003160000041600"/32, 0x20, 0x1205160}, {&(0x7f0000014600)="00000000000000000800000008000000010000004e352115cac6c8d006120000", 0x20, 0x1205fe0}, {&(0x7f0000014700)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1601000}, {&(0x7f0000014800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1601940}], 0x0, &(0x7f0000014900)) 23:14:45 executing program 1: syz_emit_ethernet(0x8a, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@local}, {}, {@broadcast}]}]}}}}}}}, 0x0) [ 575.780245][T28685] loop3: detected capacity change from 0 to 131072 23:14:45 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000003900)='fd/3\x00') 23:14:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 23:14:45 executing program 1: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x8800) syz_clone(0x480a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000004c0)="1581f185abb75a2eb63f200f0bb2") 23:14:45 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000003900)='fd/3\x00') 23:14:45 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000003900)='fd/3\x00') [ 575.845129][T28685] F2FS-fs (loop3): Found nat_bits in checkpoint 23:14:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) [ 575.913662][T28685] F2FS-fs (loop3): Mounted with checkpoint version = 15213551 23:14:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x43, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x400}, {&(0x7f0000010100)="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"/288, 0x120, 0x860}, {&(0x7f0000010300)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xa80}, {&(0x7f0000010400)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xb80}, {&(0x7f0000010500)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f0000010600)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x1400}, {&(0x7f0000010700)="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"/288, 0x120, 0x1860}, {&(0x7f0000010900)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1a80}, {&(0x7f0000010a00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1b80}, {&(0x7f0000010b00)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010c00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x200000}, {&(0x7f0000010d00)="000000000000000000000000000000000000000000000000000000004529836b0000030000000003000000001000"/64, 0x40, 0x200fe0}, {&(0x7f0000010e00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x2011e0}, {&(0x7f0000010f00)="0000000000000000000000010000000510ec00"/32, 0x20, 0x201240}, {&(0x7f0000011000)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x201280}, {&(0x7f0000011100)="000000000000000300000004007800"/32, 0x20, 0x2012e0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x201320}, {&(0x7f0000011300)="0000000b000000000400"/32, 0x20, 0x201380}, {&(0x7f0000011400)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x2013e0}, {&(0x7f0000011500)="03000000000000030000000000000400"/32, 0x20, 0x202000}, {&(0x7f0000011600)="00008c00"/32, 0x20, 0x202e00}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x202fe0}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x203fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x204fe0}, {&(0x7f0000011a00)="000000000000000000000000000000000000000000000000000000004529836b", 0x20, 0x205fe0}, {&(0x7f0000011b00)="513521154529836b00"/32, 0x20, 0x3ff000}, {&(0x7f0000011c00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x3ff040}, {&(0x7f0000011d00)="503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x400000}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000232b3fa20000030000000003000000001000"/64, 0x40, 0x400fe0}, {&(0x7f0000011f00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x4011e0}, {&(0x7f0000012000)="0000000000000000000000010000000510ec00"/32, 0x20, 0x401240}, {&(0x7f0000012100)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x401280}, {&(0x7f0000012200)="000000000000000300000004007800"/32, 0x20, 0x4012e0}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x401320}, {&(0x7f0000012400)="0000000b000000000400"/32, 0x20, 0x401380}, {&(0x7f0000012500)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000012600)="03000000000000030000000000000400"/32, 0x20, 0x402000}, {&(0x7f0000012700)='\x00\x00p\x00'/32, 0x20, 0x402e00}, {&(0x7f0000012800)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000012900)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000012a00)="0000000000000000000000000000000000000000000000000000000100000000503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x404fe0}, {&(0x7f0000012b00)="00000000000000000000000000000000000000000000000000000000232b3fa2", 0x20, 0x405fe0}, {&(0x7f0000012c00)="50352115232b3fa200"/32, 0x20, 0x5ff000}, {&(0x7f0000012d00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f0000012e00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000005120000000900000004120000000000000000", 0x60, 0xa00000}, {&(0x7f0000012f00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000003120000000900000004120000000000000000", 0x60, 0xc00000}, {&(0x7f0000013000)="ed4100005cf90100535f010003000000001000000000000002000000000000000fbc645f0000000012bc645f0000000012bc645f00000000000000009367773493677734000000000100"/96, 0x60, 0x1001000}, {&(0x7f0000013100)="0000000000000000011600"/32, 0x20, 0x1001160}, {&(0x7f0000013200)="00000000000000000300000003000000000000004d3521150000000002100000ed410005000000000000000002000000a00d000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773465ce8ac8000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x1001fe0}, {&(0x7f0000013300)="0000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dcece450600000005000700"/96, 0x60, 0x1002160}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x1002940}, {&(0x7f0000013500)="00000000000000000400000004000000000000004d3521150000000003100000", 0x20, 0x1002fe0}, {&(0x7f0000013600)="ed81000b0000000000000000010000001a04000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773498e36519000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x1200000}, {&(0x7f0000013700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1088, 0x440, 0x1200160}, {&(0x7f0000013c00)="00000000000000000500000005000000010000004d3521150000000001120000ffa1000b0000000000000000010000002600000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777343545a3f2000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x1200fe0}, {&(0x7f0000013d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen950016867/file0/file0\x00'/64, 0x40, 0x1201160}, {&(0x7f0000013e00)="00000000000000000600000006000000010000004d3521150000000002120000ed81000b0000000000000000010000000a00000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777344ebc68fc000000000000000000000000030000000500000066696c653100"/160, 0xa0, 0x1201fe0}, {&(0x7f0000013f00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00'/32, 0x20, 0x1202160}, {&(0x7f0000014000)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x1202f00}, {&(0x7f0000014100)="00000000000000000700000007000000010000004d3521150000000003120000", 0x20, 0x1202fe0}, {&(0x7f0000014200)="ed81010b0000000000000000010000006400000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773491a9bcd9000000000000000000000000030000000900000066696c652e636f6c6400"/128, 0x80, 0x1204000}, {&(0x7f0000014300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x1204160}, {&(0x7f0000014400)="00000000000000000900000009000000010000004d3521150000000005120000ed8102010000000000000000020000002823000000000000040000000000000012bc645f0000000012bc645f0000000012bc645f00000000936777349367773493677734cb55d571000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x1204fe0}, {&(0x7f0000014500)="02160000030000000216000003160000041600"/32, 0x20, 0x1205160}, {&(0x7f0000014600)="00000000000000000800000008000000010000004e352115cac6c8d006120000", 0x20, 0x1205fe0}, {&(0x7f0000014700)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1601000}, {&(0x7f0000014800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1601940}], 0x0, &(0x7f0000014900)) 23:14:45 executing program 2: r0 = socket(0x22, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 23:14:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 23:14:45 executing program 1: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x8800) syz_clone(0x480a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000004c0)="1581f185abb75a2eb63f200f0bb2") [ 575.951429][ T39] audit: type=1400 audit(1647990885.538:166652): avc: denied { setopt } for pid=28706 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 23:14:45 executing program 2: r0 = socket(0x22, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 23:14:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 23:14:45 executing program 2: r0 = socket(0x22, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 23:14:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 576.037517][T28720] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 576.052377][T28720] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 576.107253][T28723] loop3: detected capacity change from 0 to 131072 [ 576.129916][T28723] F2FS-fs (loop3): Found nat_bits in checkpoint [ 576.164265][T28723] F2FS-fs (loop3): Mounted with checkpoint version = 15213551 23:14:45 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x43, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x400}, {&(0x7f0000010100)="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"/288, 0x120, 0x860}, {&(0x7f0000010300)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xa80}, {&(0x7f0000010400)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xb80}, {&(0x7f0000010500)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f0000010600)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x1400}, {&(0x7f0000010700)="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"/288, 0x120, 0x1860}, {&(0x7f0000010900)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1a80}, {&(0x7f0000010a00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1b80}, {&(0x7f0000010b00)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010c00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x200000}, {&(0x7f0000010d00)="000000000000000000000000000000000000000000000000000000004529836b0000030000000003000000001000"/64, 0x40, 0x200fe0}, {&(0x7f0000010e00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x2011e0}, {&(0x7f0000010f00)="0000000000000000000000010000000510ec00"/32, 0x20, 0x201240}, {&(0x7f0000011000)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x201280}, {&(0x7f0000011100)="000000000000000300000004007800"/32, 0x20, 0x2012e0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x201320}, {&(0x7f0000011300)="0000000b000000000400"/32, 0x20, 0x201380}, {&(0x7f0000011400)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x2013e0}, {&(0x7f0000011500)="03000000000000030000000000000400"/32, 0x20, 0x202000}, {&(0x7f0000011600)="00008c00"/32, 0x20, 0x202e00}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x202fe0}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x203fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x204fe0}, {&(0x7f0000011a00)="000000000000000000000000000000000000000000000000000000004529836b", 0x20, 0x205fe0}, {&(0x7f0000011b00)="513521154529836b00"/32, 0x20, 0x3ff000}, {&(0x7f0000011c00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x3ff040}, {&(0x7f0000011d00)="503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x400000}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000232b3fa20000030000000003000000001000"/64, 0x40, 0x400fe0}, {&(0x7f0000011f00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x4011e0}, {&(0x7f0000012000)="0000000000000000000000010000000510ec00"/32, 0x20, 0x401240}, {&(0x7f0000012100)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x401280}, {&(0x7f0000012200)="000000000000000300000004007800"/32, 0x20, 0x4012e0}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x401320}, {&(0x7f0000012400)="0000000b000000000400"/32, 0x20, 0x401380}, {&(0x7f0000012500)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000012600)="03000000000000030000000000000400"/32, 0x20, 0x402000}, {&(0x7f0000012700)='\x00\x00p\x00'/32, 0x20, 0x402e00}, {&(0x7f0000012800)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000012900)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000012a00)="0000000000000000000000000000000000000000000000000000000100000000503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x404fe0}, {&(0x7f0000012b00)="00000000000000000000000000000000000000000000000000000000232b3fa2", 0x20, 0x405fe0}, {&(0x7f0000012c00)="50352115232b3fa200"/32, 0x20, 0x5ff000}, {&(0x7f0000012d00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f0000012e00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000005120000000900000004120000000000000000", 0x60, 0xa00000}, {&(0x7f0000012f00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000003120000000900000004120000000000000000", 0x60, 0xc00000}, {&(0x7f0000013000)="ed4100005cf90100535f010003000000001000000000000002000000000000000fbc645f0000000012bc645f0000000012bc645f00000000000000009367773493677734000000000100"/96, 0x60, 0x1001000}, {&(0x7f0000013100)="0000000000000000011600"/32, 0x20, 0x1001160}, {&(0x7f0000013200)="00000000000000000300000003000000000000004d3521150000000002100000ed410005000000000000000002000000a00d000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773465ce8ac8000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x1001fe0}, {&(0x7f0000013300)="0000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dcece450600000005000700"/96, 0x60, 0x1002160}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x1002940}, {&(0x7f0000013500)="00000000000000000400000004000000000000004d3521150000000003100000", 0x20, 0x1002fe0}, {&(0x7f0000013600)="ed81000b0000000000000000010000001a04000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773498e36519000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x1200000}, {&(0x7f0000013700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1088, 0x440, 0x1200160}, {&(0x7f0000013c00)="00000000000000000500000005000000010000004d3521150000000001120000ffa1000b0000000000000000010000002600000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777343545a3f2000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x1200fe0}, {&(0x7f0000013d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen950016867/file0/file0\x00'/64, 0x40, 0x1201160}, {&(0x7f0000013e00)="00000000000000000600000006000000010000004d3521150000000002120000ed81000b0000000000000000010000000a00000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777344ebc68fc000000000000000000000000030000000500000066696c653100"/160, 0xa0, 0x1201fe0}, {&(0x7f0000013f00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00'/32, 0x20, 0x1202160}, {&(0x7f0000014000)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x1202f00}, {&(0x7f0000014100)="00000000000000000700000007000000010000004d3521150000000003120000", 0x20, 0x1202fe0}, {&(0x7f0000014200)="ed81010b0000000000000000010000006400000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773491a9bcd9000000000000000000000000030000000900000066696c652e636f6c6400"/128, 0x80, 0x1204000}, {&(0x7f0000014300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x1204160}, {&(0x7f0000014400)="00000000000000000900000009000000010000004d3521150000000005120000ed8102010000000000000000020000002823000000000000040000000000000012bc645f0000000012bc645f0000000012bc645f00000000936777349367773493677734cb55d571000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x1204fe0}, {&(0x7f0000014500)="02160000030000000216000003160000041600"/32, 0x20, 0x1205160}, {&(0x7f0000014600)="00000000000000000800000008000000010000004e352115cac6c8d006120000", 0x20, 0x1205fe0}, {&(0x7f0000014700)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1601000}, {&(0x7f0000014800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1601940}], 0x0, &(0x7f0000014900)) 23:14:45 executing program 2: r0 = socket(0x22, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 23:14:45 executing program 1: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x8800) syz_clone(0x480a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000004c0)="1581f185abb75a2eb63f200f0bb2") 23:14:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 23:14:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 576.222869][T28733] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 576.234523][T28733] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 576.248670][T28735] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 23:14:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 576.269381][T28735] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 23:14:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 576.293705][T28739] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 576.295073][T28741] loop3: detected capacity change from 0 to 131072 [ 576.307619][T28739] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 576.330087][T28743] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 576.340930][T28743] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 576.346092][T28741] F2FS-fs (loop3): Found nat_bits in checkpoint 23:14:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 576.400681][T28749] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 576.404504][T28741] F2FS-fs (loop3): Mounted with checkpoint version = 15213551 [ 576.420907][T28749] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 23:14:46 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x43, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x400}, {&(0x7f0000010100)="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"/288, 0x120, 0x860}, {&(0x7f0000010300)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xa80}, {&(0x7f0000010400)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xb80}, {&(0x7f0000010500)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f0000010600)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e00000010000003000000010000000200000016c886d9910f43279760e7096c6cc7be00000000", 0x80, 0x1400}, {&(0x7f0000010700)="000000000000000000000000000000000000000000000000000000001c0000006a706700000000006769660000000000706e670000000000617669000000000064697678000000006d703400000000006d703300000000003367700000000000776d760000000000776d6100000000006d706567000000006d6b7600000000006d6f76000000000061737800000000006173660000000000776d78000000000073766900000000007776780000000000776d0000000000006d706700000000006d70650000000000726d0000000000006f676700000000006a70656700000000766964656f00000061706b0000000000736f000000000000636f6c6400000000646200"/288, 0x120, 0x1860}, {&(0x7f0000010900)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1a80}, {&(0x7f0000010a00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1b80}, {&(0x7f0000010b00)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010c00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x200000}, {&(0x7f0000010d00)="000000000000000000000000000000000000000000000000000000004529836b0000030000000003000000001000"/64, 0x40, 0x200fe0}, {&(0x7f0000010e00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x2011e0}, {&(0x7f0000010f00)="0000000000000000000000010000000510ec00"/32, 0x20, 0x201240}, {&(0x7f0000011000)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x201280}, {&(0x7f0000011100)="000000000000000300000004007800"/32, 0x20, 0x2012e0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x201320}, {&(0x7f0000011300)="0000000b000000000400"/32, 0x20, 0x201380}, {&(0x7f0000011400)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x2013e0}, {&(0x7f0000011500)="03000000000000030000000000000400"/32, 0x20, 0x202000}, {&(0x7f0000011600)="00008c00"/32, 0x20, 0x202e00}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x202fe0}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x203fe0}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x204fe0}, {&(0x7f0000011a00)="000000000000000000000000000000000000000000000000000000004529836b", 0x20, 0x205fe0}, {&(0x7f0000011b00)="513521154529836b00"/32, 0x20, 0x3ff000}, {&(0x7f0000011c00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x3ff040}, {&(0x7f0000011d00)="503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x400000}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000232b3fa20000030000000003000000001000"/64, 0x40, 0x400fe0}, {&(0x7f0000011f00)="000000000000000000000000000000000000000000000000000000060000000000020c6000"/64, 0x40, 0x4011e0}, {&(0x7f0000012000)="0000000000000000000000010000000510ec00"/32, 0x20, 0x401240}, {&(0x7f0000012100)="0000000000000000000000000000000000000000000000000002000000001400", 0x20, 0x401280}, {&(0x7f0000012200)="000000000000000300000004007800"/32, 0x20, 0x4012e0}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000500000000080000000000", 0x20, 0x401320}, {&(0x7f0000012400)="0000000b000000000400"/32, 0x20, 0x401380}, {&(0x7f0000012500)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000012600)="03000000000000030000000000000400"/32, 0x20, 0x402000}, {&(0x7f0000012700)='\x00\x00p\x00'/32, 0x20, 0x402e00}, {&(0x7f0000012800)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000012900)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000012a00)="0000000000000000000000000000000000000000000000000000000100000000503521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x404fe0}, {&(0x7f0000012b00)="00000000000000000000000000000000000000000000000000000000232b3fa2", 0x20, 0x405fe0}, {&(0x7f0000012c00)="50352115232b3fa200"/32, 0x20, 0x5ff000}, {&(0x7f0000012d00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f0000012e00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000005120000000900000004120000000000000000", 0x60, 0xa00000}, {&(0x7f0000012f00)="000000000000000000000100000001000000000200000001000000000300000001100000000400000002100000000500000000120000000600000001120000000700000002120000000800000003120000000900000004120000000000000000", 0x60, 0xc00000}, {&(0x7f0000013000)="ed4100005cf90100535f010003000000001000000000000002000000000000000fbc645f0000000012bc645f0000000012bc645f00000000000000009367773493677734000000000100"/96, 0x60, 0x1001000}, {&(0x7f0000013100)="0000000000000000011600"/32, 0x20, 0x1001160}, {&(0x7f0000013200)="00000000000000000300000003000000000000004d3521150000000002100000ed410005000000000000000002000000a00d000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773465ce8ac8000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x1001fe0}, {&(0x7f0000013300)="0000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dcece450600000005000700"/96, 0x60, 0x1002160}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x1002940}, {&(0x7f0000013500)="00000000000000000400000004000000000000004d3521150000000003100000", 0x20, 0x1002fe0}, {&(0x7f0000013600)="ed81000b0000000000000000010000001a04000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773498e36519000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x1200000}, {&(0x7f0000013700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1088, 0x440, 0x1200160}, {&(0x7f0000013c00)="00000000000000000500000005000000010000004d3521150000000001120000ffa1000b0000000000000000010000002600000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777343545a3f2000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x1200fe0}, {&(0x7f0000013d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen950016867/file0/file0\x00'/64, 0x40, 0x1201160}, {&(0x7f0000013e00)="00000000000000000600000006000000010000004d3521150000000002120000ed81000b0000000000000000010000000a00000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f000000009367773493677734936777344ebc68fc000000000000000000000000030000000500000066696c653100"/160, 0xa0, 0x1201fe0}, {&(0x7f0000013f00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00'/32, 0x20, 0x1202160}, {&(0x7f0000014000)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x1202f00}, {&(0x7f0000014100)="00000000000000000700000007000000010000004d3521150000000003120000", 0x20, 0x1202fe0}, {&(0x7f0000014200)="ed81010b0000000000000000010000006400000000000000010000000000000012bc645f0000000012bc645f0000000012bc645f0000000093677734936777349367773491a9bcd9000000000000000000000000030000000900000066696c652e636f6c6400"/128, 0x80, 0x1204000}, {&(0x7f0000014300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x1204160}, {&(0x7f0000014400)="00000000000000000900000009000000010000004d3521150000000005120000ed8102010000000000000000020000002823000000000000040000000000000012bc645f0000000012bc645f0000000012bc645f00000000936777349367773493677734cb55d571000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x1204fe0}, {&(0x7f0000014500)="02160000030000000216000003160000041600"/32, 0x20, 0x1205160}, {&(0x7f0000014600)="00000000000000000800000008000000010000004e352115cac6c8d006120000", 0x20, 0x1205fe0}, {&(0x7f0000014700)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1601000}, {&(0x7f0000014800)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1601940}], 0x0, &(0x7f0000014900)) 23:14:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 23:14:46 executing program 1: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x8800) syz_clone(0x480a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200, 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000004c0)="1581f185abb75a2eb63f200f0bb2") 23:14:46 executing program 2: clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)) [ 576.496195][T28752] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) 23:14:46 executing program 2: clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)) [ 576.508876][T28752] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 23:14:46 executing program 2: clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)) 23:14:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000505d25a80648c63940d0324fc60100002403a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:14:46 executing program 2: clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)) [ 576.557721][T28762] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 576.566072][T28762] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.604401][T28769] loop3: detected capacity change from 0 to 131072 [ 576.642479][T28769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 576.680102][T28769] F2FS-fs (loop3): Mounted with checkpoint version = 15213551 23:14:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000505d25a80648c63940d0324fc60100002403a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:14:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 23:14:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:14:46 executing program 3: syz_emit_ethernet(0x2fe, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2c8, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x3, '\x00', 0x0, 0x0}, @mcast1, [{0x0, 0x12, "0e3049a060b1d520ae793ce94a4afaaeef716d4e18481fe64888b4de9228abe41e00d1e5bbbeb4f337d4d6fa47c279d666c0880088e51de27a57bf37fea329b9e502eca61705826d066292ffff0c8218323c4860d1ceb3cdd783f404c132178d70f8ddf33921461f7015177be06ad224d91f54561327e37e59a1ea953a3ec88b10f77ea6c1098e4c2b43da4acf8aef1b88dfbec2b2"}, {0x0, 0x16, "7e4479f40b5ab93e944ac202fed7d02deb59e948a9b8774598b7ea8f5c644b8171fa2ccf7acd82d94fc9232481ee1177df74cdc5e18dc3d77f9141f342d066d1728467e65bafda4c9207685c5d78552075f2a99ed5c8f2e2c23ce76c8b2e28a46caf19b7b15c4ebd254343b59e200b769107ce313921d73a28008eca88cbc4eb34d9b09f5281e0077ecdc81a429fa1efde7fc9eb1a51cb55fcd3fbd71dc2b6915a8a69e6df20ab80c6cf8629c4c3"}, {0x0, 0x2b, "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"}]}}}}}}, 0x0) [ 576.737137][T28778] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 23:14:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) [ 576.749393][T28778] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:14:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000505d25a80648c63940d0324fc60100002403a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:14:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:14:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) [ 576.808324][T28787] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 576.817798][T28787] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 23:14:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:14:46 executing program 3: syz_emit_ethernet(0x2fe, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2c8, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x3, '\x00', 0x0, 0x0}, @mcast1, [{0x0, 0x12, "0e3049a060b1d520ae793ce94a4afaaeef716d4e18481fe64888b4de9228abe41e00d1e5bbbeb4f337d4d6fa47c279d666c0880088e51de27a57bf37fea329b9e502eca61705826d066292ffff0c8218323c4860d1ceb3cdd783f404c132178d70f8ddf33921461f7015177be06ad224d91f54561327e37e59a1ea953a3ec88b10f77ea6c1098e4c2b43da4acf8aef1b88dfbec2b2"}, {0x0, 0x16, "7e4479f40b5ab93e944ac202fed7d02deb59e948a9b8774598b7ea8f5c644b8171fa2ccf7acd82d94fc9232481ee1177df74cdc5e18dc3d77f9141f342d066d1728467e65bafda4c9207685c5d78552075f2a99ed5c8f2e2c23ce76c8b2e28a46caf19b7b15c4ebd254343b59e200b769107ce313921d73a28008eca88cbc4eb34d9b09f5281e0077ecdc81a429fa1efde7fc9eb1a51cb55fcd3fbd71dc2b6915a8a69e6df20ab80c6cf8629c4c3"}, {0x0, 0x2b, "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"}]}}}}}}, 0x0) 23:14:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000505d25a80648c63940d0324fc60100002403a000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:14:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000840)={0x0, 0x0, @ioapic}) 23:14:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0c009900000000000000000047"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 23:14:46 executing program 3: syz_emit_ethernet(0x2fe, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2c8, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x3, '\x00', 0x0, 0x0}, @mcast1, [{0x0, 0x12, "0e3049a060b1d520ae793ce94a4afaaeef716d4e18481fe64888b4de9228abe41e00d1e5bbbeb4f337d4d6fa47c279d666c0880088e51de27a57bf37fea329b9e502eca61705826d066292ffff0c8218323c4860d1ceb3cdd783f404c132178d70f8ddf33921461f7015177be06ad224d91f54561327e37e59a1ea953a3ec88b10f77ea6c1098e4c2b43da4acf8aef1b88dfbec2b2"}, {0x0, 0x16, "7e4479f40b5ab93e944ac202fed7d02deb59e948a9b8774598b7ea8f5c644b8171fa2ccf7acd82d94fc9232481ee1177df74cdc5e18dc3d77f9141f342d066d1728467e65bafda4c9207685c5d78552075f2a99ed5c8f2e2c23ce76c8b2e28a46caf19b7b15c4ebd254343b59e200b769107ce313921d73a28008eca88cbc4eb34d9b09f5281e0077ecdc81a429fa1efde7fc9eb1a51cb55fcd3fbd71dc2b6915a8a69e6df20ab80c6cf8629c4c3"}, {0x0, 0x2b, "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"}]}}}}}}, 0x0) [ 576.888747][T28799] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 576.900222][T28799] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:46 executing program 3: syz_emit_ethernet(0x2fe, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2c8, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x3, '\x00', 0x0, 0x0}, @mcast1, [{0x0, 0x12, "0e3049a060b1d520ae793ce94a4afaaeef716d4e18481fe64888b4de9228abe41e00d1e5bbbeb4f337d4d6fa47c279d666c0880088e51de27a57bf37fea329b9e502eca61705826d066292ffff0c8218323c4860d1ceb3cdd783f404c132178d70f8ddf33921461f7015177be06ad224d91f54561327e37e59a1ea953a3ec88b10f77ea6c1098e4c2b43da4acf8aef1b88dfbec2b2"}, {0x0, 0x16, "7e4479f40b5ab93e944ac202fed7d02deb59e948a9b8774598b7ea8f5c644b8171fa2ccf7acd82d94fc9232481ee1177df74cdc5e18dc3d77f9141f342d066d1728467e65bafda4c9207685c5d78552075f2a99ed5c8f2e2c23ce76c8b2e28a46caf19b7b15c4ebd254343b59e200b769107ce313921d73a28008eca88cbc4eb34d9b09f5281e0077ecdc81a429fa1efde7fc9eb1a51cb55fcd3fbd71dc2b6915a8a69e6df20ab80c6cf8629c4c3"}, {0x0, 0x2b, "1ed68cad59ef59a7f1b9a34af99612c31442cb6df2c0e912e55a51ccf951e50527e29c3da9c67f4f5c32f59f4e90b302bb15ff7e689a905b20d7b30c0f694c7c81c225685a9841b7e559864b254b8bdb8e332756991ac66e8215017ff3072dd1d98eded997479c30ba103395dd82f513196ac6a2a0bcc3b47e1b248695f5b24dad574bb985f280b28bf32f8b859a08bd6b55d9b9f3fea55f77acca6a1ee7ca7c5270736a38eafa998a8d604828074e449a0ef37a01454b62c1dadaf948d11657106efd4bb884d341636b90f1e2b655c336e4b08b04d4555d85100bd5a39ba9d46eab1121d0f7da1e915a9b98a915a1e1e8d20399a0fb48c0d1206f507bc1ecfae2dacbaf9562e109e4e64032c29af853fc4e1f2d0d0bc57a556bf68c944491c0b385af19863bdfcf5a6e0e2f5e21fcc92327b381f9677a73873108efe7100a89697c9d00074db873d67797eb0ab293066283afcc805f1a"}]}}}}}}, 0x0) 23:14:46 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xb3, 0xe, 0x29, &(0x7f0000000280)="5f39868de2639b12c1a2ff010000", 0x0, 0x2d7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23:14:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "100000000400000000000000000000e5"}}}]}, 0x48}}, 0x0) 23:14:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "100000000400000000000000000000e5"}}}]}, 0x48}}, 0x0) 23:14:46 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xb3, 0xe, 0x29, &(0x7f0000000280)="5f39868de2639b12c1a2ff010000", 0x0, 0x2d7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23:14:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000840)={0x0, 0x0, @ioapic}) 23:14:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="a7", 0x1}], 0x1}}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x20, 0x0, 0x0) 23:14:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "100000000400000000000000000000e5"}}}]}, 0x48}}, 0x0) 23:14:46 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400c693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bff8f06fa1918d65eae391cb41336023cdcedb5e0125ebbcebdde510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532af9c4d2ec7c32f2095e63c80aff9fa640b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700cf0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2633398631c7771429d120000003341bf4a00fcffffffffffffffe09fec2271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0c6dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be5877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3ff372b5f2ee10cebb2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1d14216bdf57d2a40d40b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecafe6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890200d627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e600263d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5401209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868c6da7eaa69eb7f7f80572fdd11bb1d0d1280fb00818654a53b6df4b2c97cc1c98d7afda8f816e908b65550b44123c8b4122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee4472c3eb80159daed092511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d35badd4390e8d3223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc201dd2a3ba71e0f45492ef1f8b65ccb3dcd0e1a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6498c4b4fbd0eea3225a53072423b907c6602f8999e5d11da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e966d0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bb5a8e950ff6149f41ae6edd830207bf728cd9807933c3e16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaab37d4f98a934b0f900e0eb639878a45e4629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e600352ba26171d004f1c5524f061378f94fb453786c3a6f78b10d383b431d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41b79f51610963b48930658e2d6125a26085b11345b0473240b7e5e91811312c4366faf0f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541dd5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e158117ae7ea6619f7db330447d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50c6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e1973222263603498010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb06b189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d210359cffa53772a545d411195b0493becdc635d7abf1a3b1b2b307929f865049c3660efdb4d4593d1317b410e66530671d62e311e903b9a746b9abf00729224655a99b15d6c4575cfb4ac586f38f93d9bafe491293ce1d254416fd753ef272ed0e54e5f1144e45fc0ec48e9f8e251b2e861b96a7f41e4e038ba322c57ca5436628f5d9"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xb3, 0xe, 0x29, &(0x7f0000000280)="5f39868de2639b12c1a2ff010000", 0x0, 0x2d7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23:14:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000840)={0x0, 0x0, @ioapic}) [ 577.307590][ T39] audit: type=1804 audit(1647990886.888:166653): pid=28811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1589/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 23:14:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x66) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "100000000400000000000000000000e5"}}}]}, 0x48}}, 0x0) 23:14:47 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xb3, 0xe, 0x29, &(0x7f0000000280)="5f39868de2639b12c1a2ff010000", 0x0, 0x2d7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23:14:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) 23:14:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) 23:14:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000c40)="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", 0x1f8, 0x8}, {&(0x7f0000000340)="8aae3dc92f23327559f18eb3ff", 0xd, 0x9}], 0x400, &(0x7f0000000680)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@dos1xfloppy}], [{@uid_eq}]}) 23:14:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f0000000840)={0x0, 0x0, @ioapic}) 23:14:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) 23:14:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) 23:14:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x2, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) 23:14:47 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) ptrace(0x420a, r0) 23:14:47 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) 23:14:47 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x10000, 0x0) [ 577.594858][ T39] audit: type=1326 audit(1647990887.178:166654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28858 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f648cefe049 code=0x0 23:14:47 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) 23:14:47 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) 23:14:47 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:47 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:47 executing program 1: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:48 executing program 0: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:48 executing program 1: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x10000, 0x0) 23:14:48 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) [ 578.458437][ T39] audit: type=1326 audit(1647990888.048:166655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28887 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f648cefe049 code=0x0 23:14:48 executing program 1: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000bdf000/0x2000)=nil, 0x2000) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f0000000300), 0x0, &(0x7f0000000140)) mincore(&(0x7f0000bdd000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/189) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) 23:14:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000002a40)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) [ 578.512578][T28897] loop2: detected capacity change from 0 to 512 23:14:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000102}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) 23:14:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000102}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) [ 578.557214][T28897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 578.576016][ T39] audit: type=1400 audit(1647990888.158:166656): avc: denied { setattr } for pid=28895 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 23:14:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000102}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) 23:14:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x10000, 0x0) 23:14:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000002a40)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) [ 579.306964][T28911] loop2: detected capacity change from 0 to 512 23:14:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000102}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) [ 579.319095][ T39] audit: type=1326 audit(1647990888.908:166657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28913 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f648cefe049 code=0x0 [ 579.353930][T28911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 23:14:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000002a40)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 23:14:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000002a40)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 23:14:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000002a40)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) [ 579.482811][T28926] loop2: detected capacity change from 0 to 512 [ 579.505197][T28926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 23:14:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x10000, 0x0) 23:14:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000002a40)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 23:14:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000002a40)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=ANY=[], 0xc001, 0x0) 23:14:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) [ 580.172505][ T39] audit: type=1326 audit(1647990889.758:166658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28929 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f648cefe049 code=0x0 23:14:49 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) [ 580.189083][T28935] loop2: detected capacity change from 0 to 512 [ 580.220474][T28935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 23:14:49 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:49 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:50 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 23:14:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:14:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:14:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:14:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:14:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:14:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 23:14:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:14:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x4, 0x4, 0xaa67, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x2a}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000100)=""/15, 0x40f00, 0x1f, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x3ff, 0x50}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x80) 23:14:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 23:14:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:14:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:14:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 23:14:50 executing program 1: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f0000000140)='::,c-\n\xf5\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13\x04\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://t\x00\x00\x00\x00\x00\x00\x00\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) 23:14:50 executing program 3: r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_BT_DEFER_SETUP(r0, 0x6a, 0x2, 0x0, 0x0) 23:14:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 23:14:50 executing program 1: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f0000000140)='::,c-\n\xf5\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13\x04\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://t\x00\x00\x00\x00\x00\x00\x00\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) 23:14:50 executing program 3: r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_BT_DEFER_SETUP(r0, 0x6a, 0x2, 0x0, 0x0) 23:14:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x541b, 0x0) 23:14:50 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) 23:14:50 executing program 3: r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_BT_DEFER_SETUP(r0, 0x6a, 0x2, 0x0, 0x0) 23:14:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x541b, 0x0) [ 581.220721][ T39] audit: type=1400 audit(1647990890.808:166659): avc: denied { read write } for pid=28987 comm="syz-executor.0" name="nullb0" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 23:14:50 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) 23:14:50 executing program 1: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f0000000140)='::,c-\n\xf5\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13\x04\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://t\x00\x00\x00\x00\x00\x00\x00\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) 23:14:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x541b, 0x0) 23:14:50 executing program 1: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f0000000140)='::,c-\n\xf5\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13\x04\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://t\x00\x00\x00\x00\x00\x00\x00\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) [ 581.251085][ T39] audit: type=1400 audit(1647990890.808:166660): avc: denied { open } for pid=28987 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 23:14:50 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) 23:14:50 executing program 3: r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_BT_DEFER_SETUP(r0, 0x6a, 0x2, 0x0, 0x0) 23:14:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4, 0x9}]}]}, 0x30}}, 0x0) 23:14:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x541b, 0x0) 23:14:50 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) 23:14:50 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) 23:14:50 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) [ 581.321141][T29012] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 23:14:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0xd68d5e9fc119a793, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) 23:14:50 executing program 0: socket(0x14, 0x0, 0x0) 23:14:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4, 0x9}]}]}, 0x30}}, 0x0) 23:14:50 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) [ 581.355875][ T39] audit: type=1400 audit(1647990890.938:166661): avc: denied { create } for pid=29018 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 581.365860][T29023] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 23:14:50 executing program 0: socket(0x14, 0x0, 0x0) 23:14:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0xd68d5e9fc119a793, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) 23:14:51 executing program 0: socket(0x14, 0x0, 0x0) 23:14:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4, 0x9}]}]}, 0x30}}, 0x0) 23:14:51 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) 23:14:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0xd68d5e9fc119a793, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) [ 581.420637][T29033] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 23:14:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4, 0x9}]}]}, 0x30}}, 0x0) 23:14:51 executing program 0: socket(0x14, 0x0, 0x0) 23:14:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0xd68d5e9fc119a793, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) 23:14:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0xd68d5e9fc119a793, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) [ 581.466972][T29041] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 23:14:51 executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$KDGKBMETA(r1, 0x541b, 0x0) 23:14:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0xd68d5e9fc119a793, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) 23:14:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)={{}, {0x0, 0x7}}) 23:14:51 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8104100, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="ad") 23:14:51 executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$KDGKBMETA(r1, 0x541b, 0x0) [ 581.512788][ T39] audit: type=1400 audit(1647990891.098:166662): avc: denied { unmount } for pid=22688 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 23:14:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r1, 0xd68d5e9fc119a793, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) 23:14:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)={{}, {0x0, 0x7}}) 23:14:51 executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$KDGKBMETA(r1, 0x541b, 0x0) 23:14:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)={{}, {0x0, 0x7}}) 23:14:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@updsa={0xf8, 0x1a, 0x231, 0x0, 0x0, {{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 23:14:51 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)={{}, {0x0, 0x7}}) [ 581.595249][ T39] audit: type=1400 audit(1647990891.178:166663): avc: denied { create } for pid=29062 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.624214][ T39] audit: type=1400 audit(1647990891.198:166664): avc: denied { write } for pid=29062 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.651157][ T39] audit: type=1400 audit(1647990891.198:166665): avc: denied { nlmsg_write } for pid=29062 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 23:14:51 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8104100, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="ad") 23:14:51 executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$KDGKBMETA(r1, 0x541b, 0x0) 23:14:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@updsa={0xf8, 0x1a, 0x231, 0x0, 0x0, {{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 23:14:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)={0x54, 0x12, 0x101, 0x0, 0x0, "", [@nested={0x39, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="98bd9dd0896e7fbc421f245f84092ed29079c6b1214204d25c68f6bd549b04888f01e293a4ef34f577a63c600d"]}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x102}]}, 0x54}], 0x1}, 0x0) 23:14:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@updsa={0xf8, 0x1a, 0x231, 0x0, 0x0, {{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 23:14:51 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000027, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffed8, 0x1d4}, 0x28) 23:14:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)={0x54, 0x12, 0x101, 0x0, 0x0, "", [@nested={0x39, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="98bd9dd0896e7fbc421f245f84092ed29079c6b1214204d25c68f6bd549b04888f01e293a4ef34f577a63c600d"]}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x102}]}, 0x54}], 0x1}, 0x0) 23:14:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@updsa={0xf8, 0x1a, 0x231, 0x0, 0x0, {{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 23:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0xb200000000000000}) 23:14:51 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 23:14:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)={0x54, 0x12, 0x101, 0x0, 0x0, "", [@nested={0x39, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="98bd9dd0896e7fbc421f245f84092ed29079c6b1214204d25c68f6bd549b04888f01e293a4ef34f577a63c600d"]}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x102}]}, 0x54}], 0x1}, 0x0) 23:14:51 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8104100, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="ad") [ 581.882826][T29096] fuseblk: Bad value for 'fd' 23:14:51 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/dmi', 0x301802, 0x4) 23:14:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x80002) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x4) 23:14:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)={0x54, 0x12, 0x101, 0x0, 0x0, "", [@nested={0x39, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="98bd9dd0896e7fbc421f245f84092ed29079c6b1214204d25c68f6bd549b04888f01e293a4ef34f577a63c600d"]}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x102}]}, 0x54}], 0x1}, 0x0) 23:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0xb200000000000000}) 23:14:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x80002) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x4) 23:14:51 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x80002) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x4) 23:14:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x80002) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x4) 23:14:51 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8104100, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)="ad") 23:14:51 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x80002) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x4) 23:14:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x80002) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x4) 23:14:51 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x80002) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x4) 23:14:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv_slave_0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x7fffffffffffffff}}) 23:14:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x10) 23:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0xb200000000000000}) 23:14:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv_slave_0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x7fffffffffffffff}}) 23:14:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x10) 23:14:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv_slave_0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x7fffffffffffffff}}) 23:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0xb200000000000000}) 23:14:51 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/98, 0x26, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9b41000014", 0x5, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 23:14:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x10) 23:14:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv_slave_0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x7fffffffffffffff}}) [ 582.304974][T29141] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x10) [ 582.331276][T29141] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:51 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="180200000000000000000000000b0000850000001700000095000000000000003464d071e1ff33a70e4dc4193cac18e78551e6ae5dc926959b167fc09e23ec3679d818a05d29fe4df3f31ec0789a22245c83b34eba7c1f17f47a2b8f59ca53db8512773b0e7de97ee58544dd2709f07143010098add07110efa83971bb667bee5beb5fbb58b070440dcff74c4c00b0e13212a55db69f166bdc6f9baf4ca444f46aacaf3f519cb8ce0265b20f57104f0d2ca46620e2843d64749695d1bfd7f792ae95a881942be1c5a4c004c546b0d7da604b48eb0a0c9d3501f64ae16ebe17c59639ef27738a7ec54b84fed4c903cffd6b00000079f00c62acf23e95998be42e6a1e520bb62377e95bb16911aa8517d2dc3fb0e601a1ddbaed1d6b3b3c8bbdde9214f23c1dee58e7ef72e71abf58da477505871857c58d66a45f0af309ff78757f159760368f4cf31767f9d948d6ea767bc6adc14cc99443a942ea4e91f8dfea55fff42fdea739a8087e708e60b073022a61cfadcccdf1d4c43b157a81c47344966cab55d4a57960a51473bb2a467688023832ddde07a6b3dd4bc2a3acc7a6d417ccf92e1145f224b982383e33db7e94eef19fd03541e69fb922778aae2bc73ee3e3e5c9ee06d143cfb65683fa12f818a4e96e3854b2e4a659f6956fbe5740b22e92c3fd528f153a434814a510de62f8efa80aec4e4d96af6283a87757077c83873b2dc8ea4f0fcae353b48e4fa72c9de04009bf209369dba0d4fe56eb5d75344b51e646289ec825e7ac009db345222bf531c23b5f08dcbfa8ad03ddc6a75e6f20b5edccc1f9e35221c23949ba0efb6bad58a28eaa59a87125f99482108ec3d2c1aa46d3c498e445e246d321bf7c0b9fcd128d41779930f0d59bb792ec594b00000000000000abf70616de934c30bc9d6b36dabc85bddd9806c1c28bd0a8c572a39061c7d8c2b9059f2a034eee70c1b2c813acb0b9cbc49ed788f94fd6f1c1ef3e343b732ee93e7ee8c9eb221018803b980187eefd0079f8c1c5f8c8a70957ec6dffca30e344fe491ca90f25032ada808ae3b1f8036f59a58cdd148fd32d0fb6d4355b77b95ca1b54536521204acbaa0d8efad1813b501b94c51d848186a359582850e9b90a264af94659c40a61da6cb70cd4abf38a38cc5f20ce144d095a6771d3fafde6c5b03c5774ce07e39ed4cfb4eab1952a7911566a30bfcf47b9a87227ca53b7b32d3ea0c1d680213c69f0a76d9a2cd3e3f57073ac7d3359ffedda72be9ef3fbcd687ad0617335ca66d6a7460d0699d86a15c1b4e0d27299bc74a29f8279e2fa70ec01eee9d8e667bdb3c9046e87a5563ef9e3f2a83dac207cf076ed6a1ca8f3c59bf8ebe0b7661b17744e56577986427c41e5317eed02982de48742a6c2d0d68343fc4b07aa148a8501668efbb8ff3c9d75ca2e5be493e486445ae469f37ce98b2559a3cee4fef7e309ef59cfd5cdb29ef129d719b36faf33f84c3d1a9f856bb5a9f9912c1c0104a1ed5a2836af63c0c1172"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="8dd71a5e1c094da4d019afb33033", 0x0, 0x10000, 0x0, 0x0, 0x4b, &(0x7f0000000000), &(0x7f0000001300)="293e07d15a352b2e14f4767ed316a184956156bbbc705b4804d2c7e2f1481b49c6b49b73ee5b6c9fcb721d42440b448cf6aa22cd129a9269fbc1f7d2f749dba24a79eafffe3978aced77d969c7ea29703f3eb4ac23bff60b5032e17be7d73e513b130a0dbb74b9c2c3f38b4178c045bd7f5ffeb689ec8c9d300051cf98fb67bd0d2ceb021f2fdf2143"}, 0x28) 23:14:51 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/98, 0x26, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9b41000014", 0x5, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 23:14:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8b326489ad38ea4ebb", 0x9}], 0x1}], 0x1, 0x24008841) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xff77) 23:14:52 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="8dd71a5e1c094da4d019afb33033", 0x0, 0x10000, 0x0, 0x0, 0x4b, &(0x7f0000000000), &(0x7f0000001300)="293e07d15a352b2e14f4767ed316a184956156bbbc705b4804d2c7e2f1481b49c6b49b73ee5b6c9fcb721d42440b448cf6aa22cd129a9269fbc1f7d2f749dba24a79eafffe3978aced77d969c7ea29703f3eb4ac23bff60b5032e17be7d73e513b130a0dbb74b9c2c3f38b4178c045bd7f5ffeb689ec8c9d300051cf98fb67bd0d2ceb021f2fdf2143"}, 0x28) 23:14:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 23:14:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8b326489ad38ea4ebb", 0x9}], 0x1}], 0x1, 0x24008841) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xff77) 23:14:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) [ 582.448738][T29156] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:52 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="8dd71a5e1c094da4d019afb33033", 0x0, 0x10000, 0x0, 0x0, 0x4b, &(0x7f0000000000), &(0x7f0000001300)="293e07d15a352b2e14f4767ed316a184956156bbbc705b4804d2c7e2f1481b49c6b49b73ee5b6c9fcb721d42440b448cf6aa22cd129a9269fbc1f7d2f749dba24a79eafffe3978aced77d969c7ea29703f3eb4ac23bff60b5032e17be7d73e513b130a0dbb74b9c2c3f38b4178c045bd7f5ffeb689ec8c9d300051cf98fb67bd0d2ceb021f2fdf2143"}, 0x28) [ 582.479075][T29156] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 23:14:52 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/98, 0x26, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9b41000014", 0x5, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 23:14:52 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="8dd71a5e1c094da4d019afb33033", 0x0, 0x10000, 0x0, 0x0, 0x4b, &(0x7f0000000000), &(0x7f0000001300)="293e07d15a352b2e14f4767ed316a184956156bbbc705b4804d2c7e2f1481b49c6b49b73ee5b6c9fcb721d42440b448cf6aa22cd129a9269fbc1f7d2f749dba24a79eafffe3978aced77d969c7ea29703f3eb4ac23bff60b5032e17be7d73e513b130a0dbb74b9c2c3f38b4178c045bd7f5ffeb689ec8c9d300051cf98fb67bd0d2ceb021f2fdf2143"}, 0x28) 23:14:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) 23:14:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8b326489ad38ea4ebb", 0x9}], 0x1}], 0x1, 0x24008841) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xff77) 23:14:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8b326489ad38ea4ebb", 0x9}], 0x1}], 0x1, 0x24008841) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xff77) 23:14:52 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006940)='ns/net\x00') writev(r0, 0x0, 0x0) [ 582.635122][T29177] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:52 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006940)='ns/net\x00') writev(r0, 0x0, 0x0) 23:14:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8b326489ad38ea4ebb", 0x9}], 0x1}], 0x1, 0x24008841) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xff77) [ 582.661082][T29177] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:52 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/98, 0x26, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9b41000014", 0x5, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 23:14:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8b326489ad38ea4ebb", 0x9}], 0x1}], 0x1, 0x24008841) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xff77) 23:14:52 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006940)='ns/net\x00') writev(r0, 0x0, 0x0) 23:14:52 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000006940)='ns/net\x00') writev(r0, 0x0, 0x0) 23:14:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = dup2(r0, r1) getsockname$packet(r2, 0x0, &(0x7f0000000240)) [ 582.784396][T29194] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r1 = accept$alg(r0, 0x0, 0x0) read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef) sendmmsg$alg(r1, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8b326489ad38ea4ebb", 0x9}], 0x1}], 0x1, 0x24008841) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xff77) 23:14:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2b28000}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 582.811191][T29194] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 23:14:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = dup2(r0, r1) getsockname$packet(r2, 0x0, &(0x7f0000000240)) 23:14:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2b28000}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 23:14:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x20, 0x1c, 0xd09, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}}, 0x0) 23:14:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = dup2(r0, r1) getsockname$packet(r2, 0x0, &(0x7f0000000240)) 23:14:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2b28000}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 23:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 23:14:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x2b28000}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 23:14:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = dup2(r0, r1) getsockname$packet(r2, 0x0, &(0x7f0000000240)) 23:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 582.945375][T29219] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 23:14:52 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) accept4$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x1000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x2}}]}}}]}, 0x50}, 0x1, 0x4c00000000000000}, 0x0) 23:14:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x20, 0x1c, 0xd09, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}}, 0x0) 23:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 23:14:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x88, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 23:14:52 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @private}}, 0x1e) 23:14:52 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:14:52 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 583.034684][ T39] audit: type=1400 audit(1647990892.618:166666): avc: denied { bind } for pid=29231 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 583.134621][T29226] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.143431][T29226] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.296796][T29226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.318521][T29226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.549804][T29229] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 23:14:53 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) accept4$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x1000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x2}}]}}}]}, 0x50}, 0x1, 0x4c00000000000000}, 0x0) 23:14:53 executing program 2: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 23:14:53 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:14:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x20, 0x1c, 0xd09, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}}, 0x0) 23:14:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x20, 0x1c, 0xd09, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x20}}, 0x0) 23:14:53 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:14:53 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) accept4$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x1000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x2}}]}}}]}, 0x50}, 0x1, 0x4c00000000000000}, 0x0) 23:14:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x3, 0x4}) [ 583.706582][T29253] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:14:54 executing program 2: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 23:14:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee3, &(0x7f0000000080)=ANY=[]) 23:14:54 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) accept4$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x1000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x2}}]}}}]}, 0x50}, 0x1, 0x4c00000000000000}, 0x0) 23:14:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 584.520633][T29264] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 584.614645][T29273] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:14:54 executing program 2: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 23:14:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 585.440095][T29283] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) [ 585.453988][T29282] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 585.473225][T29295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 23:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 585.543400][T29298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:14:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="66b9800000c00f326635000800000f30bad104b0f4ee66b9890300000f320f46d70f01c80f63f20f01df0f20d86635200000000f22d82e0fc7ac90bd66b8390000000f23c80f21f866350800c0000f23f8", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 585.621977][T29300] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 585.721159][T29303] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 23:14:55 executing program 2: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 23:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 23:14:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 23:14:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) [ 586.272236][T29309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:14:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) 23:14:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) [ 586.315000][T29308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:14:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) 23:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) [ 586.388082][T29322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:14:56 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 23:14:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 23:14:56 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 23:14:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) [ 587.124180][ T39] audit: type=1804 audit(1647990896.708:166667): pid=29325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1646/bus" dev="sda1" ino=1153 res=1 errno=0 [ 587.130827][T29328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 587.148867][T29330] loop2: detected capacity change from 0 to 264192 [ 587.164167][ T39] audit: type=1800 audit(1647990896.708:166668): pid=29325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1153 res=0 errno=0 23:14:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) [ 587.302554][T29330] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 587.311325][T29335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 587.324927][T29330] CPU: 2 PID: 29330 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 587.324979][T29330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 587.325015][T29330] Call Trace: [ 587.325048][T29330] [ 587.325056][T29330] dump_stack_lvl+0xcd/0x134 [ 587.371979][T29330] kmalloc_fix_flags+0x47/0x65 [ 587.378164][T29330] cache_grow_begin+0x30a/0x390 [ 587.386708][T29330] cache_alloc_refill+0x27f/0x380 [ 587.394109][T29330] kmem_cache_alloc+0x450/0x560 [ 587.399763][T29330] ? mempool_free+0x3b0/0x3b0 [ 587.405053][T29330] mempool_alloc+0x146/0x350 [ 587.412258][T29330] ? __lock_acquire+0xbc4/0x56c0 [ 587.418516][T29330] ? mempool_resize+0x7d0/0x7d0 [ 587.424516][T29330] ? fat_bmap+0x221/0x510 [ 587.431419][T29330] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 587.439091][T29330] ? fat_get_block+0x6bf/0x9f0 [ 587.444140][T29330] bio_alloc_bioset+0x31d/0x4e0 [ 587.449885][T29330] ? bvec_alloc+0x200/0x200 [ 587.454775][T29330] ? find_held_lock+0x2d/0x110 [ 587.459660][T29330] ? bdev_read_page+0x1c3/0x250 [ 587.464696][T29330] do_mpage_readpage+0xf37/0x1d70 [ 587.470514][T29330] ? mpage_writepage+0x120/0x120 [ 587.476813][T29330] ? __lock_acquire+0x1666/0x56c0 [ 587.482213][T29330] mpage_readahead+0x304/0x720 [ 587.488614][T29330] ? do_mpage_readpage+0x1d70/0x1d70 [ 587.495924][T29330] ? fat_add_cluster+0xf0/0xf0 [ 587.500819][T29330] ? folio_add_lru+0x353/0x6a0 [ 587.508226][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 587.516194][T29330] ? _fat_bmap+0x90/0x90 [ 587.521036][T29330] read_pages+0x1e4/0xfa0 [ 587.526087][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 587.533942][T29330] ? folio_add_lru+0x389/0x6a0 [ 587.539588][T29330] ? readahead_expand+0x8b0/0x8b0 [ 587.545559][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 587.552456][T29330] ? folio_alloc+0x3f/0x70 [ 587.557278][T29330] page_cache_ra_unbounded+0x552/0x740 [ 587.563362][T29330] ? read_pages+0xfa0/0xfa0 [ 587.567876][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 587.572888][T29330] ? create_prof_cpu_mask+0x20/0x20 [ 587.578169][T29330] ? arch_stack_walk+0x93/0xe0 [ 587.582987][T29330] ondemand_readahead+0x594/0x1090 [ 587.588639][T29330] page_cache_sync_ra+0x1cb/0x200 [ 587.593795][T29330] filemap_get_pages+0x2bf/0x16a0 23:14:57 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 587.599661][T29330] ? kasan_set_free_info+0x20/0x30 [ 587.604924][T29330] ? kfree+0xf8/0x2b0 [ 587.608961][T29330] ? iter_file_splice_write+0x605/0xc10 [ 587.615453][T29330] ? direct_splice_actor+0x110/0x180 [ 587.620708][T29330] ? filemap_fault+0x20f0/0x20f0 [ 587.625659][T29330] ? __x64_sys_sendfile64+0x1cc/0x210 [ 587.631103][T29330] ? do_syscall_64+0x35/0xb0 [ 587.635881][T29330] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 587.642035][T29330] filemap_read+0x328/0xb90 [ 587.647122][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 587.652158][T29330] ? filemap_get_pages+0x16a0/0x16a0 [ 587.657954][T29330] ? mark_held_locks+0x9f/0xe0 [ 587.663771][T29330] ? kfree+0x1be/0x2b0 [ 587.668437][T29330] ? iter_file_splice_write+0x605/0xc10 [ 587.674101][T29330] ? lockdep_hardirqs_on+0x79/0x100 [ 587.679317][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 587.686421][T29330] ? pipe_unlock+0x3d/0x70 [ 587.690935][T29330] generic_file_read_iter+0x3b6/0x5a0 [ 587.696709][T29330] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 587.702690][T29330] ? iov_iter_pipe+0xf4/0x2b0 [ 587.707830][T29330] generic_file_splice_read+0x45b/0x6d0 [ 587.713906][T29330] ? folio_flags.constprop.0+0x70/0x70 [ 587.719503][T29330] ? inode_security+0x105/0x130 [ 587.725447][T29330] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 587.731808][T29330] ? security_file_permission+0xab/0xd0 [ 587.737294][T29330] ? folio_flags.constprop.0+0x70/0x70 [ 587.742323][T29330] do_splice_to+0x1bf/0x250 [ 587.749967][T29330] ? direct_splice_actor+0x118/0x180 [ 587.755459][T29330] splice_direct_to_actor+0x2c2/0x8c0 [ 587.761168][T29330] ? generic_file_splice_read+0x6d0/0x6d0 [ 587.767093][T29330] ? do_splice_to+0x250/0x250 [ 587.771969][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 587.778107][T29330] ? security_file_permission+0xab/0xd0 [ 587.783588][T29330] do_splice_direct+0x1b3/0x280 [ 587.788436][T29330] ? splice_direct_to_actor+0x8c0/0x8c0 [ 587.793949][T29330] do_sendfile+0xaf2/0x1250 [ 587.798722][T29330] ? vfs_iocb_iter_write+0x490/0x490 [ 587.804174][T29330] ? __context_tracking_exit+0xb8/0xe0 [ 587.809600][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 587.814263][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 587.819240][T29330] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 587.824833][T29330] __x64_sys_sendfile64+0x1cc/0x210 [ 587.829814][T29330] ? __ia32_sys_sendfile+0x220/0x220 [ 587.834988][T29330] ? syscall_enter_from_user_mode+0x21/0x70 [ 587.840926][T29330] do_syscall_64+0x35/0xb0 [ 587.845245][T29330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 587.851183][T29330] RIP: 0033:0x7f9084bdb049 [ 587.855650][T29330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 587.874114][T29330] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 587.883621][T29330] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 587.892539][T29330] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 587.902621][T29330] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 587.912447][T29330] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 587.922140][T29330] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 587.932624][T29330] [ 587.936133][T29330] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 587.957223][T29330] CPU: 2 PID: 29330 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 587.968410][T29330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 587.979416][T29330] Call Trace: [ 587.983829][T29330] [ 587.988145][T29330] dump_stack_lvl+0xcd/0x134 [ 587.994213][T29330] kmalloc_fix_flags+0x47/0x65 [ 588.000474][T29330] cache_grow_begin+0x30a/0x390 [ 588.005924][T29330] ____cache_alloc_node+0x171/0x1d0 [ 588.011186][T29330] kmem_cache_alloc+0x367/0x560 [ 588.016306][T29330] ? mempool_free+0x3b0/0x3b0 [ 588.020978][T29330] mempool_alloc+0x146/0x350 [ 588.025670][T29330] ? __lock_acquire+0xbc4/0x56c0 [ 588.030823][T29330] ? mempool_resize+0x7d0/0x7d0 [ 588.035811][T29330] ? fat_bmap+0x221/0x510 [ 588.040192][T29330] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 588.046338][T29330] ? fat_get_block+0x6bf/0x9f0 [ 588.051190][T29330] bio_alloc_bioset+0x31d/0x4e0 [ 588.056278][T29330] ? bvec_alloc+0x200/0x200 [ 588.060840][T29330] ? find_held_lock+0x2d/0x110 [ 588.065828][T29330] ? bdev_read_page+0x1c3/0x250 [ 588.070935][T29330] do_mpage_readpage+0xf37/0x1d70 [ 588.076046][T29330] ? mpage_writepage+0x120/0x120 [ 588.081155][T29330] ? __lock_acquire+0x1666/0x56c0 [ 588.086212][T29330] mpage_readahead+0x304/0x720 [ 588.090878][T29330] ? do_mpage_readpage+0x1d70/0x1d70 [ 588.096125][T29330] ? fat_add_cluster+0xf0/0xf0 [ 588.100655][T29330] ? folio_add_lru+0x353/0x6a0 [ 588.105852][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 588.110542][T29330] ? _fat_bmap+0x90/0x90 [ 588.114781][T29330] read_pages+0x1e4/0xfa0 [ 588.119543][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 588.125957][T29330] ? folio_add_lru+0x389/0x6a0 [ 588.131069][T29330] ? readahead_expand+0x8b0/0x8b0 [ 588.136072][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 588.142570][T29330] ? folio_alloc+0x3f/0x70 [ 588.147044][T29330] page_cache_ra_unbounded+0x552/0x740 [ 588.152441][T29330] ? read_pages+0xfa0/0xfa0 [ 588.156717][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 588.161736][T29330] ? create_prof_cpu_mask+0x20/0x20 [ 588.167228][T29330] ? arch_stack_walk+0x93/0xe0 [ 588.172247][T29330] ondemand_readahead+0x594/0x1090 [ 588.177500][T29330] page_cache_sync_ra+0x1cb/0x200 [ 588.182580][T29330] filemap_get_pages+0x2bf/0x16a0 [ 588.187686][T29330] ? kasan_set_free_info+0x20/0x30 [ 588.192576][T29330] ? kfree+0xf8/0x2b0 [ 588.196473][T29330] ? iter_file_splice_write+0x605/0xc10 [ 588.202313][T29330] ? direct_splice_actor+0x110/0x180 [ 588.207854][T29330] ? filemap_fault+0x20f0/0x20f0 [ 588.213052][T29330] ? __x64_sys_sendfile64+0x1cc/0x210 [ 588.218862][T29330] ? do_syscall_64+0x35/0xb0 [ 588.223885][T29330] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 588.230854][T29330] filemap_read+0x328/0xb90 [ 588.235253][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 588.240165][T29330] ? filemap_get_pages+0x16a0/0x16a0 [ 588.246282][T29330] ? mark_held_locks+0x9f/0xe0 [ 588.251075][T29330] ? kfree+0x1be/0x2b0 [ 588.255189][T29330] ? iter_file_splice_write+0x605/0xc10 [ 588.260869][T29330] ? lockdep_hardirqs_on+0x79/0x100 [ 588.266956][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 588.273223][T29330] ? pipe_unlock+0x3d/0x70 [ 588.277666][T29330] generic_file_read_iter+0x3b6/0x5a0 [ 588.283080][T29330] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 588.289603][T29330] ? iov_iter_pipe+0xf4/0x2b0 [ 588.294487][T29330] generic_file_splice_read+0x45b/0x6d0 [ 588.299984][T29330] ? folio_flags.constprop.0+0x70/0x70 [ 588.306478][T29330] ? inode_security+0x105/0x130 [ 588.311494][T29330] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 588.319296][T29330] ? security_file_permission+0xab/0xd0 [ 588.326104][T29330] ? folio_flags.constprop.0+0x70/0x70 [ 588.332179][T29330] do_splice_to+0x1bf/0x250 [ 588.337865][T29330] ? direct_splice_actor+0x118/0x180 [ 588.343800][T29330] splice_direct_to_actor+0x2c2/0x8c0 [ 588.350713][T29330] ? generic_file_splice_read+0x6d0/0x6d0 [ 588.358155][T29330] ? do_splice_to+0x250/0x250 [ 588.363079][T29330] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 588.369644][T29330] ? security_file_permission+0xab/0xd0 [ 588.375265][T29330] do_splice_direct+0x1b3/0x280 [ 588.380301][T29330] ? splice_direct_to_actor+0x8c0/0x8c0 [ 588.386095][T29330] do_sendfile+0xaf2/0x1250 [ 588.391145][T29330] ? vfs_iocb_iter_write+0x490/0x490 [ 588.396989][T29330] ? __context_tracking_exit+0xb8/0xe0 [ 588.403367][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 588.409389][T29330] ? lock_downgrade+0x6e0/0x6e0 [ 588.415461][T29330] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 588.421723][T29330] __x64_sys_sendfile64+0x1cc/0x210 [ 588.428245][T29330] ? __ia32_sys_sendfile+0x220/0x220 [ 588.433899][T29330] ? syscall_enter_from_user_mode+0x21/0x70 [ 588.440423][T29330] do_syscall_64+0x35/0xb0 [ 588.445742][T29330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 588.452748][T29330] RIP: 0033:0x7f9084bdb049 [ 588.457847][T29330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 588.476689][T29330] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 588.484963][T29330] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 588.493055][T29330] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 588.501449][T29330] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 588.510363][T29330] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 588.518333][T29330] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 588.526362][T29330] [ 588.552276][ T39] audit: type=1804 audit(1647990898.138:166669): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1647/bus" dev="sda1" ino=1153 res=1 errno=0 23:14:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) 23:14:58 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 588.593681][ T39] audit: type=1800 audit(1647990898.138:166670): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1153 res=0 errno=0 23:14:58 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 588.712426][T29348] loop2: detected capacity change from 0 to 264192 [ 588.853735][T29348] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 588.878229][T29348] CPU: 1 PID: 29348 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 588.891503][T29348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 588.902389][T29348] Call Trace: [ 588.906779][T29348] [ 588.910218][T29348] dump_stack_lvl+0xcd/0x134 [ 588.915921][T29348] kmalloc_fix_flags+0x47/0x65 [ 588.921216][T29348] cache_grow_begin+0x30a/0x390 [ 588.927659][T29348] cache_alloc_refill+0x27f/0x380 [ 588.935027][T29348] kmem_cache_alloc+0x450/0x560 [ 588.940844][T29348] bvec_alloc+0x100/0x200 [ 588.947483][T29348] bio_alloc_bioset+0x39f/0x4e0 [ 588.953994][T29348] ? bvec_alloc+0x200/0x200 [ 588.960355][T29348] ? find_held_lock+0x2d/0x110 [ 588.967175][T29348] ? bdev_read_page+0x1c3/0x250 [ 588.972802][T29348] do_mpage_readpage+0xf37/0x1d70 [ 588.978037][T29348] ? mpage_writepage+0x120/0x120 [ 588.983041][T29348] ? __lock_acquire+0x1666/0x56c0 [ 588.988380][T29348] mpage_readahead+0x304/0x720 [ 588.993846][T29348] ? do_mpage_readpage+0x1d70/0x1d70 [ 589.000261][T29348] ? fat_add_cluster+0xf0/0xf0 [ 589.005758][T29348] ? folio_add_lru+0x353/0x6a0 [ 589.011556][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.017565][T29348] ? _fat_bmap+0x90/0x90 [ 589.023371][T29348] read_pages+0x1e4/0xfa0 [ 589.028990][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 589.037855][T29348] ? folio_add_lru+0x389/0x6a0 [ 589.043315][T29348] ? readahead_expand+0x8b0/0x8b0 [ 589.049227][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 589.056219][T29348] ? folio_alloc+0x3f/0x70 [ 589.061784][T29348] page_cache_ra_unbounded+0x552/0x740 [ 589.067758][T29348] ? read_pages+0xfa0/0xfa0 [ 589.072476][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.078477][T29348] ? create_prof_cpu_mask+0x20/0x20 [ 589.083900][T29348] ? arch_stack_walk+0x93/0xe0 [ 589.089054][T29348] ondemand_readahead+0x594/0x1090 [ 589.094693][T29348] page_cache_sync_ra+0x1cb/0x200 23:14:58 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 589.100026][T29348] filemap_get_pages+0x2bf/0x16a0 [ 589.105831][T29348] ? kasan_set_free_info+0x20/0x30 [ 589.111706][T29348] ? kfree+0xf8/0x2b0 [ 589.116463][T29348] ? iter_file_splice_write+0x605/0xc10 [ 589.122081][T29348] ? direct_splice_actor+0x110/0x180 [ 589.128256][T29348] ? filemap_fault+0x20f0/0x20f0 [ 589.134461][T29348] ? __x64_sys_sendfile64+0x1cc/0x210 [ 589.140641][T29348] ? do_syscall_64+0x35/0xb0 [ 589.145261][T29348] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 589.152880][T29348] filemap_read+0x328/0xb90 [ 589.158774][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.164655][T29348] ? filemap_get_pages+0x16a0/0x16a0 [ 589.171461][T29348] ? mark_held_locks+0x9f/0xe0 [ 589.177001][T29348] ? kfree+0x1be/0x2b0 [ 589.181283][T29348] ? iter_file_splice_write+0x605/0xc10 [ 589.182664][ T39] audit: type=1804 audit(1647990898.768:166671): pid=29354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1648/bus" dev="sda1" ino=1153 res=1 errno=0 [ 589.187757][T29348] ? lockdep_hardirqs_on+0x79/0x100 [ 589.187799][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 589.187829][T29348] ? pipe_unlock+0x3d/0x70 [ 589.231752][ T39] audit: type=1800 audit(1647990898.768:166672): pid=29354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1153 res=0 errno=0 [ 589.235961][T29348] generic_file_read_iter+0x3b6/0x5a0 [ 589.268624][T29348] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 589.275185][T29348] ? iov_iter_pipe+0xf4/0x2b0 [ 589.280874][T29348] generic_file_splice_read+0x45b/0x6d0 [ 589.287544][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 589.293834][T29348] ? inode_security+0x105/0x130 [ 589.301014][T29348] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 589.309500][T29348] ? security_file_permission+0xab/0xd0 [ 589.317996][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 589.325610][T29348] do_splice_to+0x1bf/0x250 [ 589.334410][T29348] ? direct_splice_actor+0x118/0x180 [ 589.341552][T29348] splice_direct_to_actor+0x2c2/0x8c0 [ 589.347462][T29348] ? generic_file_splice_read+0x6d0/0x6d0 [ 589.353845][T29348] ? do_splice_to+0x250/0x250 [ 589.358937][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 589.365736][T29348] ? security_file_permission+0xab/0xd0 [ 589.371680][T29348] do_splice_direct+0x1b3/0x280 [ 589.376862][T29348] ? splice_direct_to_actor+0x8c0/0x8c0 [ 589.382750][T29348] do_sendfile+0xaf2/0x1250 [ 589.389240][T29348] ? vfs_iocb_iter_write+0x490/0x490 [ 589.396912][T29348] ? __context_tracking_exit+0xb8/0xe0 [ 589.403382][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.409427][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.418159][T29348] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 589.425337][T29348] __x64_sys_sendfile64+0x1cc/0x210 [ 589.431445][T29348] ? __ia32_sys_sendfile+0x220/0x220 [ 589.439192][T29348] ? syscall_enter_from_user_mode+0x21/0x70 [ 589.447838][T29348] do_syscall_64+0x35/0xb0 [ 589.452401][T29348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 589.459300][T29348] RIP: 0033:0x7f9084bdb049 [ 589.464295][T29348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 589.488595][T29348] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 589.499128][T29348] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 589.509897][T29348] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 589.520721][T29348] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 589.537642][T29348] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 589.548464][T29348] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 589.557692][T29348] [ 589.565500][T29348] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 589.593406][T29348] CPU: 1 PID: 29348 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 589.606954][T29348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 589.616974][T29348] Call Trace: [ 589.620331][T29348] [ 589.623274][T29348] dump_stack_lvl+0xcd/0x134 [ 589.628060][T29348] kmalloc_fix_flags+0x47/0x65 23:14:59 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 589.632872][T29348] cache_grow_begin+0x30a/0x390 [ 589.638178][T29348] ____cache_alloc_node+0x171/0x1d0 [ 589.643361][T29348] kmem_cache_alloc+0x367/0x560 [ 589.648160][T29348] bvec_alloc+0x100/0x200 [ 589.652482][T29348] bio_alloc_bioset+0x39f/0x4e0 [ 589.657267][T29348] ? bvec_alloc+0x200/0x200 [ 589.661801][T29348] ? find_held_lock+0x2d/0x110 [ 589.665355][ T39] audit: type=1804 audit(1647990899.248:166673): pid=29356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1649/bus" dev="sda1" ino=1153 res=1 errno=0 [ 589.666661][T29348] ? bdev_read_page+0x1c3/0x250 [ 589.666684][T29348] do_mpage_readpage+0xf37/0x1d70 [ 589.666703][T29348] ? mpage_writepage+0x120/0x120 [ 589.666719][T29348] ? __lock_acquire+0x1666/0x56c0 [ 589.714480][T29348] mpage_readahead+0x304/0x720 [ 589.719276][T29348] ? do_mpage_readpage+0x1d70/0x1d70 [ 589.724841][T29348] ? fat_add_cluster+0xf0/0xf0 [ 589.730016][T29348] ? folio_add_lru+0x353/0x6a0 [ 589.735002][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.741139][T29348] ? _fat_bmap+0x90/0x90 [ 589.742161][ T39] audit: type=1800 audit(1647990899.248:166674): pid=29356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1153 res=0 errno=0 [ 589.754883][T29348] read_pages+0x1e4/0xfa0 [ 589.754913][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 589.754934][T29348] ? folio_add_lru+0x389/0x6a0 [ 589.754949][T29348] ? readahead_expand+0x8b0/0x8b0 [ 589.754964][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 589.754983][T29348] ? folio_alloc+0x3f/0x70 [ 589.755001][T29348] page_cache_ra_unbounded+0x552/0x740 [ 589.755017][T29348] ? read_pages+0xfa0/0xfa0 [ 589.755031][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.755085][T29348] ? create_prof_cpu_mask+0x20/0x20 [ 589.853109][T29348] ? arch_stack_walk+0x93/0xe0 [ 589.862822][T29348] ondemand_readahead+0x594/0x1090 [ 589.869219][T29348] page_cache_sync_ra+0x1cb/0x200 [ 589.875861][T29348] filemap_get_pages+0x2bf/0x16a0 [ 589.882439][T29348] ? kasan_set_free_info+0x20/0x30 [ 589.888504][T29348] ? kfree+0xf8/0x2b0 [ 589.893320][T29348] ? iter_file_splice_write+0x605/0xc10 [ 589.899483][T29348] ? direct_splice_actor+0x110/0x180 [ 589.905348][T29348] ? filemap_fault+0x20f0/0x20f0 [ 589.911543][T29348] ? __x64_sys_sendfile64+0x1cc/0x210 [ 589.918751][T29348] ? do_syscall_64+0x35/0xb0 [ 589.924247][T29348] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 589.930702][T29348] filemap_read+0x328/0xb90 [ 589.935502][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 589.940478][T29348] ? filemap_get_pages+0x16a0/0x16a0 [ 589.946134][T29348] ? mark_held_locks+0x9f/0xe0 [ 589.951520][T29348] ? kfree+0x1be/0x2b0 [ 589.957062][T29348] ? iter_file_splice_write+0x605/0xc10 [ 589.962435][T29348] ? lockdep_hardirqs_on+0x79/0x100 [ 589.968085][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 589.977435][T29348] ? pipe_unlock+0x3d/0x70 [ 589.986605][T29348] generic_file_read_iter+0x3b6/0x5a0 [ 589.993805][T29348] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 590.003026][T29348] ? iov_iter_pipe+0xf4/0x2b0 [ 590.010304][T29348] generic_file_splice_read+0x45b/0x6d0 [ 590.016294][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 590.023040][T29348] ? inode_security+0x105/0x130 [ 590.028604][T29348] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 590.036687][T29348] ? security_file_permission+0xab/0xd0 [ 590.044152][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 590.050357][T29348] do_splice_to+0x1bf/0x250 [ 590.055911][T29348] ? direct_splice_actor+0x118/0x180 [ 590.063287][T29348] splice_direct_to_actor+0x2c2/0x8c0 [ 590.070267][T29348] ? generic_file_splice_read+0x6d0/0x6d0 [ 590.076880][T29348] ? do_splice_to+0x250/0x250 [ 590.086316][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 23:14:59 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 590.092529][T29348] ? security_file_permission+0xab/0xd0 [ 590.097826][T29348] do_splice_direct+0x1b3/0x280 [ 590.103182][T29348] ? splice_direct_to_actor+0x8c0/0x8c0 [ 590.109321][T29348] do_sendfile+0xaf2/0x1250 [ 590.113911][T29348] ? vfs_iocb_iter_write+0x490/0x490 [ 590.120038][T29348] ? __context_tracking_exit+0xb8/0xe0 [ 590.126393][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 590.131705][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 590.136252][T29348] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 590.142483][T29348] __x64_sys_sendfile64+0x1cc/0x210 [ 590.147435][T29348] ? __ia32_sys_sendfile+0x220/0x220 [ 590.152419][T29348] ? syscall_enter_from_user_mode+0x21/0x70 [ 590.158026][T29348] do_syscall_64+0x35/0xb0 [ 590.162150][T29348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 590.167516][T29348] RIP: 0033:0x7f9084bdb049 [ 590.172095][T29348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 590.189986][T29348] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 590.198205][T29348] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 590.205497][T29348] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 590.212969][T29348] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 590.220273][T29348] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 590.227688][T29348] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 590.235062][T29348] [ 590.274685][T29348] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 590.298945][T29348] CPU: 0 PID: 29348 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 590.309325][T29348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 590.318434][T29348] Call Trace: 23:14:59 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 590.321710][T29348] [ 590.325115][T29348] dump_stack_lvl+0xcd/0x134 [ 590.330979][T29348] kmalloc_fix_flags+0x47/0x65 [ 590.336495][T29348] cache_grow_begin+0x30a/0x390 [ 590.341888][T29348] cache_alloc_refill+0x27f/0x380 [ 590.346891][T29348] kmem_cache_alloc+0x450/0x560 [ 590.352261][T29348] ? mempool_free+0x3b0/0x3b0 [ 590.356971][T29348] mempool_alloc+0x146/0x350 [ 590.361749][T29348] ? __lock_acquire+0xbc4/0x56c0 [ 590.366804][T29348] ? mempool_resize+0x7d0/0x7d0 [ 590.371882][T29348] ? fat_bmap+0x221/0x510 [ 590.376377][T29348] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 590.383021][T29348] ? fat_get_block+0x6bf/0x9f0 [ 590.387906][T29348] bio_alloc_bioset+0x31d/0x4e0 [ 590.393180][T29348] ? bvec_alloc+0x200/0x200 [ 590.397861][T29348] ? find_held_lock+0x2d/0x110 [ 590.403112][T29348] ? bdev_read_page+0x1c3/0x250 [ 590.408149][T29348] do_mpage_readpage+0xf37/0x1d70 [ 590.413068][T29348] ? mpage_writepage+0x120/0x120 [ 590.418745][T29348] ? __lock_acquire+0x1666/0x56c0 [ 590.424740][T29348] mpage_readahead+0x304/0x720 [ 590.430683][T29348] ? do_mpage_readpage+0x1d70/0x1d70 [ 590.436782][T29348] ? fat_add_cluster+0xf0/0xf0 [ 590.442676][T29348] ? folio_add_lru+0x353/0x6a0 [ 590.448670][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 590.455098][T29348] ? _fat_bmap+0x90/0x90 [ 590.460522][T29348] read_pages+0x1e4/0xfa0 [ 590.465871][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.473470][T29348] ? folio_add_lru+0x389/0x6a0 [ 590.479054][T29348] ? readahead_expand+0x8b0/0x8b0 [ 590.485152][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.492707][T29348] ? folio_alloc+0x3f/0x70 [ 590.497491][T29348] page_cache_ra_unbounded+0x552/0x740 [ 590.503741][T29348] ? read_pages+0xfa0/0xfa0 [ 590.508470][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 590.513662][T29348] ? create_prof_cpu_mask+0x20/0x20 [ 590.519344][T29348] ? arch_stack_walk+0x93/0xe0 [ 590.524815][T29348] ondemand_readahead+0x594/0x1090 [ 590.531040][T29348] page_cache_sync_ra+0x1cb/0x200 [ 590.536452][T29348] filemap_get_pages+0x2bf/0x16a0 [ 590.541760][T29348] ? kasan_set_free_info+0x20/0x30 [ 590.546959][T29348] ? kfree+0xf8/0x2b0 [ 590.551021][T29348] ? iter_file_splice_write+0x605/0xc10 [ 590.556627][T29348] ? direct_splice_actor+0x110/0x180 [ 590.562200][T29348] ? filemap_fault+0x20f0/0x20f0 [ 590.567230][T29348] ? __x64_sys_sendfile64+0x1cc/0x210 [ 590.572916][T29348] ? do_syscall_64+0x35/0xb0 [ 590.578090][T29348] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 590.584451][T29348] filemap_read+0x328/0xb90 [ 590.589327][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 590.595014][T29348] ? filemap_get_pages+0x16a0/0x16a0 [ 590.600594][T29348] ? mark_held_locks+0x9f/0xe0 [ 590.605652][T29348] ? kfree+0x1be/0x2b0 [ 590.610058][T29348] ? iter_file_splice_write+0x605/0xc10 [ 590.616010][T29348] ? lockdep_hardirqs_on+0x79/0x100 [ 590.621438][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.627958][T29348] ? pipe_unlock+0x3d/0x70 [ 590.632661][T29348] generic_file_read_iter+0x3b6/0x5a0 [ 590.638250][T29348] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 590.644117][T29348] ? iov_iter_pipe+0xf4/0x2b0 [ 590.648965][T29348] generic_file_splice_read+0x45b/0x6d0 [ 590.654735][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 590.660508][T29348] ? inode_security+0x105/0x130 [ 590.665490][T29348] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 590.671934][T29348] ? security_file_permission+0xab/0xd0 [ 590.677564][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 590.682875][T29348] do_splice_to+0x1bf/0x250 [ 590.687327][T29348] ? direct_splice_actor+0x118/0x180 [ 590.692447][T29348] splice_direct_to_actor+0x2c2/0x8c0 [ 590.697665][T29348] ? generic_file_splice_read+0x6d0/0x6d0 [ 590.703468][T29348] ? do_splice_to+0x250/0x250 [ 590.708431][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.715552][T29348] ? security_file_permission+0xab/0xd0 [ 590.722463][T29348] do_splice_direct+0x1b3/0x280 [ 590.727747][T29348] ? splice_direct_to_actor+0x8c0/0x8c0 [ 590.733771][T29348] do_sendfile+0xaf2/0x1250 [ 590.738943][T29348] ? vfs_iocb_iter_write+0x490/0x490 [ 590.745614][T29348] ? __context_tracking_exit+0xb8/0xe0 [ 590.751886][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 590.757114][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 590.762964][T29348] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 590.769011][T29348] __x64_sys_sendfile64+0x1cc/0x210 [ 590.774328][T29348] ? __ia32_sys_sendfile+0x220/0x220 [ 590.779750][T29348] ? syscall_enter_from_user_mode+0x21/0x70 [ 590.785912][T29348] do_syscall_64+0x35/0xb0 [ 590.790576][T29348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 590.796441][T29348] RIP: 0033:0x7f9084bdb049 [ 590.801387][T29348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 590.821762][T29348] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 590.830500][T29348] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 590.839004][T29348] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 590.848605][T29348] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 590.858302][T29348] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 590.866757][T29348] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 590.874735][T29348] [ 590.877976][T29348] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 590.898579][T29348] CPU: 0 PID: 29348 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 590.909298][T29348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 590.919363][T29348] Call Trace: [ 590.923212][T29348] [ 590.926203][T29348] dump_stack_lvl+0xcd/0x134 [ 590.930850][T29348] kmalloc_fix_flags+0x47/0x65 [ 590.936333][T29348] cache_grow_begin+0x30a/0x390 [ 590.941333][T29348] ____cache_alloc_node+0x171/0x1d0 [ 590.946713][T29348] kmem_cache_alloc+0x367/0x560 [ 590.952110][T29348] ? mempool_free+0x3b0/0x3b0 [ 590.957230][T29348] mempool_alloc+0x146/0x350 [ 590.962034][T29348] ? __lock_acquire+0xbc4/0x56c0 [ 590.967079][T29348] ? mempool_resize+0x7d0/0x7d0 [ 590.972629][T29348] ? fat_bmap+0x221/0x510 [ 590.977461][T29348] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 590.983921][T29348] ? fat_get_block+0x6bf/0x9f0 [ 590.988590][T29348] bio_alloc_bioset+0x31d/0x4e0 [ 590.994301][T29348] ? bvec_alloc+0x200/0x200 [ 590.999187][T29348] ? find_held_lock+0x2d/0x110 [ 591.003990][T29348] ? bdev_read_page+0x1c3/0x250 [ 591.009306][T29348] do_mpage_readpage+0xf37/0x1d70 [ 591.015978][T29348] ? mpage_writepage+0x120/0x120 [ 591.020948][T29348] ? __lock_acquire+0x1666/0x56c0 [ 591.026181][T29348] mpage_readahead+0x304/0x720 [ 591.030859][T29348] ? do_mpage_readpage+0x1d70/0x1d70 [ 591.037656][T29348] ? fat_add_cluster+0xf0/0xf0 [ 591.042740][T29348] ? folio_add_lru+0x353/0x6a0 [ 591.047547][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 591.053440][T29348] ? _fat_bmap+0x90/0x90 [ 591.058571][T29348] read_pages+0x1e4/0xfa0 [ 591.063090][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.069294][T29348] ? folio_add_lru+0x389/0x6a0 [ 591.075193][T29348] ? readahead_expand+0x8b0/0x8b0 [ 591.080575][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.086400][T29348] ? folio_alloc+0x3f/0x70 [ 591.090471][T29348] page_cache_ra_unbounded+0x552/0x740 [ 591.096356][T29348] ? read_pages+0xfa0/0xfa0 [ 591.101190][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 591.107186][T29348] ? create_prof_cpu_mask+0x20/0x20 [ 591.113816][T29348] ? arch_stack_walk+0x93/0xe0 [ 591.119724][T29348] ondemand_readahead+0x594/0x1090 [ 591.125242][T29348] page_cache_sync_ra+0x1cb/0x200 [ 591.130448][T29348] filemap_get_pages+0x2bf/0x16a0 [ 591.136348][T29348] ? kasan_set_free_info+0x20/0x30 [ 591.141752][T29348] ? kfree+0xf8/0x2b0 [ 591.146085][T29348] ? iter_file_splice_write+0x605/0xc10 [ 591.151553][T29348] ? direct_splice_actor+0x110/0x180 [ 591.157192][T29348] ? filemap_fault+0x20f0/0x20f0 [ 591.162056][T29348] ? __x64_sys_sendfile64+0x1cc/0x210 [ 591.167402][T29348] ? do_syscall_64+0x35/0xb0 [ 591.172467][T29348] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 591.179842][T29348] filemap_read+0x328/0xb90 [ 591.184809][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 591.190303][T29348] ? filemap_get_pages+0x16a0/0x16a0 [ 591.196719][T29348] ? mark_held_locks+0x9f/0xe0 [ 591.201772][T29348] ? kfree+0x1be/0x2b0 [ 591.206055][T29348] ? iter_file_splice_write+0x605/0xc10 [ 591.213401][T29348] ? lockdep_hardirqs_on+0x79/0x100 [ 591.218917][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.226241][T29348] ? pipe_unlock+0x3d/0x70 [ 591.230777][T29348] generic_file_read_iter+0x3b6/0x5a0 [ 591.236395][T29348] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 591.242221][T29348] ? iov_iter_pipe+0xf4/0x2b0 [ 591.247180][T29348] generic_file_splice_read+0x45b/0x6d0 [ 591.252721][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 591.258310][T29348] ? inode_security+0x105/0x130 [ 591.262997][T29348] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 591.269544][T29348] ? security_file_permission+0xab/0xd0 [ 591.275287][T29348] ? folio_flags.constprop.0+0x70/0x70 [ 591.280855][T29348] do_splice_to+0x1bf/0x250 [ 591.285353][T29348] ? direct_splice_actor+0x118/0x180 [ 591.290867][T29348] splice_direct_to_actor+0x2c2/0x8c0 [ 591.296087][T29348] ? generic_file_splice_read+0x6d0/0x6d0 [ 591.301868][T29348] ? do_splice_to+0x250/0x250 [ 591.306799][T29348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.313177][T29348] ? security_file_permission+0xab/0xd0 [ 591.318599][T29348] do_splice_direct+0x1b3/0x280 [ 591.323421][T29348] ? splice_direct_to_actor+0x8c0/0x8c0 [ 591.328969][T29348] do_sendfile+0xaf2/0x1250 [ 591.333769][T29348] ? vfs_iocb_iter_write+0x490/0x490 [ 591.339043][T29348] ? __context_tracking_exit+0xb8/0xe0 [ 591.344632][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 591.349604][T29348] ? lock_downgrade+0x6e0/0x6e0 [ 591.354617][T29348] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 591.360740][T29348] __x64_sys_sendfile64+0x1cc/0x210 [ 591.366143][T29348] ? __ia32_sys_sendfile+0x220/0x220 [ 591.371806][T29348] ? syscall_enter_from_user_mode+0x21/0x70 [ 591.377755][T29348] do_syscall_64+0x35/0xb0 [ 591.382374][T29348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 591.388276][T29348] RIP: 0033:0x7f9084bdb049 [ 591.392901][T29348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 591.412834][T29348] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 591.421363][T29348] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 591.429361][T29348] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 591.437394][T29348] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 591.445513][T29348] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 591.453618][T29348] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 591.461459][T29348] 23:15:01 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 23:15:01 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 23:15:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) 23:15:01 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 591.626744][T29380] loop2: detected capacity change from 0 to 264192 [ 591.733959][T29380] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 591.754973][T29380] CPU: 0 PID: 29380 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 591.765470][T29380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 591.774810][T29380] Call Trace: [ 591.778091][T29380] [ 591.781133][T29380] dump_stack_lvl+0xcd/0x134 [ 591.785574][T29380] kmalloc_fix_flags+0x47/0x65 [ 591.791516][T29380] cache_grow_begin+0x30a/0x390 [ 591.797460][T29380] ? lock_chain_count+0x20/0x20 [ 591.803494][T29380] cache_alloc_refill+0x27f/0x380 [ 591.809627][T29380] kmem_cache_alloc+0x450/0x560 [ 591.815662][T29380] ? mempool_free+0x3b0/0x3b0 [ 591.822004][T29380] mempool_alloc+0x146/0x350 [ 591.827996][T29380] ? __lock_acquire+0xbc4/0x56c0 [ 591.834449][T29380] ? mempool_resize+0x7d0/0x7d0 [ 591.840600][T29380] ? fat_bmap+0x221/0x510 [ 591.845403][T29380] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 591.851878][T29380] ? fat_get_block+0x6bf/0x9f0 [ 591.856887][T29380] bio_alloc_bioset+0x31d/0x4e0 [ 591.861729][T29380] ? bvec_alloc+0x200/0x200 [ 591.866369][T29380] ? memset+0x20/0x40 [ 591.871276][T29380] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 591.877649][T29380] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 591.883398][T29380] ? zero_user_segments.constprop.0+0x308/0x430 [ 591.890125][T29380] do_mpage_readpage+0xf37/0x1d70 [ 591.895234][T29380] ? mpage_writepage+0x120/0x120 [ 591.901288][T29380] ? __xa_clear_mark+0x110/0x110 [ 591.907743][T29380] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 591.915469][T29380] ? __lock_acquire+0x1666/0x56c0 [ 591.921722][T29380] mpage_readahead+0x304/0x720 [ 591.927894][T29380] ? do_mpage_readpage+0x1d70/0x1d70 [ 591.934025][T29380] ? fat_add_cluster+0xf0/0xf0 [ 591.939368][T29380] ? folio_add_lru+0x353/0x6a0 [ 591.944255][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 591.949262][T29380] ? _fat_bmap+0x90/0x90 [ 591.953435][T29380] read_pages+0x1e4/0xfa0 [ 591.958440][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.965446][T29380] ? folio_add_lru+0x389/0x6a0 [ 591.970727][T29380] ? readahead_expand+0x8b0/0x8b0 [ 591.975599][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.981784][T29380] ? folio_alloc+0x3f/0x70 [ 591.985939][T29380] page_cache_ra_unbounded+0x552/0x740 [ 591.992000][T29380] ? read_pages+0xfa0/0xfa0 [ 591.996742][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 592.002007][T29380] ? i8237A_resume+0x80/0x90 [ 592.006935][T29380] ondemand_readahead+0x594/0x1090 [ 592.012598][T29380] page_cache_sync_ra+0x1cb/0x200 [ 592.017804][T29380] filemap_get_pages+0x2bf/0x16a0 [ 592.023029][T29380] ? kasan_set_free_info+0x20/0x30 [ 592.028116][T29380] ? kfree+0xf8/0x2b0 [ 592.032099][T29380] ? iter_file_splice_write+0x605/0xc10 [ 592.038116][T29380] ? filemap_fault+0x20f0/0x20f0 [ 592.043453][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 592.049574][T29380] ? copy_page_to_iter+0x5b4/0xe50 [ 592.054529][T29380] filemap_read+0x328/0xb90 [ 592.059084][T29380] ? filemap_get_pages+0x16a0/0x16a0 [ 592.064180][T29380] ? lockdep_hardirqs_on+0x79/0x100 [ 592.069233][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 592.075203][T29380] ? pipe_unlock+0x3d/0x70 [ 592.080486][T29380] generic_file_read_iter+0x3b6/0x5a0 [ 592.085832][T29380] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 592.091860][T29380] ? iov_iter_pipe+0xf4/0x2b0 [ 592.097729][T29380] generic_file_splice_read+0x45b/0x6d0 [ 592.103906][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 592.109610][T29380] ? inode_security+0x105/0x130 [ 592.114692][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 592.121715][T29380] ? security_file_permission+0xab/0xd0 [ 592.127734][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 592.133281][T29380] do_splice_to+0x1bf/0x250 [ 592.138455][T29380] ? direct_splice_actor+0x118/0x180 [ 592.144277][T29380] splice_direct_to_actor+0x2c2/0x8c0 [ 592.149735][T29380] ? generic_file_splice_read+0x6d0/0x6d0 [ 592.155396][T29380] ? do_splice_to+0x250/0x250 [ 592.160268][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 592.166091][T29380] ? security_file_permission+0xab/0xd0 [ 592.171786][T29380] do_splice_direct+0x1b3/0x280 [ 592.176723][T29380] ? splice_direct_to_actor+0x8c0/0x8c0 [ 592.182550][T29380] do_sendfile+0xaf2/0x1250 [ 592.187417][T29380] ? vfs_iocb_iter_write+0x490/0x490 [ 592.193105][T29380] ? __context_tracking_exit+0xb8/0xe0 [ 592.198938][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 592.204446][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 592.209965][T29380] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 592.216207][T29380] __x64_sys_sendfile64+0x1cc/0x210 [ 592.222186][T29380] ? __ia32_sys_sendfile+0x220/0x220 [ 592.227980][T29380] ? syscall_enter_from_user_mode+0x21/0x70 [ 592.234749][T29380] do_syscall_64+0x35/0xb0 [ 592.239528][T29380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 592.246049][T29380] RIP: 0033:0x7f9084bdb049 [ 592.251944][T29380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 592.274218][T29380] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 592.283960][T29380] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 592.292637][T29380] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 592.302514][T29380] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 592.312055][T29380] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 592.321626][T29380] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 592.330815][T29380] [ 592.333822][T29380] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 592.356821][T29380] CPU: 0 PID: 29380 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 592.369021][T29380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 592.379715][T29380] Call Trace: [ 592.383669][T29380] [ 592.387369][T29380] dump_stack_lvl+0xcd/0x134 [ 592.392531][T29380] kmalloc_fix_flags+0x47/0x65 [ 592.398028][T29380] cache_grow_begin+0x30a/0x390 [ 592.403607][T29380] ____cache_alloc_node+0x171/0x1d0 [ 592.410456][T29380] kmem_cache_alloc+0x367/0x560 [ 592.416500][T29380] ? mempool_free+0x3b0/0x3b0 [ 592.422245][T29380] mempool_alloc+0x146/0x350 [ 592.428087][T29380] ? __lock_acquire+0xbc4/0x56c0 [ 592.434458][T29380] ? mempool_resize+0x7d0/0x7d0 [ 592.439618][T29380] ? fat_bmap+0x221/0x510 [ 592.444196][T29380] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 592.451035][T29380] ? fat_get_block+0x6bf/0x9f0 [ 592.456313][T29380] bio_alloc_bioset+0x31d/0x4e0 [ 592.461568][T29380] ? bvec_alloc+0x200/0x200 [ 592.466722][T29380] ? memset+0x20/0x40 [ 592.471344][T29380] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 592.478405][T29380] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 592.483771][T29380] ? zero_user_segments.constprop.0+0x308/0x430 [ 592.490105][T29380] do_mpage_readpage+0xf37/0x1d70 [ 592.496458][T29380] ? mpage_writepage+0x120/0x120 [ 592.501637][T29380] ? __xa_clear_mark+0x110/0x110 [ 592.506708][T29380] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 592.512737][T29380] ? __lock_acquire+0x1666/0x56c0 [ 592.517881][T29380] mpage_readahead+0x304/0x720 [ 592.523029][T29380] ? do_mpage_readpage+0x1d70/0x1d70 [ 592.529374][T29380] ? fat_add_cluster+0xf0/0xf0 [ 592.534547][T29380] ? folio_add_lru+0x353/0x6a0 [ 592.540219][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 592.546458][T29380] ? _fat_bmap+0x90/0x90 [ 592.551831][T29380] read_pages+0x1e4/0xfa0 [ 592.557117][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 592.564432][T29380] ? folio_add_lru+0x389/0x6a0 [ 592.570095][T29380] ? readahead_expand+0x8b0/0x8b0 [ 592.576258][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 592.583642][T29380] ? folio_alloc+0x3f/0x70 [ 592.588621][T29380] page_cache_ra_unbounded+0x552/0x740 [ 592.594018][T29380] ? read_pages+0xfa0/0xfa0 [ 592.598386][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 592.603980][T29380] ? i8237A_resume+0x80/0x90 [ 592.608748][T29380] ondemand_readahead+0x594/0x1090 [ 592.614256][T29380] page_cache_sync_ra+0x1cb/0x200 [ 592.619914][T29380] filemap_get_pages+0x2bf/0x16a0 [ 592.625727][T29380] ? kasan_set_free_info+0x20/0x30 [ 592.630971][T29380] ? kfree+0xf8/0x2b0 [ 592.634945][T29380] ? iter_file_splice_write+0x605/0xc10 [ 592.640864][T29380] ? filemap_fault+0x20f0/0x20f0 [ 592.645924][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 592.653059][T29380] ? copy_page_to_iter+0x5b4/0xe50 [ 592.658210][T29380] filemap_read+0x328/0xb90 [ 592.662479][T29380] ? filemap_get_pages+0x16a0/0x16a0 [ 592.668453][T29380] ? lockdep_hardirqs_on+0x79/0x100 [ 592.674627][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 592.681357][T29380] ? pipe_unlock+0x3d/0x70 [ 592.685680][T29380] generic_file_read_iter+0x3b6/0x5a0 [ 592.690823][T29380] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 592.696231][T29380] ? iov_iter_pipe+0xf4/0x2b0 [ 592.701149][T29380] generic_file_splice_read+0x45b/0x6d0 [ 592.707422][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 592.712963][T29380] ? inode_security+0x105/0x130 [ 592.718059][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 592.724314][T29380] ? security_file_permission+0xab/0xd0 [ 592.729800][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 592.735543][T29380] do_splice_to+0x1bf/0x250 [ 592.739947][T29380] ? direct_splice_actor+0x118/0x180 [ 592.744925][T29380] splice_direct_to_actor+0x2c2/0x8c0 [ 592.751078][T29380] ? generic_file_splice_read+0x6d0/0x6d0 [ 592.756644][T29380] ? do_splice_to+0x250/0x250 [ 592.761360][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 592.767930][T29380] ? security_file_permission+0xab/0xd0 [ 592.773468][T29380] do_splice_direct+0x1b3/0x280 [ 592.778677][T29380] ? splice_direct_to_actor+0x8c0/0x8c0 [ 592.784492][T29380] do_sendfile+0xaf2/0x1250 [ 592.789514][T29380] ? vfs_iocb_iter_write+0x490/0x490 [ 592.795193][T29380] ? __context_tracking_exit+0xb8/0xe0 [ 592.800657][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 592.805548][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 592.810756][T29380] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 592.817232][T29380] __x64_sys_sendfile64+0x1cc/0x210 [ 592.822524][T29380] ? __ia32_sys_sendfile+0x220/0x220 [ 592.827778][T29380] ? syscall_enter_from_user_mode+0x21/0x70 [ 592.833605][T29380] do_syscall_64+0x35/0xb0 [ 592.838841][T29380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 592.844895][T29380] RIP: 0033:0x7f9084bdb049 [ 592.848968][T29380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 592.869824][T29380] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 592.878739][T29380] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 592.886824][T29380] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 592.895171][T29380] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 592.903569][T29380] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 592.911124][T29380] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 592.919735][T29380] 23:15:02 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 592.950860][T29380] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! 23:15:02 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) [ 592.973857][T29380] CPU: 0 PID: 29380 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 592.988244][T29380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 593.002325][T29380] Call Trace: 23:15:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) [ 593.006840][T29380] [ 593.010467][T29380] dump_stack_lvl+0xcd/0x134 [ 593.016435][T29380] kmalloc_fix_flags+0x47/0x65 [ 593.022279][T29380] cache_grow_begin+0x30a/0x390 [ 593.027726][T29380] cache_alloc_refill+0x27f/0x380 [ 593.033684][T29380] kmem_cache_alloc+0x450/0x560 [ 593.040082][T29380] bvec_alloc+0x100/0x200 [ 593.044928][T29380] bio_alloc_bioset+0x39f/0x4e0 [ 593.050015][T29380] ? bvec_alloc+0x200/0x200 [ 593.054953][T29380] ? find_held_lock+0x2d/0x110 [ 593.060121][T29380] ? bdev_read_page+0x1c3/0x250 [ 593.065498][T29380] do_mpage_readpage+0xf37/0x1d70 [ 593.071047][T29380] ? mpage_writepage+0x120/0x120 [ 593.076468][T29380] ? lockdep_hardirqs_on+0x79/0x100 [ 593.082001][T29380] mpage_readahead+0x304/0x720 [ 593.087480][T29380] ? do_mpage_readpage+0x1d70/0x1d70 [ 593.093890][T29380] ? fat_add_cluster+0xf0/0xf0 [ 593.098977][T29380] ? folio_add_lru+0x353/0x6a0 [ 593.103897][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.109937][T29380] ? _fat_bmap+0x90/0x90 [ 593.115427][T29380] read_pages+0x1e4/0xfa0 [ 593.121361][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.128108][T29380] ? folio_add_lru+0x389/0x6a0 [ 593.134258][T29380] ? readahead_expand+0x8b0/0x8b0 [ 593.140821][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.148686][T29380] ? folio_alloc+0x3f/0x70 [ 593.153249][T29380] page_cache_ra_unbounded+0x552/0x740 [ 593.158680][T29399] loop0: detected capacity change from 0 to 264192 [ 593.159014][T29380] ? read_pages+0xfa0/0xfa0 [ 593.170778][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.175609][T29380] ? i8237A_resume+0x80/0x90 [ 593.180374][T29380] ondemand_readahead+0x594/0x1090 [ 593.185452][T29380] page_cache_sync_ra+0x1cb/0x200 [ 593.190634][T29380] filemap_get_pages+0x2bf/0x16a0 [ 593.195958][T29380] ? kasan_set_free_info+0x20/0x30 [ 593.201498][T29380] ? kfree+0xf8/0x2b0 [ 593.205798][T29380] ? iter_file_splice_write+0x605/0xc10 [ 593.211891][T29380] ? filemap_fault+0x20f0/0x20f0 23:15:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) [ 593.217461][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 593.224373][T29380] ? copy_page_to_iter+0x5b4/0xe50 [ 593.229597][T29380] filemap_read+0x328/0xb90 [ 593.234061][T29380] ? filemap_get_pages+0x16a0/0x16a0 [ 593.239264][T29380] ? mark_held_locks+0x9f/0xe0 [ 593.244029][T29380] ? kfree+0x1be/0x2b0 [ 593.248296][T29380] ? iter_file_splice_write+0x605/0xc10 [ 593.254229][T29380] ? lockdep_hardirqs_on+0x79/0x100 [ 593.259501][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.265908][T29380] ? pipe_unlock+0x3d/0x70 [ 593.270607][T29380] generic_file_read_iter+0x3b6/0x5a0 [ 593.275986][T29380] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 593.281435][T29380] ? iov_iter_pipe+0xf4/0x2b0 [ 593.286059][T29380] generic_file_splice_read+0x45b/0x6d0 [ 593.292565][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 593.299439][T29380] ? inode_security+0x105/0x130 [ 593.305493][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 593.313200][T29380] ? security_file_permission+0xab/0xd0 [ 593.319571][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 593.326864][T29380] do_splice_to+0x1bf/0x250 [ 593.338057][T29380] ? direct_splice_actor+0x118/0x180 [ 593.343686][T29380] splice_direct_to_actor+0x2c2/0x8c0 [ 593.349333][T29380] ? generic_file_splice_read+0x6d0/0x6d0 [ 593.355090][T29380] ? do_splice_to+0x250/0x250 [ 593.359882][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.366177][T29380] ? security_file_permission+0xab/0xd0 [ 593.371755][T29380] do_splice_direct+0x1b3/0x280 [ 593.376700][T29380] ? splice_direct_to_actor+0x8c0/0x8c0 [ 593.382198][T29380] do_sendfile+0xaf2/0x1250 [ 593.386756][T29380] ? vfs_iocb_iter_write+0x490/0x490 [ 593.392138][T29380] ? __context_tracking_exit+0xb8/0xe0 [ 593.397727][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.402584][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.407012][T29380] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 593.412671][T29380] __x64_sys_sendfile64+0x1cc/0x210 [ 593.417648][T29380] ? __ia32_sys_sendfile+0x220/0x220 [ 593.422948][T29380] ? syscall_enter_from_user_mode+0x21/0x70 [ 593.428811][T29380] do_syscall_64+0x35/0xb0 [ 593.435920][T29380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 593.441821][T29380] RIP: 0033:0x7f9084bdb049 [ 593.446198][T29380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 593.466898][T29380] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 593.475194][T29380] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 593.483849][T29380] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 593.492258][T29380] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 593.500812][T29380] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 593.509667][T29380] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 593.517643][T29380] [ 593.520674][T29380] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 593.542967][T29380] CPU: 0 PID: 29380 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 593.553627][T29380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 593.563842][T29380] Call Trace: [ 593.567412][T29380] [ 593.570354][T29380] dump_stack_lvl+0xcd/0x134 [ 593.575120][T29380] kmalloc_fix_flags+0x47/0x65 [ 593.580315][T29380] cache_grow_begin+0x30a/0x390 [ 593.585569][T29380] ____cache_alloc_node+0x171/0x1d0 [ 593.591034][T29380] kmem_cache_alloc+0x367/0x560 [ 593.595947][T29380] bvec_alloc+0x100/0x200 [ 593.600797][T29380] bio_alloc_bioset+0x39f/0x4e0 [ 593.606890][T29380] ? bvec_alloc+0x200/0x200 [ 593.612872][T29380] ? find_held_lock+0x2d/0x110 [ 593.618904][T29380] ? bdev_read_page+0x1c3/0x250 [ 593.625863][T29380] do_mpage_readpage+0xf37/0x1d70 [ 593.632301][T29380] ? mpage_writepage+0x120/0x120 [ 593.638407][T29380] ? lockdep_hardirqs_on+0x79/0x100 [ 593.644718][T29380] mpage_readahead+0x304/0x720 [ 593.650335][T29380] ? do_mpage_readpage+0x1d70/0x1d70 [ 593.656682][T29380] ? fat_add_cluster+0xf0/0xf0 [ 593.662477][T29380] ? folio_add_lru+0x353/0x6a0 [ 593.667994][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.673504][T29380] ? _fat_bmap+0x90/0x90 [ 593.678617][T29380] read_pages+0x1e4/0xfa0 [ 593.683534][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.690340][T29380] ? folio_add_lru+0x389/0x6a0 [ 593.695514][T29380] ? readahead_expand+0x8b0/0x8b0 [ 593.701080][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.707906][T29380] ? folio_alloc+0x3f/0x70 [ 593.712562][T29380] page_cache_ra_unbounded+0x552/0x740 [ 593.718455][T29380] ? read_pages+0xfa0/0xfa0 [ 593.723333][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.728523][T29380] ? i8237A_resume+0x80/0x90 [ 593.733460][T29380] ondemand_readahead+0x594/0x1090 [ 593.738750][T29380] page_cache_sync_ra+0x1cb/0x200 [ 593.743780][T29380] filemap_get_pages+0x2bf/0x16a0 [ 593.749180][T29380] ? kasan_set_free_info+0x20/0x30 [ 593.754315][T29380] ? kfree+0xf8/0x2b0 [ 593.758126][T29380] ? iter_file_splice_write+0x605/0xc10 [ 593.765139][T29380] ? filemap_fault+0x20f0/0x20f0 [ 593.771131][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 593.778874][T29380] ? copy_page_to_iter+0x5b4/0xe50 [ 593.785373][T29380] filemap_read+0x328/0xb90 [ 593.791044][T29380] ? filemap_get_pages+0x16a0/0x16a0 [ 593.797680][T29380] ? mark_held_locks+0x9f/0xe0 [ 593.803591][T29380] ? kfree+0x1be/0x2b0 [ 593.808218][T29380] ? iter_file_splice_write+0x605/0xc10 [ 593.813922][T29380] ? lockdep_hardirqs_on+0x79/0x100 [ 593.819148][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.825099][T29380] ? pipe_unlock+0x3d/0x70 [ 593.829372][T29380] generic_file_read_iter+0x3b6/0x5a0 [ 593.834833][T29380] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 593.840581][T29380] ? iov_iter_pipe+0xf4/0x2b0 [ 593.845233][T29380] generic_file_splice_read+0x45b/0x6d0 [ 593.850883][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 593.856307][T29380] ? inode_security+0x105/0x130 [ 593.861051][T29380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 593.867346][T29380] ? security_file_permission+0xab/0xd0 [ 593.872551][T29380] ? folio_flags.constprop.0+0x70/0x70 [ 593.877940][T29380] do_splice_to+0x1bf/0x250 [ 593.882465][T29380] ? direct_splice_actor+0x118/0x180 [ 593.887746][T29380] splice_direct_to_actor+0x2c2/0x8c0 [ 593.893150][T29380] ? generic_file_splice_read+0x6d0/0x6d0 [ 593.899023][T29380] ? do_splice_to+0x250/0x250 [ 593.903681][T29380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 593.910139][T29380] ? security_file_permission+0xab/0xd0 [ 593.915758][T29380] do_splice_direct+0x1b3/0x280 [ 593.920535][T29380] ? splice_direct_to_actor+0x8c0/0x8c0 [ 593.925921][T29380] do_sendfile+0xaf2/0x1250 [ 593.930412][T29380] ? vfs_iocb_iter_write+0x490/0x490 [ 593.935581][T29380] ? __context_tracking_exit+0xb8/0xe0 [ 593.940749][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.945586][T29380] ? lock_downgrade+0x6e0/0x6e0 [ 593.950437][T29380] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 593.956254][T29380] __x64_sys_sendfile64+0x1cc/0x210 [ 593.961290][T29380] ? __ia32_sys_sendfile+0x220/0x220 [ 593.966460][T29380] ? syscall_enter_from_user_mode+0x21/0x70 [ 593.972299][T29380] do_syscall_64+0x35/0xb0 [ 593.976606][T29380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 593.982342][T29380] RIP: 0033:0x7f9084bdb049 [ 593.986590][T29380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 594.005559][T29380] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 594.013916][T29380] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 594.021840][T29380] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 594.030403][T29380] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 594.040056][T29380] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 594.048081][T29380] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 594.056215][T29380] 23:15:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) 23:15:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) 23:15:03 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@case_sensitive_no}, {@umask}]}) 23:15:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) [ 594.165636][T29417] loop0: detected capacity change from 0 to 264192 [ 594.167752][T29416] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 594.174814][T29419] loop2: detected capacity change from 0 to 264192 23:15:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) 23:15:03 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x41, 0x4) 23:15:03 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x41, 0x4) 23:15:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ftruncate(r1, 0x97) sendfile(r1, r0, 0x0, 0x8000000000004) [ 594.299046][T29417] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 594.320561][T29417] CPU: 0 PID: 29417 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 594.329465][T29419] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 594.331582][T29417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 594.362354][T29417] Call Trace: [ 594.365766][T29417] [ 594.368839][T29417] dump_stack_lvl+0xcd/0x134 [ 594.373722][T29417] kmalloc_fix_flags+0x47/0x65 [ 594.378747][T29417] cache_grow_begin+0x30a/0x390 [ 594.384182][T29417] ? lock_chain_count+0x20/0x20 [ 594.389393][T29417] cache_alloc_refill+0x27f/0x380 [ 594.394692][T29417] kmem_cache_alloc+0x450/0x560 [ 594.399598][T29417] ? mempool_free+0x3b0/0x3b0 [ 594.404523][T29417] mempool_alloc+0x146/0x350 [ 594.409398][T29417] ? __lock_acquire+0xbc4/0x56c0 [ 594.414602][T29417] ? mempool_resize+0x7d0/0x7d0 [ 594.419200][T29417] ? fat_bmap+0x221/0x510 [ 594.423575][T29417] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 594.431212][T29417] ? fat_get_block+0x6bf/0x9f0 [ 594.436021][T29417] bio_alloc_bioset+0x31d/0x4e0 [ 594.440828][T29417] ? bvec_alloc+0x200/0x200 [ 594.445415][T29417] ? memset+0x20/0x40 [ 594.449539][T29417] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 594.455811][T29417] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 594.461544][T29417] ? zero_user_segments.constprop.0+0x308/0x430 [ 594.467757][T29417] do_mpage_readpage+0xf37/0x1d70 [ 594.472823][T29417] ? mpage_writepage+0x120/0x120 [ 594.477905][T29417] ? __xa_clear_mark+0x110/0x110 [ 594.482631][T29417] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 594.488370][T29417] ? __lock_acquire+0x1666/0x56c0 [ 594.493259][T29417] mpage_readahead+0x304/0x720 [ 594.498025][T29417] ? do_mpage_readpage+0x1d70/0x1d70 [ 594.503247][T29417] ? fat_add_cluster+0xf0/0xf0 [ 594.507604][T29417] ? folio_add_lru+0x353/0x6a0 [ 594.512309][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 594.517250][T29417] ? _fat_bmap+0x90/0x90 [ 594.521606][T29417] read_pages+0x1e4/0xfa0 [ 594.525947][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 594.532129][T29417] ? folio_add_lru+0x389/0x6a0 [ 594.536945][T29417] ? readahead_expand+0x8b0/0x8b0 [ 594.542711][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 594.549252][T29417] ? folio_alloc+0x3f/0x70 [ 594.553845][T29417] page_cache_ra_unbounded+0x552/0x740 [ 594.559319][T29417] ? read_pages+0xfa0/0xfa0 [ 594.563772][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 594.569788][T29417] ? i8237A_resume+0x80/0x90 [ 594.574317][T29417] ondemand_readahead+0x594/0x1090 [ 594.579419][T29417] page_cache_sync_ra+0x1cb/0x200 [ 594.584326][T29417] filemap_get_pages+0x2bf/0x16a0 [ 594.589357][T29417] ? kasan_set_free_info+0x20/0x30 [ 594.594288][T29417] ? kfree+0xf8/0x2b0 [ 594.598576][T29417] ? iter_file_splice_write+0x605/0xc10 [ 594.604044][T29417] ? filemap_fault+0x20f0/0x20f0 [ 594.609076][T29417] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 594.615151][T29417] ? copy_page_to_iter+0x5b4/0xe50 [ 594.620508][T29417] filemap_read+0x328/0xb90 [ 594.625032][T29417] ? filemap_get_pages+0x16a0/0x16a0 [ 594.630720][T29417] ? lockdep_hardirqs_on+0x79/0x100 [ 594.636276][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 594.642725][T29417] ? pipe_unlock+0x3d/0x70 [ 594.647642][T29417] generic_file_read_iter+0x3b6/0x5a0 [ 594.653578][T29417] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 594.659307][T29417] ? iov_iter_pipe+0xf4/0x2b0 [ 594.663949][T29417] generic_file_splice_read+0x45b/0x6d0 [ 594.669336][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 594.674798][T29417] ? inode_security+0x105/0x130 [ 594.679693][T29417] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 594.685925][T29417] ? security_file_permission+0xab/0xd0 [ 594.691380][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 594.696743][T29417] do_splice_to+0x1bf/0x250 [ 594.701181][T29417] ? direct_splice_actor+0x118/0x180 [ 594.706434][T29417] splice_direct_to_actor+0x2c2/0x8c0 [ 594.711838][T29417] ? generic_file_splice_read+0x6d0/0x6d0 [ 594.717508][T29417] ? do_splice_to+0x250/0x250 [ 594.722192][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 594.728382][T29417] ? security_file_permission+0xab/0xd0 [ 594.733994][T29417] do_splice_direct+0x1b3/0x280 [ 594.738859][T29417] ? splice_direct_to_actor+0x8c0/0x8c0 [ 594.744374][T29417] do_sendfile+0xaf2/0x1250 [ 594.748818][T29417] ? vfs_iocb_iter_write+0x490/0x490 [ 594.754096][T29417] ? __context_tracking_exit+0xb8/0xe0 [ 594.759435][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 594.764318][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 594.769223][T29417] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 594.775298][T29417] __x64_sys_sendfile64+0x1cc/0x210 [ 594.780644][T29417] ? __ia32_sys_sendfile+0x220/0x220 [ 594.785982][T29417] ? syscall_enter_from_user_mode+0x21/0x70 [ 594.791906][T29417] do_syscall_64+0x35/0xb0 [ 594.796208][T29417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 594.801901][T29417] RIP: 0033:0x7ff383496049 [ 594.806774][T29417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 594.831096][T29417] RSP: 002b:00007ff381e0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 594.840046][T29417] RAX: ffffffffffffffda RBX: 00007ff3835a8f60 RCX: 00007ff383496049 [ 594.849253][T29417] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 594.858222][T29417] RBP: 00007ff3834f008d R08: 0000000000000000 R09: 0000000000000000 [ 594.866321][T29417] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 594.874911][T29417] R13: 00007ffca7b894bf R14: 00007ff381e0b300 R15: 0000000000022000 [ 594.883216][T29417] [ 594.886301][T29419] CPU: 3 PID: 29419 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 594.886306][T29417] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 594.918464][T29419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 594.928147][T29419] Call Trace: [ 594.931407][T29419] [ 594.934202][T29419] dump_stack_lvl+0xcd/0x134 [ 594.938474][T29419] kmalloc_fix_flags+0x47/0x65 [ 594.943136][T29419] cache_grow_begin+0x30a/0x390 [ 594.948837][T29419] cache_alloc_refill+0x27f/0x380 [ 594.953871][T29419] kmem_cache_alloc+0x450/0x560 [ 594.958646][T29419] ? mempool_free+0x3b0/0x3b0 [ 594.963537][T29419] mempool_alloc+0x146/0x350 [ 594.968954][T29419] ? __lock_acquire+0xbc4/0x56c0 [ 594.973712][T29419] ? mempool_resize+0x7d0/0x7d0 [ 594.978385][T29419] ? fat_bmap+0x221/0x510 [ 594.982605][T29419] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 594.989948][T29419] ? fat_get_block+0x6bf/0x9f0 [ 594.994871][T29419] bio_alloc_bioset+0x31d/0x4e0 [ 594.999520][T29419] ? bvec_alloc+0x200/0x200 [ 595.004117][T29419] ? find_held_lock+0x2d/0x110 [ 595.009555][T29419] ? bdev_read_page+0x1c3/0x250 [ 595.014392][T29419] do_mpage_readpage+0xf37/0x1d70 [ 595.019336][T29419] ? mpage_writepage+0x120/0x120 [ 595.024681][T29419] ? __lock_acquire+0x1666/0x56c0 [ 595.030245][T29419] mpage_readahead+0x304/0x720 [ 595.034899][T29419] ? do_mpage_readpage+0x1d70/0x1d70 [ 595.040180][T29419] ? fat_add_cluster+0xf0/0xf0 [ 595.045328][T29419] ? folio_add_lru+0x353/0x6a0 [ 595.050530][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 595.055335][T29419] ? _fat_bmap+0x90/0x90 [ 595.059470][T29419] read_pages+0x1e4/0xfa0 [ 595.063744][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.070635][T29419] ? folio_add_lru+0x389/0x6a0 [ 595.075350][T29419] ? readahead_expand+0x8b0/0x8b0 [ 595.080369][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.087436][T29419] ? folio_alloc+0x3f/0x70 [ 595.092576][T29419] page_cache_ra_unbounded+0x552/0x740 [ 595.098451][T29419] ? read_pages+0xfa0/0xfa0 [ 595.103328][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 595.108389][T29419] ? create_prof_cpu_mask+0x20/0x20 [ 595.114523][T29419] ? arch_stack_walk+0x93/0xe0 [ 595.120311][T29419] ondemand_readahead+0x594/0x1090 [ 595.126050][T29419] page_cache_sync_ra+0x1cb/0x200 [ 595.131215][T29419] filemap_get_pages+0x2bf/0x16a0 [ 595.136893][T29419] ? kasan_set_free_info+0x20/0x30 [ 595.142751][T29419] ? kfree+0xf8/0x2b0 [ 595.147731][T29419] ? iter_file_splice_write+0x605/0xc10 [ 595.154079][T29419] ? direct_splice_actor+0x110/0x180 [ 595.159225][T29419] ? filemap_fault+0x20f0/0x20f0 [ 595.164038][T29419] ? __x64_sys_sendfile64+0x1cc/0x210 [ 595.169130][T29419] ? do_syscall_64+0x35/0xb0 [ 595.173673][T29419] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 595.179689][T29419] filemap_read+0x328/0xb90 [ 595.184196][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 595.188964][T29419] ? filemap_get_pages+0x16a0/0x16a0 [ 595.194100][T29419] ? mark_held_locks+0x9f/0xe0 [ 595.198603][T29419] ? kfree+0x1be/0x2b0 [ 595.202510][T29419] ? iter_file_splice_write+0x605/0xc10 [ 595.208130][T29419] ? lockdep_hardirqs_on+0x79/0x100 [ 595.213360][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.219574][T29419] ? pipe_unlock+0x3d/0x70 [ 595.224188][T29419] generic_file_read_iter+0x3b6/0x5a0 [ 595.230112][T29419] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 595.235759][T29419] ? iov_iter_pipe+0xf4/0x2b0 [ 595.240383][T29419] generic_file_splice_read+0x45b/0x6d0 [ 595.245905][T29419] ? folio_flags.constprop.0+0x70/0x70 [ 595.250975][T29419] ? inode_security+0x105/0x130 [ 595.255886][T29419] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 595.262016][T29419] ? security_file_permission+0xab/0xd0 [ 595.267509][T29419] ? folio_flags.constprop.0+0x70/0x70 [ 595.272874][T29419] do_splice_to+0x1bf/0x250 [ 595.277631][T29419] ? direct_splice_actor+0x118/0x180 [ 595.282889][T29419] splice_direct_to_actor+0x2c2/0x8c0 [ 595.289216][T29419] ? generic_file_splice_read+0x6d0/0x6d0 [ 595.295262][T29419] ? do_splice_to+0x250/0x250 [ 595.300022][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.306417][T29419] ? security_file_permission+0xab/0xd0 [ 595.311930][T29419] do_splice_direct+0x1b3/0x280 [ 595.317055][T29419] ? splice_direct_to_actor+0x8c0/0x8c0 [ 595.322639][T29419] do_sendfile+0xaf2/0x1250 [ 595.328249][T29419] ? vfs_iocb_iter_write+0x490/0x490 [ 595.333872][T29419] ? __context_tracking_exit+0xb8/0xe0 [ 595.339181][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 595.344303][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 595.349816][T29419] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 595.355505][T29419] __x64_sys_sendfile64+0x1cc/0x210 [ 595.360558][T29419] ? __ia32_sys_sendfile+0x220/0x220 [ 595.366623][T29419] ? syscall_enter_from_user_mode+0x21/0x70 [ 595.372641][T29419] do_syscall_64+0x35/0xb0 [ 595.376912][T29419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 595.382702][T29419] RIP: 0033:0x7f9084bdb049 [ 595.388024][T29419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 595.407527][T29419] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 595.415726][T29419] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 595.423435][T29419] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 595.431108][T29419] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 595.438792][T29419] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 595.446513][T29419] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 595.454560][T29419] [ 595.457411][T29417] CPU: 0 PID: 29417 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 595.457418][T29419] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 595.487672][T29417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 595.496704][T29417] Call Trace: [ 595.500075][T29417] [ 595.503063][T29417] dump_stack_lvl+0xcd/0x134 [ 595.507680][T29417] kmalloc_fix_flags+0x47/0x65 [ 595.512454][T29417] cache_grow_begin+0x30a/0x390 [ 595.517391][T29417] ____cache_alloc_node+0x171/0x1d0 [ 595.522717][T29417] kmem_cache_alloc+0x367/0x560 [ 595.527669][T29417] ? mempool_free+0x3b0/0x3b0 [ 595.532287][T29417] mempool_alloc+0x146/0x350 [ 595.536828][T29417] ? __lock_acquire+0xbc4/0x56c0 [ 595.541784][T29417] ? mempool_resize+0x7d0/0x7d0 [ 595.546765][T29417] ? fat_bmap+0x221/0x510 [ 595.551144][T29417] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 595.557304][T29417] ? fat_get_block+0x6bf/0x9f0 [ 595.561995][T29417] bio_alloc_bioset+0x31d/0x4e0 [ 595.566825][T29417] ? bvec_alloc+0x200/0x200 [ 595.571251][T29417] ? memset+0x20/0x40 [ 595.575327][T29417] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 595.581571][T29417] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 595.587241][T29417] ? zero_user_segments.constprop.0+0x308/0x430 [ 595.593260][T29417] do_mpage_readpage+0xf37/0x1d70 [ 595.598206][T29417] ? mpage_writepage+0x120/0x120 [ 595.602938][T29417] ? __xa_clear_mark+0x110/0x110 [ 595.607660][T29417] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 595.613995][T29417] ? __lock_acquire+0x1666/0x56c0 [ 595.619008][T29417] mpage_readahead+0x304/0x720 [ 595.623733][T29417] ? do_mpage_readpage+0x1d70/0x1d70 [ 595.629027][T29417] ? fat_add_cluster+0xf0/0xf0 [ 595.633764][T29417] ? folio_add_lru+0x353/0x6a0 [ 595.638454][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 595.643228][T29417] ? _fat_bmap+0x90/0x90 [ 595.647354][T29417] read_pages+0x1e4/0xfa0 [ 595.651522][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.659240][T29417] ? folio_add_lru+0x389/0x6a0 [ 595.664060][T29417] ? readahead_expand+0x8b0/0x8b0 [ 595.669077][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.675321][T29417] ? folio_alloc+0x3f/0x70 [ 595.679740][T29417] page_cache_ra_unbounded+0x552/0x740 [ 595.685180][T29417] ? read_pages+0xfa0/0xfa0 [ 595.689932][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 595.694778][T29417] ? i8237A_resume+0x80/0x90 [ 595.699405][T29417] ondemand_readahead+0x594/0x1090 [ 595.704581][T29417] page_cache_sync_ra+0x1cb/0x200 [ 595.709543][T29417] filemap_get_pages+0x2bf/0x16a0 [ 595.714328][T29417] ? kasan_set_free_info+0x20/0x30 [ 595.719478][T29417] ? kfree+0xf8/0x2b0 [ 595.723570][T29417] ? iter_file_splice_write+0x605/0xc10 [ 595.729116][T29417] ? filemap_fault+0x20f0/0x20f0 [ 595.734100][T29417] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 595.740422][T29417] ? copy_page_to_iter+0x5b4/0xe50 [ 595.745453][T29417] filemap_read+0x328/0xb90 [ 595.750151][T29417] ? filemap_get_pages+0x16a0/0x16a0 [ 595.755376][T29417] ? lockdep_hardirqs_on+0x79/0x100 [ 595.760414][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.766519][T29417] ? pipe_unlock+0x3d/0x70 [ 595.770782][T29417] generic_file_read_iter+0x3b6/0x5a0 [ 595.775993][T29417] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 595.781480][T29417] ? iov_iter_pipe+0xf4/0x2b0 [ 595.785956][T29417] generic_file_splice_read+0x45b/0x6d0 [ 595.791280][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 595.796504][T29417] ? inode_security+0x105/0x130 [ 595.801239][T29417] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 595.807353][T29417] ? security_file_permission+0xab/0xd0 [ 595.812717][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 595.818050][T29417] do_splice_to+0x1bf/0x250 [ 595.822458][T29417] ? direct_splice_actor+0x118/0x180 [ 595.827617][T29417] splice_direct_to_actor+0x2c2/0x8c0 [ 595.833075][T29417] ? generic_file_splice_read+0x6d0/0x6d0 [ 595.838829][T29417] ? do_splice_to+0x250/0x250 [ 595.843420][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 595.849689][T29417] ? security_file_permission+0xab/0xd0 [ 595.855198][T29417] do_splice_direct+0x1b3/0x280 [ 595.859999][T29417] ? splice_direct_to_actor+0x8c0/0x8c0 [ 595.865294][T29417] do_sendfile+0xaf2/0x1250 [ 595.869747][T29417] ? vfs_iocb_iter_write+0x490/0x490 [ 595.874896][T29417] ? __context_tracking_exit+0xb8/0xe0 [ 595.880287][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 595.885053][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 595.889870][T29417] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 595.895761][T29417] __x64_sys_sendfile64+0x1cc/0x210 [ 595.900948][T29417] ? __ia32_sys_sendfile+0x220/0x220 [ 595.906169][T29417] ? syscall_enter_from_user_mode+0x21/0x70 [ 595.911923][T29417] do_syscall_64+0x35/0xb0 [ 595.916261][T29417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 595.922136][T29417] RIP: 0033:0x7ff383496049 [ 595.926516][T29417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 595.946053][T29417] RSP: 002b:00007ff381e0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 595.954502][T29417] RAX: ffffffffffffffda RBX: 00007ff3835a8f60 RCX: 00007ff383496049 [ 595.962525][T29417] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 595.970526][T29417] RBP: 00007ff3834f008d R08: 0000000000000000 R09: 0000000000000000 [ 595.978386][T29417] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 595.986212][T29417] R13: 00007ffca7b894bf R14: 00007ff381e0b300 R15: 0000000000022000 [ 595.993847][T29417] [ 595.996796][T29419] CPU: 3 PID: 29419 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 596.006933][T29419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 596.013694][T29417] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 596.015768][T29419] Call Trace: [ 596.015778][T29419] [ 596.041894][T29419] dump_stack_lvl+0xcd/0x134 [ 596.046663][T29419] kmalloc_fix_flags+0x47/0x65 [ 596.051346][T29419] cache_grow_begin+0x30a/0x390 [ 596.056013][T29419] ____cache_alloc_node+0x171/0x1d0 [ 596.061110][T29419] kmem_cache_alloc+0x367/0x560 [ 596.065716][T29419] ? mempool_free+0x3b0/0x3b0 [ 596.070513][T29419] mempool_alloc+0x146/0x350 [ 596.075222][T29419] ? __lock_acquire+0xbc4/0x56c0 [ 596.080117][T29419] ? mempool_resize+0x7d0/0x7d0 [ 596.084821][T29419] ? fat_bmap+0x221/0x510 [ 596.089141][T29419] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 596.095157][T29419] ? fat_get_block+0x6bf/0x9f0 [ 596.100229][T29419] bio_alloc_bioset+0x31d/0x4e0 [ 596.104831][T29419] ? bvec_alloc+0x200/0x200 [ 596.109278][T29419] ? find_held_lock+0x2d/0x110 [ 596.114029][T29419] ? bdev_read_page+0x1c3/0x250 [ 596.118887][T29419] do_mpage_readpage+0xf37/0x1d70 [ 596.124002][T29419] ? mpage_writepage+0x120/0x120 [ 596.129518][T29419] ? __lock_acquire+0x1666/0x56c0 [ 596.134770][T29419] mpage_readahead+0x304/0x720 [ 596.139516][T29419] ? do_mpage_readpage+0x1d70/0x1d70 [ 596.144705][T29419] ? fat_add_cluster+0xf0/0xf0 [ 596.150375][T29419] ? folio_add_lru+0x353/0x6a0 [ 596.154831][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 596.159750][T29419] ? _fat_bmap+0x90/0x90 [ 596.163970][T29419] read_pages+0x1e4/0xfa0 [ 596.168874][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.175379][T29419] ? folio_add_lru+0x389/0x6a0 [ 596.180376][T29419] ? readahead_expand+0x8b0/0x8b0 [ 596.185288][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.191805][T29419] ? folio_alloc+0x3f/0x70 [ 596.196234][T29419] page_cache_ra_unbounded+0x552/0x740 [ 596.201864][T29419] ? read_pages+0xfa0/0xfa0 [ 596.206271][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 596.211143][T29419] ? create_prof_cpu_mask+0x20/0x20 [ 596.216311][T29419] ? arch_stack_walk+0x93/0xe0 [ 596.220975][T29419] ondemand_readahead+0x594/0x1090 [ 596.226148][T29419] page_cache_sync_ra+0x1cb/0x200 [ 596.231081][T29419] filemap_get_pages+0x2bf/0x16a0 [ 596.235974][T29419] ? kasan_set_free_info+0x20/0x30 [ 596.240965][T29419] ? kfree+0xf8/0x2b0 [ 596.244887][T29419] ? iter_file_splice_write+0x605/0xc10 [ 596.250507][T29419] ? direct_splice_actor+0x110/0x180 [ 596.255772][T29419] ? filemap_fault+0x20f0/0x20f0 [ 596.260971][T29419] ? __x64_sys_sendfile64+0x1cc/0x210 [ 596.266232][T29419] ? do_syscall_64+0x35/0xb0 [ 596.270757][T29419] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 596.276663][T29419] filemap_read+0x328/0xb90 [ 596.281180][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 596.285927][T29419] ? filemap_get_pages+0x16a0/0x16a0 [ 596.291087][T29419] ? mark_held_locks+0x9f/0xe0 [ 596.295794][T29419] ? kfree+0x1be/0x2b0 [ 596.299771][T29419] ? iter_file_splice_write+0x605/0xc10 [ 596.305310][T29419] ? lockdep_hardirqs_on+0x79/0x100 [ 596.311640][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.318884][T29419] ? pipe_unlock+0x3d/0x70 [ 596.323407][T29419] generic_file_read_iter+0x3b6/0x5a0 [ 596.329210][T29419] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 596.335350][T29419] ? iov_iter_pipe+0xf4/0x2b0 [ 596.340003][T29419] generic_file_splice_read+0x45b/0x6d0 [ 596.345394][T29419] ? folio_flags.constprop.0+0x70/0x70 [ 596.350816][T29419] ? inode_security+0x105/0x130 [ 596.355935][T29419] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 596.361983][T29419] ? security_file_permission+0xab/0xd0 [ 596.367244][T29419] ? folio_flags.constprop.0+0x70/0x70 [ 596.372508][T29419] do_splice_to+0x1bf/0x250 [ 596.377180][T29419] ? direct_splice_actor+0x118/0x180 [ 596.382734][T29419] splice_direct_to_actor+0x2c2/0x8c0 [ 596.388490][T29419] ? generic_file_splice_read+0x6d0/0x6d0 [ 596.395888][T29419] ? do_splice_to+0x250/0x250 [ 596.400604][T29419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.406841][T29419] ? security_file_permission+0xab/0xd0 [ 596.413116][T29419] do_splice_direct+0x1b3/0x280 [ 596.418064][T29419] ? splice_direct_to_actor+0x8c0/0x8c0 [ 596.423443][T29419] do_sendfile+0xaf2/0x1250 [ 596.427740][T29419] ? vfs_iocb_iter_write+0x490/0x490 [ 596.432885][T29419] ? __context_tracking_exit+0xb8/0xe0 [ 596.438069][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 596.442839][T29419] ? lock_downgrade+0x6e0/0x6e0 [ 596.447499][T29419] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 596.453246][T29419] __x64_sys_sendfile64+0x1cc/0x210 [ 596.458318][T29419] ? __ia32_sys_sendfile+0x220/0x220 [ 596.463463][T29419] ? syscall_enter_from_user_mode+0x21/0x70 [ 596.469173][T29419] do_syscall_64+0x35/0xb0 [ 596.473557][T29419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 596.479304][T29419] RIP: 0033:0x7f9084bdb049 [ 596.483632][T29419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 596.501763][T29419] RSP: 002b:00007f9083550168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 596.510247][T29419] RAX: ffffffffffffffda RBX: 00007f9084cedf60 RCX: 00007f9084bdb049 [ 596.517694][T29419] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 596.525348][T29419] RBP: 00007f9084c3508d R08: 0000000000000000 R09: 0000000000000000 [ 596.533023][T29419] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 596.540563][T29419] R13: 00007ffea49a214f R14: 00007f9083550300 R15: 0000000000022000 [ 596.547981][T29419] [ 596.550843][T29417] CPU: 0 PID: 29417 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 596.570351][T29417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 596.581417][T29417] Call Trace: [ 596.585574][T29417] [ 596.588938][T29417] dump_stack_lvl+0xcd/0x134 [ 596.594168][T29417] kmalloc_fix_flags+0x47/0x65 [ 596.599274][T29417] cache_grow_begin+0x30a/0x390 [ 596.604506][T29417] cache_alloc_refill+0x27f/0x380 [ 596.610255][T29417] kmem_cache_alloc+0x450/0x560 [ 596.615133][T29417] ? mempool_free+0x3b0/0x3b0 [ 596.620082][T29417] mempool_alloc+0x146/0x350 [ 596.624550][T29417] ? __lock_acquire+0xbc4/0x56c0 [ 596.629582][T29417] ? mempool_resize+0x7d0/0x7d0 [ 596.634353][T29417] ? fat_bmap+0x221/0x510 23:15:06 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x41, 0x4) [ 596.638651][T29417] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 596.648404][T29417] ? fat_get_block+0x6bf/0x9f0 [ 596.654412][T29417] bio_alloc_bioset+0x31d/0x4e0 [ 596.660766][T29417] ? bvec_alloc+0x200/0x200 [ 596.666161][T29417] ? find_held_lock+0x2d/0x110 [ 596.671610][T29417] ? bdev_read_page+0x1c3/0x250 [ 596.676618][T29417] do_mpage_readpage+0xf37/0x1d70 [ 596.682228][T29417] ? mpage_writepage+0x120/0x120 [ 596.687332][T29417] ? __lock_acquire+0x1666/0x56c0 [ 596.692695][T29417] mpage_readahead+0x304/0x720 [ 596.697638][T29417] ? do_mpage_readpage+0x1d70/0x1d70 [ 596.703131][T29417] ? fat_add_cluster+0xf0/0xf0 [ 596.708455][T29417] ? folio_add_lru+0x353/0x6a0 [ 596.713464][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 596.718495][T29417] ? _fat_bmap+0x90/0x90 [ 596.723073][T29417] read_pages+0x1e4/0xfa0 [ 596.727757][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.734544][T29417] ? folio_add_lru+0x389/0x6a0 [ 596.740139][T29417] ? readahead_expand+0x8b0/0x8b0 [ 596.745463][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.751830][T29417] ? folio_alloc+0x3f/0x70 [ 596.756636][T29417] page_cache_ra_unbounded+0x552/0x740 [ 596.763072][T29417] ? read_pages+0xfa0/0xfa0 [ 596.767588][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 596.772421][T29417] ? create_prof_cpu_mask+0x20/0x20 [ 596.777814][T29417] ? arch_stack_walk+0x93/0xe0 [ 596.782693][T29417] ondemand_readahead+0x594/0x1090 [ 596.788022][T29417] page_cache_sync_ra+0x1cb/0x200 [ 596.793623][T29417] filemap_get_pages+0x2bf/0x16a0 [ 596.798719][T29417] ? kasan_set_free_info+0x20/0x30 [ 596.803876][T29417] ? kfree+0xf8/0x2b0 [ 596.807758][T29417] ? iter_file_splice_write+0x605/0xc10 [ 596.813130][T29417] ? direct_splice_actor+0x110/0x180 [ 596.818226][T29417] ? filemap_fault+0x20f0/0x20f0 [ 596.823330][T29417] ? __x64_sys_sendfile64+0x1cc/0x210 [ 596.829135][T29417] ? do_syscall_64+0x35/0xb0 [ 596.833749][T29417] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 596.839633][T29417] filemap_read+0x328/0xb90 [ 596.844230][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 596.848929][T29417] ? filemap_get_pages+0x16a0/0x16a0 [ 596.854251][T29417] ? mark_held_locks+0x9f/0xe0 [ 596.859002][T29417] ? kfree+0x1be/0x2b0 [ 596.863168][T29417] ? iter_file_splice_write+0x605/0xc10 [ 596.868572][T29417] ? lockdep_hardirqs_on+0x79/0x100 [ 596.874307][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.881235][T29417] ? pipe_unlock+0x3d/0x70 [ 596.885793][T29417] generic_file_read_iter+0x3b6/0x5a0 [ 596.891333][T29417] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 596.898129][T29417] ? iov_iter_pipe+0xf4/0x2b0 [ 596.902864][T29417] generic_file_splice_read+0x45b/0x6d0 [ 596.908546][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 596.914605][T29417] ? inode_security+0x105/0x130 [ 596.919868][T29417] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 596.926078][T29417] ? security_file_permission+0xab/0xd0 [ 596.931569][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 596.938158][T29417] do_splice_to+0x1bf/0x250 [ 596.943609][T29417] ? direct_splice_actor+0x118/0x180 [ 596.950559][T29417] splice_direct_to_actor+0x2c2/0x8c0 [ 596.957511][T29417] ? generic_file_splice_read+0x6d0/0x6d0 [ 596.964665][T29417] ? do_splice_to+0x250/0x250 [ 596.970730][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 596.978914][T29417] ? security_file_permission+0xab/0xd0 [ 596.985890][T29417] do_splice_direct+0x1b3/0x280 [ 596.992406][T29417] ? splice_direct_to_actor+0x8c0/0x8c0 [ 596.998656][T29417] do_sendfile+0xaf2/0x1250 [ 597.003935][T29417] ? vfs_iocb_iter_write+0x490/0x490 [ 597.009601][T29417] ? __context_tracking_exit+0xb8/0xe0 [ 597.015252][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 597.020295][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 597.025512][T29417] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 597.031361][T29417] __x64_sys_sendfile64+0x1cc/0x210 [ 597.036744][T29417] ? __ia32_sys_sendfile+0x220/0x220 [ 597.042439][T29417] ? syscall_enter_from_user_mode+0x21/0x70 [ 597.048927][T29417] do_syscall_64+0x35/0xb0 [ 597.053518][T29417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 597.059492][T29417] RIP: 0033:0x7ff383496049 [ 597.064757][T29417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 597.084745][T29417] RSP: 002b:00007ff381e0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 597.093167][T29417] RAX: ffffffffffffffda RBX: 00007ff3835a8f60 RCX: 00007ff383496049 [ 597.101415][T29417] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 597.109194][T29417] RBP: 00007ff3834f008d R08: 0000000000000000 R09: 0000000000000000 [ 597.116914][T29417] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 597.125583][T29417] R13: 00007ffca7b894bf R14: 00007ff381e0b300 R15: 0000000000022000 [ 597.133722][T29417] [ 597.136774][T29417] Unexpected gfp: 0x2 (__GFP_HIGHMEM). Fixing up to gfp: 0x1392088 (__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_THISNODE|__GFP_MOVABLE|__GFP_SKIP_KASAN_POISON). Fix your code! [ 597.156436][T29417] CPU: 0 PID: 29417 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 597.166661][T29417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 597.175739][T29417] Call Trace: [ 597.178962][T29417] [ 597.182076][T29417] dump_stack_lvl+0xcd/0x134 [ 597.186749][T29417] kmalloc_fix_flags+0x47/0x65 [ 597.191695][T29417] cache_grow_begin+0x30a/0x390 [ 597.196428][T29417] ____cache_alloc_node+0x171/0x1d0 [ 597.201743][T29417] kmem_cache_alloc+0x367/0x560 [ 597.206631][T29417] ? mempool_free+0x3b0/0x3b0 [ 597.211447][T29417] mempool_alloc+0x146/0x350 [ 597.216139][T29417] ? __lock_acquire+0xbc4/0x56c0 [ 597.221105][T29417] ? mempool_resize+0x7d0/0x7d0 [ 597.225972][T29417] ? fat_bmap+0x221/0x510 [ 597.230262][T29417] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 597.236500][T29417] ? fat_get_block+0x6bf/0x9f0 [ 597.241181][T29417] bio_alloc_bioset+0x31d/0x4e0 [ 597.245874][T29417] ? bvec_alloc+0x200/0x200 [ 597.250357][T29417] ? find_held_lock+0x2d/0x110 [ 597.254965][T29417] ? bdev_read_page+0x1c3/0x250 [ 597.259900][T29417] do_mpage_readpage+0xf37/0x1d70 [ 597.264775][T29417] ? mpage_writepage+0x120/0x120 [ 597.269652][T29417] ? __lock_acquire+0x1666/0x56c0 [ 597.274808][T29417] mpage_readahead+0x304/0x720 [ 597.279712][T29417] ? do_mpage_readpage+0x1d70/0x1d70 [ 597.285299][T29417] ? fat_add_cluster+0xf0/0xf0 [ 597.290286][T29417] ? folio_add_lru+0x353/0x6a0 [ 597.295249][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 597.300348][T29417] ? _fat_bmap+0x90/0x90 [ 597.304832][T29417] read_pages+0x1e4/0xfa0 [ 597.309170][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 597.315068][T29417] ? folio_add_lru+0x389/0x6a0 [ 597.319602][T29417] ? readahead_expand+0x8b0/0x8b0 [ 597.324455][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 597.330515][T29417] ? folio_alloc+0x3f/0x70 [ 597.334788][T29417] page_cache_ra_unbounded+0x552/0x740 [ 597.340159][T29417] ? read_pages+0xfa0/0xfa0 [ 597.344583][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 597.349380][T29417] ? create_prof_cpu_mask+0x20/0x20 [ 597.354396][T29417] ? arch_stack_walk+0x93/0xe0 [ 597.358945][T29417] ondemand_readahead+0x594/0x1090 [ 597.363973][T29417] page_cache_sync_ra+0x1cb/0x200 [ 597.369000][T29417] filemap_get_pages+0x2bf/0x16a0 [ 597.373859][T29417] ? kasan_set_free_info+0x20/0x30 [ 597.379757][T29417] ? kfree+0xf8/0x2b0 [ 597.384325][T29417] ? iter_file_splice_write+0x605/0xc10 [ 597.389947][T29417] ? direct_splice_actor+0x110/0x180 [ 597.396294][T29417] ? filemap_fault+0x20f0/0x20f0 [ 597.402548][T29417] ? __x64_sys_sendfile64+0x1cc/0x210 [ 597.409167][T29417] ? do_syscall_64+0x35/0xb0 [ 597.414885][T29417] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 597.421184][T29417] filemap_read+0x328/0xb90 [ 597.425658][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 597.430425][T29417] ? filemap_get_pages+0x16a0/0x16a0 [ 597.435532][T29417] ? mark_held_locks+0x9f/0xe0 [ 597.440201][T29417] ? kfree+0x1be/0x2b0 [ 597.444268][T29417] ? iter_file_splice_write+0x605/0xc10 [ 597.449925][T29417] ? lockdep_hardirqs_on+0x79/0x100 [ 597.455035][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 597.461017][T29417] ? pipe_unlock+0x3d/0x70 [ 597.465414][T29417] generic_file_read_iter+0x3b6/0x5a0 [ 597.470675][T29417] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 597.476287][T29417] ? iov_iter_pipe+0xf4/0x2b0 [ 597.480852][T29417] generic_file_splice_read+0x45b/0x6d0 [ 597.486259][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 597.491585][T29417] ? inode_security+0x105/0x130 [ 597.496289][T29417] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 597.502255][T29417] ? security_file_permission+0xab/0xd0 [ 597.507764][T29417] ? folio_flags.constprop.0+0x70/0x70 [ 597.513086][T29417] do_splice_to+0x1bf/0x250 [ 597.517678][T29417] ? direct_splice_actor+0x118/0x180 [ 597.522967][T29417] splice_direct_to_actor+0x2c2/0x8c0 [ 597.528284][T29417] ? generic_file_splice_read+0x6d0/0x6d0 [ 597.533915][T29417] ? do_splice_to+0x250/0x250 [ 597.538589][T29417] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 597.544640][T29417] ? security_file_permission+0xab/0xd0 [ 597.549906][T29417] do_splice_direct+0x1b3/0x280 [ 597.555566][T29417] ? splice_direct_to_actor+0x8c0/0x8c0 [ 597.561044][T29417] do_sendfile+0xaf2/0x1250 [ 597.565653][T29417] ? vfs_iocb_iter_write+0x490/0x490 [ 597.570817][T29417] ? __context_tracking_exit+0xb8/0xe0 [ 597.576124][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 597.581708][T29417] ? lock_downgrade+0x6e0/0x6e0 [ 597.586910][T29417] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 597.592943][T29417] __x64_sys_sendfile64+0x1cc/0x210 [ 597.598894][T29417] ? __ia32_sys_sendfile+0x220/0x220 [ 597.605032][T29417] ? syscall_enter_from_user_mode+0x21/0x70 [ 597.610776][T29417] do_syscall_64+0x35/0xb0 [ 597.615277][T29417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 597.621159][T29417] RIP: 0033:0x7ff383496049 [ 597.625660][T29417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 597.645322][T29417] RSP: 002b:00007ff381e0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 597.653701][T29417] RAX: ffffffffffffffda RBX: 00007ff3835a8f60 RCX: 00007ff383496049 [ 597.661573][T29417] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 597.669483][T29417] RBP: 00007ff3834f008d R08: 0000000000000000 R09: 0000000000000000 [ 597.677417][T29417] R10: 0008000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 597.686715][T29417] R13: 00007ffca7b894bf R14: 00007ff381e0b300 R15: 0000000000022000 [ 597.694603][T29417] 23:15:06 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x41, 0x4) 23:15:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1643a3a6fd511339, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x1000000000000000}, 0x0) 23:15:07 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:15:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) [ 597.732099][ T39] audit: type=1400 audit(1647990907.318:166675): avc: denied { read } for pid=29434 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 23:15:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 23:15:07 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:15:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03b0000) 23:15:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 23:15:07 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:15:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 23:15:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 23:15:07 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 23:15:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03b0000) 23:15:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03b0000) 23:15:07 executing program 3: syz_emit_ethernet(0x63e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0x608, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xb, "a78c790b53d5791153d5dea6b259b8e3cd2c8038336823493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b1584f0"}, {0x0, 0x15, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ef2c6a2990edfa6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31"}, {0x0, 0x92, "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"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576203e1010898b256e481da1003059f85a16267a0a16267a090b62089fc0d776d581b1bd756ff901000000000000000"}, {0x0, 0x0, "d3f410"}]}}}}}}, 0x0) [ 597.940063][T29461] IPv6: addrconf: prefix option has invalid lifetime 23:15:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03b0000) 23:15:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03b0000) [ 597.967573][ T39] audit: type=1400 audit(1647990907.548:166676): avc: denied { write } for pid=3110 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 23:15:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 23:15:07 executing program 3: syz_emit_ethernet(0x63e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0x608, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xb, "a78c790b53d5791153d5dea6b259b8e3cd2c8038336823493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b1584f0"}, {0x0, 0x15, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ef2c6a2990edfa6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31"}, {0x0, 0x92, "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"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576203e1010898b256e481da1003059f85a16267a0a16267a090b62089fc0d776d581b1bd756ff901000000000000000"}, {0x0, 0x0, "d3f410"}]}}}}}}, 0x0) [ 598.001162][ T39] audit: type=1400 audit(1647990907.558:166677): avc: denied { remove_name } for pid=3110 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.008092][T29469] IPv6: addrconf: prefix option has invalid lifetime 23:15:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03b0000) [ 598.026800][ T39] audit: type=1400 audit(1647990907.558:166678): avc: denied { add_name } for pid=3110 comm="syslogd" name="messages.0" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 23:15:07 executing program 3: syz_emit_ethernet(0x63e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0x608, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xb, "a78c790b53d5791153d5dea6b259b8e3cd2c8038336823493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b1584f0"}, {0x0, 0x15, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ef2c6a2990edfa6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31"}, {0x0, 0x92, "062bf7b5e0f2dbbdc849b90d4e80a0e3f7af088060d01a1cfcfad82994831d21c0b1a3dd4bcb8ef4512c6ef5c0ead4b9cc87484b106a060a9899d50f595204418f51e914c88c29078a5457de6a262cadf02b071d88e61703f037caded0b315701274012fa532ddd69499074e1a2df196e0afcffda08fb3d82ab8160253a47d3efc3d7cead55c28610ae20f69aaced0a1a6ce815344cf8d0bc8a0dfcdd1e8cd7242601777ec653c2d4b704397dcb1350982afd017eaa630c840d71589499fd68239ae0c0aa2fc9b949d1a716d40a24f078e92e8c268ff726290944b5f3a3bea9559f2d2a51405fba224411ecc49544dea47917a98bf79c3bfeed70429abf70a52ecbda21c9bf0f6a70cd2c2f67b31594095ad22b437c60abf829447b47bd231ca2a98d9da7519a4bd28e803f3d251f4caf1f819d54377cf04b1c5fa000fafc0dc453ed56cdf4356d7abcfec4eed0b94a4f78ce44a7177c6684026ba4f26a17e52e326c8bb7be5e2ea5780d7169d8f4ff62cb2b223f1d6221f62e0ee0244d86042560edd36853c464b23be536c65b87cd5ea60932ed90607b369ed2017f645afcb5cd07f6896a08473bd5dea2bfb52ac501a39c338ede985aa4a7755db876cbe4d944f3cce0079d2ad9ba8d17f01a614052aadbd4af0fd282f594dc4530ee49b6c9ae6d5d80a073e678594be412f0869baa2a58dd2d0f6a995fb706c4d1b618d57da1c2d8f55611f746105a947b4f6bb74dbdbffb1b3c1f2316f6a28a07f0145b1bf8345b6aa4e9d1a819497856792121219ea151c1f8e2f86356439bc5b87fe4cad68b6afa08687e6e751803867165eac0c34bdddae1bbe52fd5d08cc4a0865f8df372635e8a26ac4ac9716a124ac4e83349f17b60ae2b1893b5eaccecc7d812bb4f4fc6b313f57c2035a90f782a4a97b5f5309b6c5798d72b9187f3d411e84041e3671fe35e39fa1887846721c38d501b471990b911f2d81b061081c31a843d75838c1aa4ff0dabd74284709f1f87f324ec4f56eacd70e6bb5e9c3ff719786c4d4284e4cfdc828e0465ca168d04de1d8e884bc31006c112176ef3f8cffd1ae383cf5ea5d60dbbf4a74c942541b8ea4ed6e510893c183ac90b7f9e15b7dbe8953a4e8c5a5e27b01ca46f9b3c976013af4bec92641513fecb7ccefd439d56e21a4fadc52148e821ec4d1949f75a7f0e1f11f537dbbab42abc804b49bd485505def27a5f437a06d0a96571e0800d69df5229bfcd3162b90af3d87751f50c06541fba6e8d6ddc0d16546d0efda7eff96a819048e6a1510ef673fc6fd5a9fa64280eeb935bfe8f91b503941a5676c48d6c37c900281e275fc4cdfc843c86c149a8bb8287d2c14f174888259a1b264a0a79f708a0a5bb3e1523ad6402cfb7aabf222312a085628b7ed6d712567562753057b91cd677498ae8009183ea868ed52d285dfce7e86b4d2611a3adfab21c972002dd747e58609c1caa5cac1d9dc393dab20090c9e3147388978e20192c3a34fb36e075baa8f32244d2b8762f1c8524fca88f6aba21fac00000000000000002d2d360ca6c625cee53cc48ce34da0a8b184b97adb34abd4a83319b3edc1d6dc7fff6b5eca5e05d37985adac165b8757a61a6bb110fd9dda990974f5d92e7cbe3b3dbd07bd854e56a8"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576203e1010898b256e481da1003059f85a16267a0a16267a090b62089fc0d776d581b1bd756ff901000000000000000"}, {0x0, 0x0, "d3f410"}]}}}}}}, 0x0) [ 598.069849][T29474] IPv6: addrconf: prefix option has invalid lifetime 23:15:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03b0000) 23:15:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 23:15:07 executing program 3: syz_emit_ethernet(0x63e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0505a8", 0x608, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xb, "a78c790b53d5791153d5dea6b259b8e3cd2c8038336823493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a3a1328c5f93037dc1435c11b3000000008403af736b1584f0"}, {0x0, 0x15, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295aa9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ef2c6a2990edfa6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31"}, {0x0, 0x92, "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"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26576203e1010898b256e481da1003059f85a16267a0a16267a090b62089fc0d776d581b1bd756ff901000000000000000"}, {0x0, 0x0, "d3f410"}]}}}}}}, 0x0) [ 598.102169][T29480] IPv6: addrconf: prefix option has invalid lifetime 23:15:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x2, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x24}}, 0x0) 23:15:07 executing program 1: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="8100000000000000000001"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 23:15:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x1}) 23:15:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x2, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x24}}, 0x0) 23:15:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 23:15:07 executing program 1: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="8100000000000000000001"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 23:15:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e00000000110000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x4}, {0x4}}]}}]}, 0x3c}}, 0x0) 23:15:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x2, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x24}}, 0x0) 23:15:07 executing program 1: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="8100000000000000000001"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) [ 598.208662][T29496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:15:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x2, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x24}}, 0x0) [ 598.233707][T29496] validate_nla: 2 callbacks suppressed [ 598.233754][T29496] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:15:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000003900)={@remote}, 0x14) 23:15:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e00000000110000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x4}, {0x4}}]}}]}, 0x3c}}, 0x0) 23:15:07 executing program 1: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="8100000000000000000001"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 23:15:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x2143}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 23:15:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 23:15:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x123402) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ae88bff8240b01005aa6ca9566d98e06c896fdffffffffffffffdd0000fffffffffbfffff000000000000f60a6dc33191c71fb828e976e36321fc5e899ccb93167247a38f43c51b0cf73", 0x4a}], 0x1) [ 598.306748][T29504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:15:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80004502, 0x0) 23:15:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x2143}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 23:15:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 598.373619][T29504] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:15:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e00000000110000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x4}, {0x4}}]}}]}, 0x3c}}, 0x0) 23:15:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x2143}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 23:15:07 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 23:15:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x2143}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 23:15:08 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 598.424649][T29527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.449505][T29527] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:15:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x2143}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 23:15:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xfffffef0}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff004000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000024005f870b0e00000000110000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x4}, {0x4}}]}}]}, 0x3c}}, 0x0) 23:15:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:15:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x2143}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 598.502464][T29535] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 23:15:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x2143}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 23:15:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 23:15:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) [ 598.549588][T29535] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:15:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 23:15:08 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 23:15:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 23:15:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 23:15:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 23:15:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 23:15:08 executing program 0: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x58000008, 0xffffffffffffffff, 0x0) 23:15:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) [ 598.850667][T29545] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:08 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:08 executing program 0: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x58000008, 0xffffffffffffffff, 0x0) 23:15:08 executing program 3: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x58000008, 0xffffffffffffffff, 0x0) 23:15:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 23:15:08 executing program 3: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x58000008, 0xffffffffffffffff, 0x0) 23:15:08 executing program 0: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x58000008, 0xffffffffffffffff, 0x0) 23:15:08 executing program 0: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x58000008, 0xffffffffffffffff, 0x0) 23:15:08 executing program 3: r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x58000008, 0xffffffffffffffff, 0x0) [ 599.142546][T29572] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:08 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 23:15:08 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:08 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:08 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 23:15:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 599.499239][T29588] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.513731][T29589] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 23:15:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 599.529190][T29591] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:09 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:09 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:09 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 23:15:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 23:15:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) [ 599.879584][T29617] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 23:15:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 23:15:09 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x11, &(0x7f00000001c0)="815feaf5c265f16cfb8a447ad5e4798e89"}) 23:15:09 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100043040036d1000000000100000000", @ANYRES32=r3, @ANYBLOB="0304000000000000400012800800010067726500340002800800070064"], 0x60}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x0) 23:15:09 executing program 1: keyctl$assume_authority(0x10, 0x0) request_key(&(0x7f0000000080)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(0x0, 0x80) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000003c0)='./file0\x00', 0xba, 0x4, &(0x7f0000000780)=[{&(0x7f0000000400)="87b87a96574c1ba191513f9fc8c6366f4eeeaa6734d99237174e522b6ab668c305f23f3b01f03d73a1f314c5f6db6479dd816404739bad83f1f05178b363b93581e047a2a43d1f8d911ec28464b78af020ecc4e93d9b37b7bf9c49a4e6aa4e366e59cdf74e1fe3431c75700d6b636153dd4b7c15297ec7dc594300ebc41fd0da1f485e6d3a2c8b8cdf36b56c792808a2b007038f520f5eb9d7c41f68ff639768347fdd9a8b44b06549c0a772396de22239e49032c3a5d2", 0xb7, 0x101}, {&(0x7f00000004c0)}, {0x0}, {&(0x7f00000005c0)="c4041cd9c0b53e9e4198b01f1ce96db96fd0bddbe337b36128e7078461217a57828b531854", 0x25}], 0x42000, &(0x7f0000000840)={[{'}])#(!-{'}, {'-%'}, {'keyring\x00'}], [{@subj_type={'subj_type', 0x3d, '\\'}}, {@obj_type}]}) 23:15:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4882000e2de7fc41100000ce1bce0020000003"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)) 23:15:09 executing program 1: keyctl$assume_authority(0x10, 0x0) request_key(&(0x7f0000000080)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(0x0, 0x80) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000003c0)='./file0\x00', 0xba, 0x4, &(0x7f0000000780)=[{&(0x7f0000000400)="87b87a96574c1ba191513f9fc8c6366f4eeeaa6734d99237174e522b6ab668c305f23f3b01f03d73a1f314c5f6db6479dd816404739bad83f1f05178b363b93581e047a2a43d1f8d911ec28464b78af020ecc4e93d9b37b7bf9c49a4e6aa4e366e59cdf74e1fe3431c75700d6b636153dd4b7c15297ec7dc594300ebc41fd0da1f485e6d3a2c8b8cdf36b56c792808a2b007038f520f5eb9d7c41f68ff639768347fdd9a8b44b06549c0a772396de22239e49032c3a5d2", 0xb7, 0x101}, {&(0x7f00000004c0)}, {0x0}, {&(0x7f00000005c0)="c4041cd9c0b53e9e4198b01f1ce96db96fd0bddbe337b36128e7078461217a57828b531854", 0x25}], 0x42000, &(0x7f0000000840)={[{'}])#(!-{'}, {'-%'}, {'keyring\x00'}], [{@subj_type={'subj_type', 0x3d, '\\'}}, {@obj_type}]}) 23:15:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4882000e2de7fc41100000ce1bce0020000003"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)) 23:15:09 executing program 1: keyctl$assume_authority(0x10, 0x0) request_key(&(0x7f0000000080)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(0x0, 0x80) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000003c0)='./file0\x00', 0xba, 0x4, &(0x7f0000000780)=[{&(0x7f0000000400)="87b87a96574c1ba191513f9fc8c6366f4eeeaa6734d99237174e522b6ab668c305f23f3b01f03d73a1f314c5f6db6479dd816404739bad83f1f05178b363b93581e047a2a43d1f8d911ec28464b78af020ecc4e93d9b37b7bf9c49a4e6aa4e366e59cdf74e1fe3431c75700d6b636153dd4b7c15297ec7dc594300ebc41fd0da1f485e6d3a2c8b8cdf36b56c792808a2b007038f520f5eb9d7c41f68ff639768347fdd9a8b44b06549c0a772396de22239e49032c3a5d2", 0xb7, 0x101}, {&(0x7f00000004c0)}, {0x0}, {&(0x7f00000005c0)="c4041cd9c0b53e9e4198b01f1ce96db96fd0bddbe337b36128e7078461217a57828b531854", 0x25}], 0x42000, &(0x7f0000000840)={[{'}])#(!-{'}, {'-%'}, {'keyring\x00'}], [{@subj_type={'subj_type', 0x3d, '\\'}}, {@obj_type}]}) 23:15:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4882000e2de7fc41100000ce1bce0020000003"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)) 23:15:09 executing program 1: keyctl$assume_authority(0x10, 0x0) request_key(&(0x7f0000000080)='.dead\x00', 0x0, 0x0, 0xfffffffffffffffc) pipe2$watch_queue(0x0, 0x80) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nfs(0x0, &(0x7f00000003c0)='./file0\x00', 0xba, 0x4, &(0x7f0000000780)=[{&(0x7f0000000400)="87b87a96574c1ba191513f9fc8c6366f4eeeaa6734d99237174e522b6ab668c305f23f3b01f03d73a1f314c5f6db6479dd816404739bad83f1f05178b363b93581e047a2a43d1f8d911ec28464b78af020ecc4e93d9b37b7bf9c49a4e6aa4e366e59cdf74e1fe3431c75700d6b636153dd4b7c15297ec7dc594300ebc41fd0da1f485e6d3a2c8b8cdf36b56c792808a2b007038f520f5eb9d7c41f68ff639768347fdd9a8b44b06549c0a772396de22239e49032c3a5d2", 0xb7, 0x101}, {&(0x7f00000004c0)}, {0x0}, {&(0x7f00000005c0)="c4041cd9c0b53e9e4198b01f1ce96db96fd0bddbe337b36128e7078461217a57828b531854", 0x25}], 0x42000, &(0x7f0000000840)={[{'}])#(!-{'}, {'-%'}, {'keyring\x00'}], [{@subj_type={'subj_type', 0x3d, '\\'}}, {@obj_type}]}) 23:15:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4882000e2de7fc41100000ce1bce0020000003"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)) 23:15:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x10012, r4, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 23:15:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:15:10 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) 23:15:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/225, 0xe1}, {0x0}, {&(0x7f00000011c0)=""/241, 0xf1}], 0x9}}], 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924ba4, 0x0) 23:15:10 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) 23:15:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/225, 0xe1}, {0x0}, {&(0x7f00000011c0)=""/241, 0xf1}], 0x9}}], 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924ba4, 0x0) 23:15:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:15:10 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) 23:15:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:15:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/225, 0xe1}, {0x0}, {&(0x7f00000011c0)=""/241, 0xf1}], 0x9}}], 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924ba4, 0x0) 23:15:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:15:10 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), 0x4) 23:15:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000005a001d72d51576c2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newroute={0xd88, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0xd6a, 0x8, 0x0, 0x1, "8f4852bb77007d6d7eaadf4f53919eab2471cdbb66a3507656b5fa8f0834342b05fc1681e89a9b7683f3a7ca0858952a668e25a894766fc2bedca49ba606373f9e79a250a1fea137736626499a710f868df6b5552e0ed9131f2c9ba10f5361658a7ae591e2d57f7effeb6995750be1d77c2f78c4b248e0f5438e3ab36b48e6495a5ba91a1906009ce6754fadbf71a9d314aad26bc739fc71a5036bb0aa4eb2749fc410c375d86bc9593fba508b3f525eaa75bdfed8e71296400373130b3101dab8c30654920c920e7990a4c2b0052da9dab31b4020bf7add8cfc064154d7b44de1094432e7b35db9321076f5713d817ee6fd0446ab5509f97505654af2f1b665cf89638ddcd825f00b575bd6fb3f866abf8970b7fec54dedccbabd766b8a9d1b8f2f46687b04d5a5eb2be23665ae2c50421b72983383a1f78d4b6ff344b56d0a5bb97a2bf24466a70ad8d1a0ebe4c6c41a1eb9ba271a1ff864266659d0f56774b4eb95eddaa4382a1772593b9de8c23e015c35075fb1cfefc3f2ce48a8c2279c6db821b854064a93369214710606d8f0cc0dcefcc0e96b4d778ffee15c3f9238dce150cd1c0f29eb6e4c9d7302ebe6c52b85ff6ea16576c37e37508d9470637e8e28ab264f029dacd045ee57c2c4541134fb6b183576acbe45b44b52028b938d0f379604dff3b37e87286821d661e91526a69fa45246539797f8d0edb31e521a028412c3507b2c4703c12254390f7c2b9ae0575e41f10b7f542748e96bc68a7ff8e65a3c4bfb2db390272088f88ce239132a0e5f15a216b645ab50aeb5733e03b727060f0f595682ead9443bd3fb0ccd28079074c0daebafa316cf2f186263550c6cda31baa4889da34375b9eb6fa08be681a6fc902a1a8ee01201626fd214c83a18dd1ea1fa2753e26bbdd6a13eed8d2b9360b62fc4c90870db2ebb773d45766a6e5d70fa6121deb39dd898526cc6202f91367edbf623481809eeacc6635071401116e14421e376aee7cdc6987548e0ae06ed5d6e2ff8e03b0bf859a0a90eae6dde15851e3613933494610bc3ac5fa737e2a25e3edb645981f3d9126f88d588d93669157dbe10add651485c2c067dfd8fbf82ebab62126c4a76d52d863bea35eea135e96ad300850ff8eaf8ee986f643213267bfcc5d9b9b096687560acdac342585df512735b49c7bba1c2ec37f22400bb6eb1651952cb884f23372d8960db578c946c4de6caf707ffecca6e9fcc23df7c24d8f60891555860b9e143898a30ba2de9220066d006b9c34866109b2356e3acb011a143f1b59f515f018c0e484846a5be53fa966bd4e0417b1a9f3d015f942328848b1959850519f7a88dbae07a0bc47e102313203aba71448c9589a252cd761876931410a7697c307689c012b699cfbf4163b8c22f734f7cfe5f7899dabc3cdad56e8a838a223275be4a55e43b8888afbe6d67c7d2a51e66dbfd564e010dd8a50b7af3818fe427dfddcd90840b253ae6d1ed480fe3b238ce97f2da4d1e305ab96b60179245395a4aec8482267f9bc918066eaf4360e219b83ed649c1006ae2fdb03c650bf34198a955e03f51f4a9137ebe2d9160568daba35d46a9b5fbbcaeead55e58651f1e4fe85890f81fc50939b970d423bb227c79e9b26d26c29e5ac98cffc4171d16b20a71feda4f9eda7de9bcc06af7c5dc8ee38c32fd98dc714fd71a7f2ee6450eeaaf70947c03930ecc6e54e32914b7fcc97ad3e3182e45c7fbb2c00f3b3ea2014cbcd4b45ea951dd6aab95ba70ba67f2132653d1b4764d3d49f986ef052dc1330aa10af33ca5ef034919acd5378f693627facac82a117513ccbf078ab490b0dfdb93cb2c3f4ec78f1224baea2d5e6a2f76b1ed78531570321212985401e5294aeeaa926e400189bafc45dfd8a273aac6da9b650e99e3295e613e2756e1d209c553bb2b27c7abd29b37d4f87b6e4d13e2448af5d65b5d3ce1b42bfe2a2040feabcc62d92a9830dea39cf29755a95ede74170848d7f1005d52d830b4b536addd6cb9e5ee495f47ea05f7b8bf9e732060e5d154cc5e36cc749f96eb9b21d9bdc24d2bb21ababc5d7433fde3446765f9dd4c0dd77adf344926728bf1474aebbb690f5d825b166ca35e00f4e5d4c0750c455bc49523e44f81ff358a1bbc36fd627006447228dfe0fdbe94e3084d80857101a27486bcaa313e048326729e37ee91156e501fa358820b8b81d74acf2a9ed5cb6b51202060b6e1a195052b9a4dfe3d06d3aca628763866cb0a02d154fc0cc4149d9a6aa8f1e7dadb45f6d71b4e6325fecdf95059b0647d1eb2e610fc95bea8a5aee3ba97297d15acdf73dde0726fefdcf7092367c266df68611c9afceb733023b0e49bfacc04e54f0ffd565ef86d3ba418ce62f5cc5a177ff91bf13623657a0ebf857124c493204854e8f468fb047e13a17d7ba9ac9d88c01db215aac9b33a1350f9cf0f6063715931e1e8b9a2c0ca18fb9cf62f0ad7540e30ac44621c6ea7dee6894635c93d2e42b9c980e498d89322f7663693fd34ee5c7d1f46db272ec23efeead1a42578bc6e0d6bfd877b66cb7feb52e41b38adc44cd1f27a55c74ba68edee92302bc87c8d2873398590b6841d7172725d57e0908bf0b419ae50a07653019f9ff78dcec85a3140488c05929cef71f3fa45ee596d6dd255fa2ac52decd5c25c8c41884c1da90ea71ed9bb1266e888142aee6d67745a4bf042ec70dd0d91e52a9f79bbbd8d7127b74b4eefdd09d7a125a76093bcd8d9f4c54dd2f006b17027eb334708eaf8475e137434718f56e3f627bb199eb7065bc8029e06fd6491760572c7351050ad9697548b03fcb0ab1e5e0b2d2f9a7914214f524793e62019e3f2f04e4ce200a35a6e76161fa98c94b1497cb7790941127343972891f58b93978f44c3294cac9a88df369ba68b5e4f11069b1048b6183edef6cf1b064ec7443178dc3ccc35082d437d7c33ac54182b5b6ec61443a6e5fe6c8c66d0859cf17ad9d9bad4a0a2400083d4926fdd1e26d786c748b22df58d9ab1a861c510946cb2b706ba6fb4e8f239b5a0397fdda9be4f33bad446c1c9b8f4d5b683541173a87f1d9d9a2620e9db818dbaaea9f7bc54ad6accaf9d16ed421a3e1144cc8b0fbc2e53a147c0368f115a9d296236f2b922669e5fbce0de4d40ccd365bf234d805c19b1d221c13da16001d45305d0952dec5250f6a7b9436b8e4733b860f459bb2fb2e62ca7bad9efd8de051124c8271ab9ea6b60e92fab028378a2fc2d897856013d70b9909ef3c23b5597c1c2eda8524d6ccdbf66ff6de32528ac5400813841beff8410a39c065eed2dc1ed155ab5224b78d3fb384f2d79ba49105e41c255633e9619b3f33960d779da19f924752a131623aa503d240473e135d865c900225ffa5ab7756453048571448b98583a4cd6f114a17c250c234fc536f6d4d7eecc5264173d224d04728a46462d58f008f4d807b5e0901fe77e117a577241c44d0aa832b7bf0a6ca72ae5b59c5b8e59d0d22dac9b9047ab9dae8fec8f2ce3238cfc20a5f828fadc0e791a6ae9cb8a8498de5fe74491c5fd003e9525ca5dc495e251723b8e478b961174f0e90f7eeaf3bfe436c507640bc4085e86b8b2c2ca5f07b83ddc3a0256a42028960acad6b660520b07acf523a874ba3dbac8871daa6fd9eb1ce3b37240769c1fbe90cbcff0df047de8ecdd5d8f4dc3268f631e7d2424b930d54c3f6bd44985313e2d14b79664517bd1f7ffdf967b7c32a1f9fd1db121b66aa5a6adb2ef235670b11e6a150ef17f8b70af1b615285bd191cb4504b5ab35e89142b329d8da8e1412b7d08b473087442e48dbf75f34690bb5888a2c2942975a5f652e18f9b64b089ce120e2c04a1a16b317fb97f07bc8a9ca8806734cd537a653ed053a25ab7608690b9a22f6652f136aa7fd9b2fd419dd8320f40a05eeea61c86cef4e22bec2dfa0a26b374fc7e9d9ea61fa64af728bd0eb71b1720c3a78ecfa05528a8bbcc0a876fe155dc250151c0ea947a89cf47727d7952ee3085d9bdd267116ec75569a25badbc9cea138af507d77f34ba1a09ba07ae05c47420f528cfadabc2f9f54a17b30f5d782fa1ec5bd3eabfa7a044f3e487c4b6c000d52feca77d0f78a970257f3e6df791bee09eca08a802646d29ee814995d9babe158039c14a60232c04ee9c0c064a863d60a56880d48cff3dd5dcd65b0b748d56f6455dd7817a9773792ca7782522a2abf7094398bc29fd31cccf79246af3fa63f514c3f1659c372ee36ac1001dfd1c0f9d079041665381dfc756daa05bd7b07707552f43aac1ad0c0001b4181e783c999067d37e144cbf94f2035a3f6451a90539498935c16ddea0b79e4392c45366a58a9489bc6c4be56054597a9a73ef0e390fb1fd8266d2cd6555cdb08ce8631e68c52eb81db9aba324c455984781680a617ff5dc673355b6b0403b7ebae0bd74af77e0d95f84a50fdecdfd98ae7bb220328ea99489a024c20e44752c8a928f8d8671272ae4547233212e2a632a06f5053c1eba79e6ec6b74b4d3c60e4fda5199bb9d2a0e22be17bdb279d8151b7f14b7aa6219d64ddd03f8c3875b0e0478102c13cb57b13fdf715a2deee55f5962223053cdbd73f93f69dcdc6513302a42d518f9657490449070fd89a49073edc46e3866b2fb80a46c98e11f78b898062d649c237f7b9813c16a379042a0bd0ca0b14ac0b3160dc9c105dc4af9a29d1851728dbdb6eaa4baa57adcd66d323aec233b9823f8f4f9b88ccfee3017b4d01b54161e749bf0f8a7f24095baa6f395f29c29137d476b3b4eecbe8dcf00f24fa26e34dcf6e00d948286e9a0bdd90d3a35c607de3856f6a079b4ad5dc"}]}, 0xd88}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 23:15:10 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/225, 0xe1}, {0x0}, {&(0x7f00000011c0)=""/241, 0xf1}], 0x9}}], 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924ba4, 0x0) 23:15:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:15:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:15:10 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/83, 0x53}], 0x1, 0x7, 0x0) 23:15:10 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/83, 0x53}], 0x1, 0x7, 0x0) 23:15:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:15:10 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/83, 0x53}], 0x1, 0x7, 0x0) 23:15:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000005a001d72d51576c2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newroute={0xd88, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0xd6a, 0x8, 0x0, 0x1, "8f4852bb77007d6d7eaadf4f53919eab2471cdbb66a3507656b5fa8f0834342b05fc1681e89a9b7683f3a7ca0858952a668e25a894766fc2bedca49ba606373f9e79a250a1fea137736626499a710f868df6b5552e0ed9131f2c9ba10f5361658a7ae591e2d57f7effeb6995750be1d77c2f78c4b248e0f5438e3ab36b48e6495a5ba91a1906009ce6754fadbf71a9d314aad26bc739fc71a5036bb0aa4eb2749fc410c375d86bc9593fba508b3f525eaa75bdfed8e71296400373130b3101dab8c30654920c920e7990a4c2b0052da9dab31b4020bf7add8cfc064154d7b44de1094432e7b35db9321076f5713d817ee6fd0446ab5509f97505654af2f1b665cf89638ddcd825f00b575bd6fb3f866abf8970b7fec54dedccbabd766b8a9d1b8f2f46687b04d5a5eb2be23665ae2c50421b72983383a1f78d4b6ff344b56d0a5bb97a2bf24466a70ad8d1a0ebe4c6c41a1eb9ba271a1ff864266659d0f56774b4eb95eddaa4382a1772593b9de8c23e015c35075fb1cfefc3f2ce48a8c2279c6db821b854064a93369214710606d8f0cc0dcefcc0e96b4d778ffee15c3f9238dce150cd1c0f29eb6e4c9d7302ebe6c52b85ff6ea16576c37e37508d9470637e8e28ab264f029dacd045ee57c2c4541134fb6b183576acbe45b44b52028b938d0f379604dff3b37e87286821d661e91526a69fa45246539797f8d0edb31e521a028412c3507b2c4703c12254390f7c2b9ae0575e41f10b7f542748e96bc68a7ff8e65a3c4bfb2db390272088f88ce239132a0e5f15a216b645ab50aeb5733e03b727060f0f595682ead9443bd3fb0ccd28079074c0daebafa316cf2f186263550c6cda31baa4889da34375b9eb6fa08be681a6fc902a1a8ee01201626fd214c83a18dd1ea1fa2753e26bbdd6a13eed8d2b9360b62fc4c90870db2ebb773d45766a6e5d70fa6121deb39dd898526cc6202f91367edbf623481809eeacc6635071401116e14421e376aee7cdc6987548e0ae06ed5d6e2ff8e03b0bf859a0a90eae6dde15851e3613933494610bc3ac5fa737e2a25e3edb645981f3d9126f88d588d93669157dbe10add651485c2c067dfd8fbf82ebab62126c4a76d52d863bea35eea135e96ad300850ff8eaf8ee986f643213267bfcc5d9b9b096687560acdac342585df512735b49c7bba1c2ec37f22400bb6eb1651952cb884f23372d8960db578c946c4de6caf707ffecca6e9fcc23df7c24d8f60891555860b9e143898a30ba2de9220066d006b9c34866109b2356e3acb011a143f1b59f515f018c0e484846a5be53fa966bd4e0417b1a9f3d015f942328848b1959850519f7a88dbae07a0bc47e102313203aba71448c9589a252cd761876931410a7697c307689c012b699cfbf4163b8c22f734f7cfe5f7899dabc3cdad56e8a838a223275be4a55e43b8888afbe6d67c7d2a51e66dbfd564e010dd8a50b7af3818fe427dfddcd90840b253ae6d1ed480fe3b238ce97f2da4d1e305ab96b60179245395a4aec8482267f9bc918066eaf4360e219b83ed649c1006ae2fdb03c650bf34198a955e03f51f4a9137ebe2d9160568daba35d46a9b5fbbcaeead55e58651f1e4fe85890f81fc50939b970d423bb227c79e9b26d26c29e5ac98cffc4171d16b20a71feda4f9eda7de9bcc06af7c5dc8ee38c32fd98dc714fd71a7f2ee6450eeaaf70947c03930ecc6e54e32914b7fcc97ad3e3182e45c7fbb2c00f3b3ea2014cbcd4b45ea951dd6aab95ba70ba67f2132653d1b4764d3d49f986ef052dc1330aa10af33ca5ef034919acd5378f693627facac82a117513ccbf078ab490b0dfdb93cb2c3f4ec78f1224baea2d5e6a2f76b1ed78531570321212985401e5294aeeaa926e400189bafc45dfd8a273aac6da9b650e99e3295e613e2756e1d209c553bb2b27c7abd29b37d4f87b6e4d13e2448af5d65b5d3ce1b42bfe2a2040feabcc62d92a9830dea39cf29755a95ede74170848d7f1005d52d830b4b536addd6cb9e5ee495f47ea05f7b8bf9e732060e5d154cc5e36cc749f96eb9b21d9bdc24d2bb21ababc5d7433fde3446765f9dd4c0dd77adf344926728bf1474aebbb690f5d825b166ca35e00f4e5d4c0750c455bc49523e44f81ff358a1bbc36fd627006447228dfe0fdbe94e3084d80857101a27486bcaa313e048326729e37ee91156e501fa358820b8b81d74acf2a9ed5cb6b51202060b6e1a195052b9a4dfe3d06d3aca628763866cb0a02d154fc0cc4149d9a6aa8f1e7dadb45f6d71b4e6325fecdf95059b0647d1eb2e610fc95bea8a5aee3ba97297d15acdf73dde0726fefdcf7092367c266df68611c9afceb733023b0e49bfacc04e54f0ffd565ef86d3ba418ce62f5cc5a177ff91bf13623657a0ebf857124c493204854e8f468fb047e13a17d7ba9ac9d88c01db215aac9b33a1350f9cf0f6063715931e1e8b9a2c0ca18fb9cf62f0ad7540e30ac44621c6ea7dee6894635c93d2e42b9c980e498d89322f7663693fd34ee5c7d1f46db272ec23efeead1a42578bc6e0d6bfd877b66cb7feb52e41b38adc44cd1f27a55c74ba68edee92302bc87c8d2873398590b6841d7172725d57e0908bf0b419ae50a07653019f9ff78dcec85a3140488c05929cef71f3fa45ee596d6dd255fa2ac52decd5c25c8c41884c1da90ea71ed9bb1266e888142aee6d67745a4bf042ec70dd0d91e52a9f79bbbd8d7127b74b4eefdd09d7a125a76093bcd8d9f4c54dd2f006b17027eb334708eaf8475e137434718f56e3f627bb199eb7065bc8029e06fd6491760572c7351050ad9697548b03fcb0ab1e5e0b2d2f9a7914214f524793e62019e3f2f04e4ce200a35a6e76161fa98c94b1497cb7790941127343972891f58b93978f44c3294cac9a88df369ba68b5e4f11069b1048b6183edef6cf1b064ec7443178dc3ccc35082d437d7c33ac54182b5b6ec61443a6e5fe6c8c66d0859cf17ad9d9bad4a0a2400083d4926fdd1e26d786c748b22df58d9ab1a861c510946cb2b706ba6fb4e8f239b5a0397fdda9be4f33bad446c1c9b8f4d5b683541173a87f1d9d9a2620e9db818dbaaea9f7bc54ad6accaf9d16ed421a3e1144cc8b0fbc2e53a147c0368f115a9d296236f2b922669e5fbce0de4d40ccd365bf234d805c19b1d221c13da16001d45305d0952dec5250f6a7b9436b8e4733b860f459bb2fb2e62ca7bad9efd8de051124c8271ab9ea6b60e92fab028378a2fc2d897856013d70b9909ef3c23b5597c1c2eda8524d6ccdbf66ff6de32528ac5400813841beff8410a39c065eed2dc1ed155ab5224b78d3fb384f2d79ba49105e41c255633e9619b3f33960d779da19f924752a131623aa503d240473e135d865c900225ffa5ab7756453048571448b98583a4cd6f114a17c250c234fc536f6d4d7eecc5264173d224d04728a46462d58f008f4d807b5e0901fe77e117a577241c44d0aa832b7bf0a6ca72ae5b59c5b8e59d0d22dac9b9047ab9dae8fec8f2ce3238cfc20a5f828fadc0e791a6ae9cb8a8498de5fe74491c5fd003e9525ca5dc495e251723b8e478b961174f0e90f7eeaf3bfe436c507640bc4085e86b8b2c2ca5f07b83ddc3a0256a42028960acad6b660520b07acf523a874ba3dbac8871daa6fd9eb1ce3b37240769c1fbe90cbcff0df047de8ecdd5d8f4dc3268f631e7d2424b930d54c3f6bd44985313e2d14b79664517bd1f7ffdf967b7c32a1f9fd1db121b66aa5a6adb2ef235670b11e6a150ef17f8b70af1b615285bd191cb4504b5ab35e89142b329d8da8e1412b7d08b473087442e48dbf75f34690bb5888a2c2942975a5f652e18f9b64b089ce120e2c04a1a16b317fb97f07bc8a9ca8806734cd537a653ed053a25ab7608690b9a22f6652f136aa7fd9b2fd419dd8320f40a05eeea61c86cef4e22bec2dfa0a26b374fc7e9d9ea61fa64af728bd0eb71b1720c3a78ecfa05528a8bbcc0a876fe155dc250151c0ea947a89cf47727d7952ee3085d9bdd267116ec75569a25badbc9cea138af507d77f34ba1a09ba07ae05c47420f528cfadabc2f9f54a17b30f5d782fa1ec5bd3eabfa7a044f3e487c4b6c000d52feca77d0f78a970257f3e6df791bee09eca08a802646d29ee814995d9babe158039c14a60232c04ee9c0c064a863d60a56880d48cff3dd5dcd65b0b748d56f6455dd7817a9773792ca7782522a2abf7094398bc29fd31cccf79246af3fa63f514c3f1659c372ee36ac1001dfd1c0f9d079041665381dfc756daa05bd7b07707552f43aac1ad0c0001b4181e783c999067d37e144cbf94f2035a3f6451a90539498935c16ddea0b79e4392c45366a58a9489bc6c4be56054597a9a73ef0e390fb1fd8266d2cd6555cdb08ce8631e68c52eb81db9aba324c455984781680a617ff5dc673355b6b0403b7ebae0bd74af77e0d95f84a50fdecdfd98ae7bb220328ea99489a024c20e44752c8a928f8d8671272ae4547233212e2a632a06f5053c1eba79e6ec6b74b4d3c60e4fda5199bb9d2a0e22be17bdb279d8151b7f14b7aa6219d64ddd03f8c3875b0e0478102c13cb57b13fdf715a2deee55f5962223053cdbd73f93f69dcdc6513302a42d518f9657490449070fd89a49073edc46e3866b2fb80a46c98e11f78b898062d649c237f7b9813c16a379042a0bd0ca0b14ac0b3160dc9c105dc4af9a29d1851728dbdb6eaa4baa57adcd66d323aec233b9823f8f4f9b88ccfee3017b4d01b54161e749bf0f8a7f24095baa6f395f29c29137d476b3b4eecbe8dcf00f24fa26e34dcf6e00d948286e9a0bdd90d3a35c607de3856f6a079b4ad5dc"}]}, 0xd88}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 23:15:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/83, 0x53}], 0x1, 0x7, 0x0) 23:15:11 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffc, 0x0, 0x48040) pread64(r0, &(0x7f0000000100)=""/247, 0xf7, 0x100000000000) 23:15:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/1647], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) 23:15:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000005a001d72d51576c2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newroute={0xd88, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0xd6a, 0x8, 0x0, 0x1, "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"}]}, 0xd88}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 23:15:11 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffc, 0x0, 0x48040) pread64(r0, &(0x7f0000000100)=""/247, 0xf7, 0x100000000000) 23:15:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/1647], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) 23:15:11 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffc, 0x0, 0x48040) pread64(r0, &(0x7f0000000100)=""/247, 0xf7, 0x100000000000) 23:15:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/1647], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) 23:15:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000005a001d72d51576c2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newroute={0xd88, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0xd6a, 0x8, 0x0, 0x1, "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"}]}, 0xd88}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 23:15:12 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffc, 0x0, 0x48040) pread64(r0, &(0x7f0000000100)=""/247, 0xf7, 0x100000000000) 23:15:12 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffc, 0x0, 0x48040) pread64(r0, &(0x7f0000000100)=""/247, 0xf7, 0x100000000000) 23:15:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000005a001d72d51576c2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newroute={0xd88, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0xd6a, 0x8, 0x0, 0x1, "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"}]}, 0xd88}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 23:15:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/1647], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) 23:15:12 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffc, 0x0, 0x48040) pread64(r0, &(0x7f0000000100)=""/247, 0xf7, 0x100000000000) 23:15:12 executing program 3: r0 = syz_open_dev$vcsa(0xfffffffffffffffc, 0x0, 0x48040) pread64(r0, &(0x7f0000000100)=""/247, 0xf7, 0x100000000000) 23:15:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000005a001d72d51576c2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newroute={0xd88, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0xd6a, 0x8, 0x0, 0x1, "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"}]}, 0xd88}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 23:15:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020) 23:15:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000005a001d72d51576c2"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newroute={0xd88, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_METRICS={0xd6a, 0x8, 0x0, 0x1, "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"}]}, 0xd88}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0xa000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) 23:15:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020) 23:15:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020) 23:15:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020) 23:15:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020) 23:15:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020) 23:15:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020) 23:15:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='5'], 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 23:15:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x104) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0xe3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@assoc={0x18}], 0x18}], 0x1, 0x40) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 23:15:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 23:15:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1ae) 23:15:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 23:15:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1ae) [ 605.700242][ T39] audit: type=1400 audit(1647990915.288:166679): avc: denied { setopt } for pid=29853 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 23:15:15 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='5'], 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 23:15:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 23:15:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1ae) 23:15:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 23:15:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1ae) 23:15:15 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='5'], 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 23:15:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 23:15:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 23:15:16 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='5'], 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 23:15:16 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_setlink={0x28, 0x13, 0x10, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x4000, 0x20c20}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4292}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x6c088) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0014) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 23:15:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 23:15:16 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='5'], 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 23:15:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 23:15:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='4', 0x1}], 0x1) 23:15:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='4', 0x1}], 0x1) 23:15:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='4', 0x1}], 0x1) 23:15:17 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='5'], 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 23:15:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='4', 0x1}], 0x1) 23:15:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='4', 0x1}], 0x1) 23:15:17 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='5'], 0x4) close(r2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x4240a2a0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 23:15:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='4', 0x1}], 0x1) 23:15:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:15:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)='4', 0x1}], 0x1) 23:15:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:15:18 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x115600, 0x0) fsetxattr(r0, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0xf, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mq_open(&(0x7f0000000200)='$&\x00`U\xed\xabd\x96\xc8\xac\xd1|*2;\x1cO\xf5\x9e\x173\xad5\x12\xb5\xcd\xeb\xe1\xa2L\xd2\xb8\xa0\xa4\xc1\xad\xfeB\xb7S?\xf9\xde\r\xf5\x11\x05\xd9@\x1ff\x96\x93\xb1#M\xe3\xd3 \xd34\xd8r{\xadU\xf3,\x8f\x12\xda4\x06\x93\xaa\xc3:\x16l\a\xf6\xdd\x93\xdd\x8d-\xf2\x95g\xe7\x8f\xe6\xe4e\xcf\f\xe8c|\xe2\xdc\f\xdf\a\xd7\xd5\x8d\xf1\xfdO\x81S\x9bW\xfc\xb8z1#\x1e\t\xbe!\xbe\xa3\xd7]\xa22\xe5\xd6\x1b/\x01\xe8\n#03\xb5?', 0xc0, 0xba, &(0x7f0000000080)={0x48c, 0x3fc, 0xf39, 0x7}) r2 = socket$inet(0x2, 0x0, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x1, 0xa42a, 0x4, 0x8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'rose0\x00', {0xc5d}, 0x400}) 23:15:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:15:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "03"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 23:15:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/37, 0x20000025}], 0x1, 0x3f000000, 0x0) 23:15:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 23:15:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, 0x0, 0x3}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@loopback, @in=@broadcast}]}]}, 0xa0}}, 0x0) 23:15:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x5d7928e712) 23:15:18 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x115600, 0x0) fsetxattr(r0, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0xf, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mq_open(&(0x7f0000000200)='$&\x00`U\xed\xabd\x96\xc8\xac\xd1|*2;\x1cO\xf5\x9e\x173\xad5\x12\xb5\xcd\xeb\xe1\xa2L\xd2\xb8\xa0\xa4\xc1\xad\xfeB\xb7S?\xf9\xde\r\xf5\x11\x05\xd9@\x1ff\x96\x93\xb1#M\xe3\xd3 \xd34\xd8r{\xadU\xf3,\x8f\x12\xda4\x06\x93\xaa\xc3:\x16l\a\xf6\xdd\x93\xdd\x8d-\xf2\x95g\xe7\x8f\xe6\xe4e\xcf\f\xe8c|\xe2\xdc\f\xdf\a\xd7\xd5\x8d\xf1\xfdO\x81S\x9bW\xfc\xb8z1#\x1e\t\xbe!\xbe\xa3\xd7]\xa22\xe5\xd6\x1b/\x01\xe8\n#03\xb5?', 0xc0, 0xba, &(0x7f0000000080)={0x48c, 0x3fc, 0xf39, 0x7}) r2 = socket$inet(0x2, 0x0, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x1, 0xa42a, 0x4, 0x8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'rose0\x00', {0xc5d}, 0x400}) 23:15:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 23:15:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, 0x0, 0x3}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@loopback, @in=@broadcast}]}]}, 0xa0}}, 0x0) 23:15:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 23:15:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, 0x0, 0x3}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@loopback, @in=@broadcast}]}]}, 0xa0}}, 0x0) 23:15:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 23:15:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x5d7928e712) 23:15:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, 0x0, 0x3}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@loopback, @in=@broadcast}]}]}, 0xa0}}, 0x0) 23:15:18 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x115600, 0x0) fsetxattr(r0, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0xf, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mq_open(&(0x7f0000000200)='$&\x00`U\xed\xabd\x96\xc8\xac\xd1|*2;\x1cO\xf5\x9e\x173\xad5\x12\xb5\xcd\xeb\xe1\xa2L\xd2\xb8\xa0\xa4\xc1\xad\xfeB\xb7S?\xf9\xde\r\xf5\x11\x05\xd9@\x1ff\x96\x93\xb1#M\xe3\xd3 \xd34\xd8r{\xadU\xf3,\x8f\x12\xda4\x06\x93\xaa\xc3:\x16l\a\xf6\xdd\x93\xdd\x8d-\xf2\x95g\xe7\x8f\xe6\xe4e\xcf\f\xe8c|\xe2\xdc\f\xdf\a\xd7\xd5\x8d\xf1\xfdO\x81S\x9bW\xfc\xb8z1#\x1e\t\xbe!\xbe\xa3\xd7]\xa22\xe5\xd6\x1b/\x01\xe8\n#03\xb5?', 0xc0, 0xba, &(0x7f0000000080)={0x48c, 0x3fc, 0xf39, 0x7}) r2 = socket$inet(0x2, 0x0, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x1, 0xa42a, 0x4, 0x8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'rose0\x00', {0xc5d}, 0x400}) 23:15:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x115600, 0x0) fsetxattr(r0, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0xf, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mq_open(&(0x7f0000000200)='$&\x00`U\xed\xabd\x96\xc8\xac\xd1|*2;\x1cO\xf5\x9e\x173\xad5\x12\xb5\xcd\xeb\xe1\xa2L\xd2\xb8\xa0\xa4\xc1\xad\xfeB\xb7S?\xf9\xde\r\xf5\x11\x05\xd9@\x1ff\x96\x93\xb1#M\xe3\xd3 \xd34\xd8r{\xadU\xf3,\x8f\x12\xda4\x06\x93\xaa\xc3:\x16l\a\xf6\xdd\x93\xdd\x8d-\xf2\x95g\xe7\x8f\xe6\xe4e\xcf\f\xe8c|\xe2\xdc\f\xdf\a\xd7\xd5\x8d\xf1\xfdO\x81S\x9bW\xfc\xb8z1#\x1e\t\xbe!\xbe\xa3\xd7]\xa22\xe5\xd6\x1b/\x01\xe8\n#03\xb5?', 0xc0, 0xba, &(0x7f0000000080)={0x48c, 0x3fc, 0xf39, 0x7}) r2 = socket$inet(0x2, 0x0, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x1, 0xa42a, 0x4, 0x8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'rose0\x00', {0xc5d}, 0x400}) 23:15:18 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:15:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x5d7928e712) [ 608.933734][ T39] audit: type=1400 audit(1647990918.518:166680): avc: denied { ioctl } for pid=29954 comm="syz-executor.0" path="socket:[100677]" dev="sockfs" ino=100677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 23:15:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 23:15:18 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x115600, 0x0) fsetxattr(r0, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0xf, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mq_open(&(0x7f0000000200)='$&\x00`U\xed\xabd\x96\xc8\xac\xd1|*2;\x1cO\xf5\x9e\x173\xad5\x12\xb5\xcd\xeb\xe1\xa2L\xd2\xb8\xa0\xa4\xc1\xad\xfeB\xb7S?\xf9\xde\r\xf5\x11\x05\xd9@\x1ff\x96\x93\xb1#M\xe3\xd3 \xd34\xd8r{\xadU\xf3,\x8f\x12\xda4\x06\x93\xaa\xc3:\x16l\a\xf6\xdd\x93\xdd\x8d-\xf2\x95g\xe7\x8f\xe6\xe4e\xcf\f\xe8c|\xe2\xdc\f\xdf\a\xd7\xd5\x8d\xf1\xfdO\x81S\x9bW\xfc\xb8z1#\x1e\t\xbe!\xbe\xa3\xd7]\xa22\xe5\xd6\x1b/\x01\xe8\n#03\xb5?', 0xc0, 0xba, &(0x7f0000000080)={0x48c, 0x3fc, 0xf39, 0x7}) r2 = socket$inet(0x2, 0x0, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x1, 0xa42a, 0x4, 0x8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'rose0\x00', {0xc5d}, 0x400}) 23:15:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x115600, 0x0) fsetxattr(r0, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0xf, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mq_open(&(0x7f0000000200)='$&\x00`U\xed\xabd\x96\xc8\xac\xd1|*2;\x1cO\xf5\x9e\x173\xad5\x12\xb5\xcd\xeb\xe1\xa2L\xd2\xb8\xa0\xa4\xc1\xad\xfeB\xb7S?\xf9\xde\r\xf5\x11\x05\xd9@\x1ff\x96\x93\xb1#M\xe3\xd3 \xd34\xd8r{\xadU\xf3,\x8f\x12\xda4\x06\x93\xaa\xc3:\x16l\a\xf6\xdd\x93\xdd\x8d-\xf2\x95g\xe7\x8f\xe6\xe4e\xcf\f\xe8c|\xe2\xdc\f\xdf\a\xd7\xd5\x8d\xf1\xfdO\x81S\x9bW\xfc\xb8z1#\x1e\t\xbe!\xbe\xa3\xd7]\xa22\xe5\xd6\x1b/\x01\xe8\n#03\xb5?', 0xc0, 0xba, &(0x7f0000000080)={0x48c, 0x3fc, 0xf39, 0x7}) r2 = socket$inet(0x2, 0x0, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x1, 0xa42a, 0x4, 0x8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'rose0\x00', {0xc5d}, 0x400}) 23:15:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x5d7928e712) 23:15:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 23:15:18 executing program 3: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="800000000000002b0000000008060001"], 0x120) 23:15:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x115600, 0x0) fsetxattr(r0, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)='batadv_slave_0\x00', 0xf, 0x2) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mq_open(&(0x7f0000000200)='$&\x00`U\xed\xabd\x96\xc8\xac\xd1|*2;\x1cO\xf5\x9e\x173\xad5\x12\xb5\xcd\xeb\xe1\xa2L\xd2\xb8\xa0\xa4\xc1\xad\xfeB\xb7S?\xf9\xde\r\xf5\x11\x05\xd9@\x1ff\x96\x93\xb1#M\xe3\xd3 \xd34\xd8r{\xadU\xf3,\x8f\x12\xda4\x06\x93\xaa\xc3:\x16l\a\xf6\xdd\x93\xdd\x8d-\xf2\x95g\xe7\x8f\xe6\xe4e\xcf\f\xe8c|\xe2\xdc\f\xdf\a\xd7\xd5\x8d\xf1\xfdO\x81S\x9bW\xfc\xb8z1#\x1e\t\xbe!\xbe\xa3\xd7]\xa22\xe5\xd6\x1b/\x01\xe8\n#03\xb5?', 0xc0, 0xba, &(0x7f0000000080)={0x48c, 0x3fc, 0xf39, 0x7}) r2 = socket$inet(0x2, 0x0, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x1, 0xa42a, 0x4, 0x8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'rose0\x00', {0xc5d}, 0x400}) 23:15:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x3, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 23:15:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c847b010000c9c8dc19643272a96fa42b76ce0000002bec0ba41f0100003a40c8a4750100003b00041f04000000003c5ca272000040ee377abaece6b88378e3d63ab7000040361d264ffa8b46485f02baee014d564b4252066178868d1ef4b5365c5dc26ca097ddda7c21a9845c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5eddec2d1cc39035caef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0f768f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666843badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 23:15:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) 23:15:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x3, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 23:15:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000440)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @remote, {[@ssrr={0x89, 0x3}, @generic={0x0, 0x8, "80ba73efce5f"}, @timestamp_prespec={0x44, 0x4}, @rr={0x7, 0x1f, 0x0, [@broadcast, @broadcast, @multicast1, @loopback, @private, @rand_addr, @loopback]}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @multicast2, @loopback]}]}}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) [ 609.235045][T29991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:15:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x3, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 23:15:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000440)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @remote, {[@ssrr={0x89, 0x3}, @generic={0x0, 0x8, "80ba73efce5f"}, @timestamp_prespec={0x44, 0x4}, @rr={0x7, 0x1f, 0x0, [@broadcast, @broadcast, @multicast1, @loopback, @private, @rand_addr, @loopback]}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @multicast2, @loopback]}]}}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) [ 609.250998][T29991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 23:15:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x3, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 609.268464][T29991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:15:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000440)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @remote, {[@ssrr={0x89, 0x3}, @generic={0x0, 0x8, "80ba73efce5f"}, @timestamp_prespec={0x44, 0x4}, @rr={0x7, 0x1f, 0x0, [@broadcast, @broadcast, @multicast1, @loopback, @private, @rand_addr, @loopback]}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @multicast2, @loopback]}]}}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) 23:15:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 23:15:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) 23:15:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:15:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000440)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @remote, {[@ssrr={0x89, 0x3}, @generic={0x0, 0x8, "80ba73efce5f"}, @timestamp_prespec={0x44, 0x4}, @rr={0x7, 0x1f, 0x0, [@broadcast, @broadcast, @multicast1, @loopback, @private, @rand_addr, @loopback]}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @multicast2, @loopback]}]}}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) [ 609.385704][T30015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:15:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev, 0xacfc}}}, &(0x7f0000000000)=0x98) [ 609.405000][T30015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.417185][T30015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:15:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev, 0xacfc}}}, &(0x7f0000000000)=0x98) 23:15:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev, 0xacfc}}}, &(0x7f0000000000)=0x98) 23:15:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @dev, 0xacfc}}}, &(0x7f0000000000)=0x98) 23:15:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 23:15:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) [ 609.545955][T30027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 609.556520][T30027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.565420][T30027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:15:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:15:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0xecb0eb8b236b5585}, 0x14}}, 0x0) 23:15:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 23:15:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x0) [ 610.242675][T30034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:15:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) [ 610.256088][T30034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 610.264995][T30034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 23:15:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0xecb0eb8b236b5585}, 0x14}}, 0x0) 23:15:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 23:15:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0xecb0eb8b236b5585}, 0x14}}, 0x0) 23:15:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0xecb0eb8b236b5585}, 0x14}}, 0x0) 23:15:20 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000001ff0000000000000030006000702000002000000e0000001000000f5000000000800120002000200000000000000000010006c000103000000030000000000b21a00000004142c0000000000001c0001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x51b, 0x0) 23:15:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/snmp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1, 0x0, 0x0) 23:15:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:15:20 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000001ff0000000000000030006000702000002000000e0000001000000f5000000000800120002000200000000000000000010006c000103000000030000000000b21a00000004142c0000000000001c0001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x51b, 0x0) 23:15:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 23:15:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/snmp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1, 0x0, 0x0) 23:15:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 23:15:20 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000001ff0000000000000030006000702000002000000e0000001000000f5000000000800120002000200000000000000000010006c000103000000030000000000b21a00000004142c0000000000001c0001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x51b, 0x0) 23:15:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/snmp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1, 0x0, 0x0) [ 611.587529][ T7301] Bluetooth: hci0: command 0x0406 tx timeout 23:15:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 23:15:21 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000001ff0000000000000030006000702000002000000e0000001000000f5000000000800120002000200000000000000000010006c000103000000030000000000b21a00000004142c0000000000001c0001020014bb000000000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x51b, 0x0) 23:15:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/snmp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1, 0x0, 0x0) 23:15:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf93e1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 23:15:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 23:15:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736661e36600080820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010200)='\x00\x00\x00\x00rrAa', 0x8, 0x9e0}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/164) getpid() 23:15:21 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 23:15:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x4}]}, 0x28}}, 0x0) 23:15:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) process_vm_readv(0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000640)=""/248, 0xf8}, {0x0}, {0x0}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000bc0)=""/96, 0x60}, {&(0x7f0000000c40)=""/251, 0xfb}, {0x0}, {&(0x7f0000000fc0)=""/97, 0x61}, {0x0}, {0x0}, {&(0x7f0000001200)=""/19, 0x13}], 0x7, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) sendfile(r3, r4, 0x0, 0x10000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setrlimit(0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 612.156663][ T39] audit: type=1804 audit(1647990921.738:166681): pid=30088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1711/bus" dev="sda1" ino=1146 res=1 errno=0 23:15:22 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) process_vm_readv(0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000640)=""/248, 0xf8}, {0x0}, {0x0}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000bc0)=""/96, 0x60}, {&(0x7f0000000c40)=""/251, 0xfb}, {0x0}, {&(0x7f0000000fc0)=""/97, 0x61}, {0x0}, {0x0}, {&(0x7f0000001200)=""/19, 0x13}], 0x7, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) sendfile(r3, r4, 0x0, 0x10000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setrlimit(0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:15:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) 23:15:22 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 23:15:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) 23:15:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) 23:15:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x28}}, 0x0) [ 612.974245][ T39] audit: type=1804 audit(1647990922.548:166682): pid=30104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1712/bus" dev="sda1" ino=1166 res=1 errno=0 23:15:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) process_vm_readv(0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000640)=""/248, 0xf8}, {0x0}, {0x0}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000bc0)=""/96, 0x60}, {&(0x7f0000000c40)=""/251, 0xfb}, {0x0}, {&(0x7f0000000fc0)=""/97, 0x61}, {0x0}, {0x0}, {&(0x7f0000001200)=""/19, 0x13}], 0x7, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) sendfile(r3, r4, 0x0, 0x10000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setrlimit(0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 613.400660][ T39] audit: type=1804 audit(1647990922.988:166683): pid=30109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1713/bus" dev="sda1" ino=1154 res=1 errno=0 23:15:23 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 23:15:23 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:23 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 23:15:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) process_vm_readv(0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000640)=""/248, 0xf8}, {0x0}, {0x0}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000bc0)=""/96, 0x60}, {&(0x7f0000000c40)=""/251, 0xfb}, {0x0}, {&(0x7f0000000fc0)=""/97, 0x61}, {0x0}, {0x0}, {&(0x7f0000001200)=""/19, 0x13}], 0x7, 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) sendfile(r3, r4, 0x0, 0x10000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setrlimit(0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 613.851262][ T39] audit: type=1804 audit(1647990923.438:166684): pid=30121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir290186924/syzkaller.8L6csB/1714/bus" dev="sda1" ino=1166 res=1 errno=0 23:15:23 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:24 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 23:15:24 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 23:15:24 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:24 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:24 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 23:15:25 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:25 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:25 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:25 executing program 3: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r0, 0x0, 0x0) 23:15:25 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @local, 0x0, 0x8, 0x0, 0x20000000, 0x3}) ppoll(&(0x7f0000000900)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:15:25 executing program 3: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r0, 0x0, 0x0) 23:15:25 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x1, 0x0) 23:15:25 executing program 3: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r0, 0x0, 0x0) 23:15:25 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x1, 0x0) 23:15:25 executing program 3: r0 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r0, 0x0, 0x0) [ 616.717532][T15627] Bluetooth: hci2: command 0x0406 tx timeout 23:15:26 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) 23:15:26 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x1, 0x0) [ 617.132161][T30148] [ 617.134956][T30148] ============================================ [ 617.142105][T30148] WARNING: possible recursive locking detected [ 617.148547][T30148] 5.17.0-syzkaller-01661-g519129040766 #0 Not tainted [ 617.156642][T30148] -------------------------------------------- [ 617.165988][T30148] syz-executor.0/30148 is trying to acquire lock: [ 617.173787][T30148] ffffffff8c6d8a38 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x147/0x11b0 [ 617.185277][T30148] [ 617.185277][T30148] but task is already holding lock: [ 617.194048][T30148] ffffffff8c6d8a38 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x147/0x11b0 [ 617.205809][T30148] [ 617.205809][T30148] other info that might help us debug this: [ 617.214172][T30148] Possible unsafe locking scenario: [ 617.214172][T30148] [ 617.221922][T30148] CPU0 [ 617.225356][T30148] ---- [ 617.229803][T30148] lock(qp_broker_list.mutex); [ 617.234958][T30148] lock(qp_broker_list.mutex); [ 617.240042][T30148] [ 617.240042][T30148] *** DEADLOCK *** [ 617.240042][T30148] [ 617.248643][T30148] May be due to missing lock nesting notation [ 617.248643][T30148] [ 617.257539][T30148] 1 lock held by syz-executor.0/30148: [ 617.263637][T30148] #0: ffffffff8c6d8a38 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x147/0x11b0 [ 617.275143][T30148] [ 617.275143][T30148] stack backtrace: [ 617.281440][T30148] CPU: 2 PID: 30148 Comm: syz-executor.0 Not tainted 5.17.0-syzkaller-01661-g519129040766 #0 [ 617.291259][T30148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 617.299938][T30148] Call Trace: [ 617.303030][T30148] [ 617.305972][T30148] dump_stack_lvl+0xcd/0x134 [ 617.310671][T30148] __lock_acquire.cold+0x213/0x3a9 [ 617.315939][T30148] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 617.322030][T30148] ? __stack_depot_save+0x23f/0x500 [ 617.327347][T30148] ? lock_downgrade+0x6e0/0x6e0 [ 617.332139][T30148] lock_acquire+0x1ab/0x510 [ 617.336531][T30148] ? vmci_qp_broker_detach+0x147/0x11b0 [ 617.342274][T30148] ? lock_release+0x720/0x720 [ 617.347149][T30148] __mutex_lock+0x12f/0x12f0 [ 617.352272][T30148] ? vmci_qp_broker_detach+0x147/0x11b0 [ 617.358148][T30148] ? vmci_ctx_destroy+0x169/0x1d0 [ 617.363826][T30148] ? vmci_host_close+0x116/0x1a0 [ 617.369128][T30148] ? mark_lock.part.0+0xee/0x1910 [ 617.374060][T30148] ? vmci_qp_broker_detach+0x147/0x11b0 [ 617.379744][T30148] ? mutex_lock_io_nested+0x1150/0x1150 [ 617.386485][T30148] ? lock_chain_count+0x20/0x20 [ 617.391365][T30148] ? debug_check_no_obj_freed+0x20c/0x420 [ 617.397008][T30148] ? lock_downgrade+0x6e0/0x6e0 [ 617.402016][T30148] vmci_qp_broker_detach+0x147/0x11b0 [ 617.408008][T30148] ? mark_held_locks+0x9f/0xe0 [ 617.413873][T30148] ? vmci_qp_broker_set_page_store+0x750/0x750 [ 617.421216][T30148] ? kfree+0x1be/0x2b0 [ 617.425979][T30148] ? ctx_free_ctx+0x45e/0xd30 [ 617.430719][T30148] ? lockdep_hardirqs_on+0x79/0x100 [ 617.436398][T30148] ctx_free_ctx+0x4cc/0xd30 [ 617.441840][T30148] ? vmci_ctx_unset_notify+0x2c0/0x2c0 [ 617.448259][T30148] ? preempt_schedule_thunk+0x16/0x18 [ 617.453886][T30148] ? preempt_schedule_common+0x59/0xc0 [ 617.460185][T30148] ? preempt_schedule_thunk+0x16/0x18 [ 617.466171][T30148] vmci_ctx_enqueue_datagram+0x4dc/0x620 [ 617.471805][T30148] vmci_datagram_dispatch+0x39b/0xb50 [ 617.478170][T30148] ? vmci_datagram_destroy_handle+0x60/0x60 [ 617.484457][T30148] ? __mutex_lock+0x21a/0x12f0 [ 617.489974][T30148] qp_notify_peer+0x182/0x260 [ 617.495585][T30148] ? qp_host_unregister_user_memory+0x2c0/0x2c0 [ 617.503161][T30148] ? wait_for_completion_io_timeout+0x20/0x20 [ 617.509924][T30148] ? set_page_dirty_lock+0xac/0xe0 [ 617.515693][T30148] vmci_qp_broker_detach+0xa09/0x11b0 [ 617.520957][T30148] ? vmci_qp_broker_set_page_store+0x750/0x750 [ 617.527014][T30148] ? kfree+0x1be/0x2b0 [ 617.531090][T30148] ? ctx_free_ctx+0x45e/0xd30 [ 617.535637][T30148] ? lockdep_hardirqs_on+0x79/0x100 [ 617.541276][T30148] ctx_free_ctx+0x4cc/0xd30 [ 617.546002][T30148] ? vmci_ctx_unset_notify+0x2c0/0x2c0 [ 617.551933][T30148] ? vmci_ctx_destroy+0x105/0x1d0 [ 617.558634][T30148] ? lock_downgrade+0x6e0/0x6e0 [ 617.565141][T30148] ? do_raw_spin_lock+0x120/0x2a0 [ 617.571608][T30148] ? rwlock_bug.part.0+0x90/0x90 [ 617.576745][T30148] ? locks_remove_file+0x2f7/0x570 [ 617.582429][T30148] vmci_ctx_destroy+0x169/0x1d0 [ 617.587820][T30148] vmci_host_close+0x116/0x1a0 [ 617.593563][T30148] __fput+0x286/0x9f0 [ 617.598127][T30148] ? vmci_host_poll+0x220/0x220 [ 617.603192][T30148] task_work_run+0xdd/0x1a0 [ 617.607895][T30148] exit_to_user_mode_prepare+0x27e/0x290 [ 617.613569][T30148] syscall_exit_to_user_mode+0x19/0x60 [ 617.618784][T30148] do_syscall_64+0x42/0xb0 [ 617.623304][T30148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 617.630086][T30148] RIP: 0033:0x7ff383448c8b [ 617.634911][T30148] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 617.659027][T30148] RSP: 002b:00007ffca7b89520 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 617.669327][T30148] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007ff383448c8b [ 617.679736][T30148] RDX: 0000001b2db20000 RSI: 00007ff38320d4a0 RDI: 0000000000000004 [ 617.688263][T30148] RBP: 00007ff3835aa960 R08: 0000000000000000 R09: 00000000870ed3ef [ 617.696332][T30148] R10: 00007ffca7bba090 R11: 0000000000000293 R12: 00000000000969d9 [ 617.704261][T30148] R13: 00007ffca7b89620 R14: 00007ffca7b89640 R15: 0000000000000032 [ 617.713215][T30148] VM DIAGNOSIS: 23:15:27 Registers: info registers vcpu 0 RAX=000000000010024a RBX=ffffffff8b8bc6c0 RCX=ffffffff894d0301 RDX=ffffed10059475b3 RSI=0000000000000001 RDI=ffffffff894fd1ff RBP=0000000000000000 RSP=ffffffff8b807e40 R8 =0000000000000000 R9 =ffff88802ca3ad93 R10=ffffed10059475b2 R11=0000000000000000 R12=fffffbfff17178d8 R13=0000000000000000 R14=ffffffff8d940450 R15=0000000000000000 RIP=ffffffff894fcd3b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9084cbe058 CR3=00000000629f3000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff810072f8ffffffff810072f8 XMM02=00007ff38357d7e000007ff38357d7c0 XMM03=00007ff38357d7c800007ff38357d7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000011b0cc RBX=ffff8880119281c0 RCX=ffffffff894d0301 RDX=ffffed10059675b3 RSI=0000000000000001 RDI=ffffffff894fd1ff RBP=0000000000000001 RSP=ffffc9000066fdf8 R8 =0000000000000000 R9 =ffff88802cb3ad93 R10=ffffed10059675b2 R11=0000000000000000 R12=ffffed1002325038 R13=0000000000000001 R14=ffffffff8d940450 R15=0000000000000000 RIP=ffffffff894fcd3b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802cb00000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9084cef090 CR3=000000004a046000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84438041 RDI=ffffffff907f0640 RBP=ffffffff907f0600 RSP=ffffc900032df018 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff84438032 R11=000000000000001f R12=0000000000000000 R13=000000000000002d R14=ffffffff907f0600 R15=dffffc0000000000 RIP=ffffffff8443806a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556b5e400 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f92146b4ff8 CR3=00000000629f3000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007ff38357d7c000007ff38357d7c8 XMM02=00007ff38357d7e000007ff38357d7c0 XMM03=00007ff38357d7c800007ff38357d7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=000000000010c3d2 RBX=ffff88801192e240 RCX=ffffffff894d0301 RDX=ffffed10059a75b3 RSI=0000000000000001 RDI=ffffffff894fd1ff RBP=0000000000000003 RSP=ffffc9000068fdf8 R8 =0000000000000000 R9 =ffff88802cd3ad93 R10=ffffed10059a75b2 R11=0000000000000000 R12=ffffed1002325c48 R13=0000000000000003 R14=ffffffff8d940450 R15=0000000000000000 RIP=ffffffff894fcd3b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9215e201b8 CR3=000000004a046000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000