last executing test programs: 1.625693807s ago: executing program 3 (id=8312): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000003800128008000100736974002c00028006000f000000800008000200ac14140006000f00010008000600", @ANYRES32=r2], 0x58}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x5b, 0x8, &(0x7f0000000500)="003b00001400000065250888ebff973af8d02497f6fe88f1cdfab47ae851428ff5a228a79c71aa39ed9a1a56e4d4e7bff447b6f673699f4927429dfa12fba76a61d82b4b60099c0834a763f2a3e51ffc1a4e2de7186b0dfe330694", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000080000000000000000000000020000000000"], &(0x7f0000000000)=""/140, 0x1a, 0x8c, 0x1}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xe}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 1:2'], 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000", @ANYRES32, @ANYBLOB="0000000000800000b702000014000000b7030000000000008500000051000000bca900000000000035090100000000009500000000000006bf9800000000000036080000000000008500000000000000b70000000000000095138fb29217000000000000007c091607135b00a6b9d071270c250d46200caecddc3bb355f8d935453c674da383c21487e5f6bfedeeffab8e9bc99ba08b6ece1edb0a18226698ca5b9d777b5a5f4c2485f24b7b0a2d"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.56553573s ago: executing program 3 (id=8314): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460", 0x1e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x442001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000007118bccdf4f6817fd3fe3b0000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x3) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x0, 0x3, 0x52, @loopback, @mcast1, 0x0, 0x8000, 0xffffffff, 0x8}}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x29, 0x9c, 0x1, 0x8, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x8, 0x2, 0xf}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf25060000006400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673000000000000000000000000000080003000000000008000100", @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f300000080003000200000008000300030000002c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030001000000080003000100000008000300000000007800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="080001009146a1f357a425f3e81634f1848498", @ANYRES32=0x0, @ANYBLOB="14000200766c616e31000000000000000000000008000300030000000800030002000000080003000000000014000200766574683000000000000000000000001400020076657468315f746f5f62726964676500180001801400020076657468315f746f5f6272696467650034000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0800030002000000080003000600000008000100", @ANYRES32=r11, @ANYBLOB], 0x168}, 0x1, 0x0, 0x0, 0x20010}, 0x20008044) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r12) mmap(&(0x7f0000000000/0x400000)=nil, 0x400002, 0x0, 0x11012, r1, 0x0) 1.501194962s ago: executing program 3 (id=8316): waitid(0x2, 0xffffffffffffffff, &(0x7f0000000000), 0x3, &(0x7f0000000080)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4a5}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x3}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x7, 0x5}, {0x1}, {0xf, 0x1}, {0xc}, {0x7, 0x4}, {0xd, 0x3}, {0x2, 0x4}, {0xc}, {0xf, 0x2}]}, @typedef={0x8}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000002c0)=""/201, 0xbc, 0xc9, 0x1, 0x3ff}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x416, 0x9, 0xa1e0dbda, 0x1200, 0x1, 0x4, '\x00', 0x0, r0, 0x1, 0x0, 0x3}, 0x48) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) waitid(0x0, r1, &(0x7f00000004c0), 0x2, 0x0) rt_sigqueueinfo(r1, 0x6, &(0x7f0000000540)={0x1d, 0xeb, 0xf1a}) r2 = perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x1, 0x0, 0x7f, 0x1, 0x0, 0x6, 0x20000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x4}, 0x20, 0xffffffffffffff7f, 0x7, 0xd, 0xffffffffffff0000, 0x5, 0xc9ab, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x7, 0x2, 0x80, 0x3f, 0x0, 0x2, 0x20824, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe66e, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x4202, 0x8, 0x2, 0x0, 0x8, 0x4ec5356d, 0x6, 0x0, 0xffff3814, 0x0, 0x7}, r1, 0x1, r2, 0x2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0xb8, 0x0, 0xb8, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x2, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x401, 0x2, [0x7, 0x32, 0x3, 0x80, 0x35, 0x21, 0x0, 0x0, 0x29, 0x3a, 0xe, 0x25, 0x3d, 0x27, 0x21, 0x1d], 0x1, 0x63d2ef6b, 0x100000001}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000c40)) rt_tgsigqueueinfo(0x0, r1, 0xf, &(0x7f0000000c80)={0x29, 0x8c, 0x7}) r4 = socket$inet_sctp(0x2, 0x4316eeddc9d1414a, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d40)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x228, 0x228, 0x158, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000d00), {[{{@ip={@local, @rand_addr=0x64010100, 0xff, 0xffffff00, 'wg2\x00', 'nicvf0\x00', {}, {}, 0x7b, 0x3, 0x18}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@loopback, @ipv6=@mcast1, @ipv4=@remote, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x9, 0x10, [0x3b, 0x30, 0x1c, 0x6, 0x15, 0x9, 0x1f, 0x27, 0x2b, 0x31, 0x30, 0xe, 0x17, 0x12, 0x1d, 0x2e], 0x1, 0x100, 0x1}}}, {{@ip={@private=0xa010102, @loopback, 0xff000000, 0x0, '\x00', 'vcan0\x00', {}, {0xff}, 0x1, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x1, 0x0, 0x2, 0x7], 0x3, 0x6}, {0x3, [0x1, 0x1, 0x0, 0x1, 0x7, 0x1], 0x4, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "1dcc", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x0, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x400, 0x100) statx(r5, &(0x7f0000001180)='./file0\x00', 0x800, 0x980, &(0x7f00000011c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs/binder1\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x120, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb0, 0xa8, @random="a16e3ed2cc9fb616c063bea6d7b938b8041850fd5659790a621e9c302858e994df8b98f3232821ce768075e9aa93b4cb1f2e289d578300a783a02d067de8b6ee9843a1a70a4870d3f7a9704ab0332e3f696338eaaecd943bbf85e42e97ac26ab441fa55632fcaa8523cdd32a9ccd0dae4f9f758005b52000a06a363a78c474f6a93549782eb9f312fe561ee6ac6ef3147a4b6d600d710b93a1c4703391df910b60c30d7c0c211fb6b9b1e162"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x120}}, 0x1) connect$pptp(0xffffffffffffffff, &(0x7f0000001500)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x1e) connect$qrtr(0xffffffffffffffff, &(0x7f0000001540)={0x2a, 0xffffffffffffffff, 0x8000}, 0xc) getpeername$inet6(0xffffffffffffffff, &(0x7f0000001580)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000015c0)=0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x44, 0x3, 0x6, 0xe01, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000882}, 0x2400c811) 1.464190443s ago: executing program 3 (id=8319): syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) semop(0x0, &(0x7f0000000000)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 1.435847404s ago: executing program 2 (id=8320): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@framed={{}, [@jmp={0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0x8}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x0, 0x1, 0x0, 0xc}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r1}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000fe00850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x8, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) close(0xffffffffffffffff) 1.369779217s ago: executing program 3 (id=8322): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) fchdir(r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)='\t', 0xfdef}], 0x1) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}}, 0x40000) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000090000000000000000009500000000000000936f0adf6b31f34a6e7a20901fa03a03ab9d9bc2356f22c471ac2a62270bc06eab2020f16edda44598146f5d46fa8621ed03dcc4da28337dbd8cb6aa29ec45b48c66e800c19f629b58bef89aa9586706c3798f6277470c8ab091786ad41cd2493d2185640d389a5069c74785ec91997b63ba7ca6043fcc6d697b9e67f7f06f51393a7070f83d4be6c7db26b1a80210918c8716e7fa047c22ea6ead8e4d393ba09c418cbd3aba5ae0def69b0885ea880264d79378ef8906b5a6d86cf1df176ffdd66e2789477b7066"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000004480)={0x18, 0x0, {0x4, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) 1.369238657s ago: executing program 1 (id=8323): socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='fib6_table_lookup\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x41, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x55) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='fib6_table_lookup\x00', r3}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890b, &(0x7f0000000000)={@mcast2={0xff, 0x5}, @loopback={0x4f02000000000000}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810026, r7}) bind$packet(r6, &(0x7f0000000140)={0x11, 0xf3, r7, 0x1, 0x7, 0x6, @local}, 0x14) r8 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f00000001c0)='./file0\x00', r9, &(0x7f0000000200)='./bus\x00', 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r11 = dup2(r1, r2) r12 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r12, 0x400, 0x0) close(r12) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa9f4, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000180)='syzkaller\x00', 0xf5, 0x95, &(0x7f0000000240)=""/149, 0x41100, 0x0, '\x00', r7, 0x2b, r8, 0x8, &(0x7f00000003c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x5, 0x9, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000004c0)=[0xffffffffffffffff, r9, r10, r11, r4, r12], &(0x7f0000000500)=[{0x1, 0x3, 0x1, 0x3}, {0x3, 0x5, 0xd}, {0x4, 0x2, 0x10, 0xa}, {0x5, 0x1, 0x9, 0x4}, {0x3, 0x5, 0x2, 0x9}, {0x2, 0x5, 0x5, 0xc}, {0x1, 0x3, 0x8, 0x9}], 0x10, 0x9}, 0x90) r13 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000060000000000000006000000000000000000000020d20000"]) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff000000000000000f080000000000000000000095000000000000009500000000"], &(0x7f0000000240)='GPL\x00', 0x7, 0xbe, &(0x7f0000000280)=""/190, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x9, 0x4, 0x7e}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x2, 0x4}, {0x4, 0x4, 0xd, 0x6}, {0x3, 0x4, 0x8, 0xb}, {0x3, 0x9, 0x3, 0x2}], 0x10, 0x7f}, 0x90) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xdc7d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r16, 0x660c, 0x0) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x16, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xe, 0xb, 0x9, 0x100}, @ldst={0x3, 0x0, 0x2, 0x3, 0x11, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0xf, r13, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r14, 0x2, &(0x7f0000000600)=[r15, 0x1, r16, r17], &(0x7f0000000640)=[{0x0, 0x2, 0x2, 0x1}, {0x5, 0x2, 0x6, 0x1}], 0x10, 0x4b3}, 0x90) 1.369054417s ago: executing program 2 (id=8324): perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 1.277777101s ago: executing program 2 (id=8325): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x6, &(0x7f00000003c0)=[{0x7, 0xfe, 0x2c, 0x9}, {0x3, 0x7, 0x81, 0x1}, {0x400, 0x1, 0x9, 0x9}, {0x0, 0x3, 0xfc, 0x3f}, {0x8001, 0x8, 0xb4, 0x9}, {0xffd3, 0x3, 0x7, 0x9}]}) statfs(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x158}, 0x0) io_setup(0x4, &(0x7f0000000380)=0x0) socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r1, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x4a, 0x0}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40041) r3 = dup(r2) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x804) ioperm(0x0, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x339a32eaeca84e30) sched_setscheduler(0x0, 0x1, 0x0) getpid() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mbind(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x6, 0x8, 0x0) setns(0xffffffffffffffff, 0x0) link(0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%ps \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x4, 0x47ee, {{0x39, 0x4, 0x3, 0x6, 0xe4, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0xc7, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @rand_addr=0x64010101, @multicast2, @remote]}, @timestamp_addr={0x44, 0x14, 0x7a, 0x1, 0x0, [{@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x75}]}, @lsrr={0x83, 0x23, 0x83, [@loopback, @broadcast, @loopback, @private=0xa0100ff, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @multicast1]}, @generic={0x94, 0x5, "f3f311"}, @timestamp_addr={0x44, 0x34, 0x21, 0x1, 0x8, [{@local}, {@multicast2, 0x3}, {@local, 0x1}, {@rand_addr=0x64010100, 0x100}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x20}, {@multicast2, 0x1000000}]}, @noop, @ssrr={0x89, 0x1b, 0x3b, [@loopback, @multicast2, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x6a, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1]}, @rr={0x7, 0x7, 0xff, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/129, 0x1c4, 0x81, 0x0, 0xffff}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2, 0x1, 0x7, 0x80, r4, 0xfffffff8, '\x00', r5, r6, 0x5, 0x1, 0x4, 0x3}, 0x48) close(r7) socket$inet6_sctp(0xa, 0x5, 0x84) 1.151346025s ago: executing program 0 (id=8326): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000003800128008000100736974002c00028006000f000000800008000200ac14140006000f00010008000600", @ANYRES32=r2], 0x58}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x5b, 0x8, &(0x7f0000000500)="003b00001400000065250888ebff973af8d02497f6fe88f1cdfab47ae851428ff5a228a79c71aa39ed9a1a56e4d4e7bff447b6f673699f4927429dfa12fba76a61d82b4b60099c0834a763f2a3e51ffc1a4e2de7186b0dfe330694", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000080000000000000000000000020000000000"], &(0x7f0000000000)=""/140, 0x1a, 0x8c, 0x1}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xe}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 1:2'], 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000", @ANYRES32, @ANYBLOB="0000000000800000b702000014000000b7030000000000008500000051000000bca900000000000035090100000000009500000000000006bf9800000000000036080000000000008500000000000000b70000000000000095138fb29217000000000000007c091607135b00a6b9d071270c250d46200caecddc3bb355f8d935453c674da383c21487e5f6bfedeeffab8e9bc99ba08b6ece1edb0a18226698ca5b9d777b5a5f4c2485f24b7b0a2d"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.095763927s ago: executing program 0 (id=8327): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x15e7, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.061171819s ago: executing program 1 (id=8328): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x10, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x3}]}}}]}, 0x3c}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r7, 0x0, 0xffefffff) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000003c0)=""/102399, 0x18fff, 0x0, 0x0) 828.269148ms ago: executing program 1 (id=8329): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 796.393849ms ago: executing program 1 (id=8330): waitid(0x2, 0xffffffffffffffff, &(0x7f0000000000), 0x3, &(0x7f0000000080)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4a5}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x3}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x7, 0x5}, {0x1}, {0xf, 0x1}, {0xc}, {0x7, 0x4}, {0xd, 0x3}, {0x2, 0x4}, {0xc}, {0xf, 0x2}]}, @typedef={0x8}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000002c0)=""/201, 0xbc, 0xc9, 0x1, 0x3ff}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x416, 0x9, 0xa1e0dbda, 0x1200, 0x1, 0x4, '\x00', 0x0, r0, 0x1, 0x0, 0x3}, 0x48) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) waitid(0x0, r1, &(0x7f00000004c0), 0x2, 0x0) rt_sigqueueinfo(r1, 0x6, &(0x7f0000000540)={0x1d, 0xeb, 0xf1a}) r2 = perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x1, 0x0, 0x7f, 0x1, 0x0, 0x6, 0x20000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x4}, 0x20, 0xffffffffffffff7f, 0x7, 0xd, 0xffffffffffff0000, 0x5, 0xc9ab, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x7, 0x2, 0x80, 0x3f, 0x0, 0x2, 0x20824, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe66e, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x4202, 0x8, 0x2, 0x0, 0x8, 0x4ec5356d, 0x6, 0x0, 0xffff3814, 0x0, 0x7}, r1, 0x1, r2, 0x2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0xb8, 0x0, 0xb8, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x2, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x401, 0x2, [0x7, 0x32, 0x3, 0x80, 0x35, 0x21, 0x0, 0x0, 0x29, 0x3a, 0xe, 0x25, 0x3d, 0x27, 0x21, 0x1d], 0x1, 0x63d2ef6b, 0x100000001}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000c40)) rt_tgsigqueueinfo(0x0, r1, 0xf, &(0x7f0000000c80)={0x29, 0x8c, 0x7}) r4 = socket$inet_sctp(0x2, 0x4316eeddc9d1414a, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d40)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x228, 0x228, 0x158, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000000d00), {[{{@ip={@local, @rand_addr=0x64010100, 0xff, 0xffffff00, 'wg2\x00', 'nicvf0\x00', {}, {}, 0x7b, 0x3, 0x18}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@loopback, @ipv6=@mcast1, @ipv4=@remote, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x9, 0x10, [0x3b, 0x30, 0x1c, 0x6, 0x15, 0x9, 0x1f, 0x27, 0x2b, 0x31, 0x30, 0xe, 0x17, 0x12, 0x1d, 0x2e], 0x1, 0x100, 0x1}}}, {{@ip={@private=0xa010102, @loopback, 0xff000000, 0x0, '\x00', 'vcan0\x00', {}, {0xff}, 0x1, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x1, 0x0, 0x2, 0x7], 0x3, 0x6}, {0x3, [0x1, 0x1, 0x0, 0x1, 0x7, 0x1], 0x4, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "1dcc", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x0, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x400, 0x100) statx(r5, &(0x7f0000001180)='./file0\x00', 0x800, 0x980, &(0x7f00000011c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs/binder1\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x120, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb0, 0xa8, @random="a16e3ed2cc9fb616c063bea6d7b938b8041850fd5659790a621e9c302858e994df8b98f3232821ce768075e9aa93b4cb1f2e289d578300a783a02d067de8b6ee9843a1a70a4870d3f7a9704ab0332e3f696338eaaecd943bbf85e42e97ac26ab441fa55632fcaa8523cdd32a9ccd0dae4f9f758005b52000a06a363a78c474f6a93549782eb9f312fe561ee6ac6ef3147a4b6d600d710b93a1c4703391df910b60c30d7c0c211fb6b9b1e162"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2000000}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x120}}, 0x1) connect$pptp(0xffffffffffffffff, &(0x7f0000001500)={0x18, 0x2, {0x3, @rand_addr=0x64010101}}, 0x1e) connect$qrtr(0xffffffffffffffff, &(0x7f0000001540)={0x2a, 0xffffffffffffffff, 0x8000}, 0xc) getpeername$inet6(0xffffffffffffffff, &(0x7f0000001580)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000015c0)=0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x44, 0x3, 0x6, 0xe01, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000882}, 0x2400c811) 773.27951ms ago: executing program 1 (id=8331): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced_recursive\x00', 0x100002, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x2, &(0x7f00000005c0)={0x0, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xb}) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) r6 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x3, 0xaa, 0x0, 0x80, 0x0, 0x0, 0x98800, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x69, 0xff}, 0x8128, 0x1000, 0xfffffffa, 0x0, 0x3f, 0x0, 0x52, 0x0, 0x3, 0x0, 0x7f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000580), 0x12) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req={0x7, 0x9, 0xfff, 0x2}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) perf_event_open(0x0, 0x0, 0xc, r6, 0x0) 679.059564ms ago: executing program 1 (id=8332): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x4000400) r0 = socket(0x2b, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "edc6c09062e92cfd285341e1d02b74cba72f579defd097b200ab1122a8c08c455b922c6e3b528666b2ce5d9f0a3ca5f0c5931f141e16fcd1063a6cb2811f55"}, 0x60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = eventfd(0x8) read$eventfd(r3, &(0x7f0000000180), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/243, 0xf3}], 0x1, &(0x7f0000000480)=""/194, 0xc2}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 500.601891ms ago: executing program 3 (id=8336): unshare(0x2c000680) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b0000000000240020"], 0x164}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000140000008200000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb, 0x5, 0x0, 0x0, 0x0, 0x2, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x24000011) (async) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000370c3aba4db7f5af05f58d4f410000d37b7610011cd07a658dee7324b80662a203b51a1a3b74042aad08ab7e1d1c0d8d6100f0bc0e15718926e07a9caeb7c2107c80d811166d9fcbf791", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000040006800800060000000000"], 0x20}}, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @mcast2, 0xfa68, 0x7, 0x8001, 0x400, 0x1, 0x1400122}) (async) keyctl$restrict_keyring(0xa, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)='ex.\x00') (async) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', '', [{0x20, 'syz'}, {0x20, 'keyring\x00'}, {0x20, 'ex.\x00'}, {0x20, '/%$#-&*,+\x8a'}, {0x20, 'netlink_extack\x00'}]}, 0x31) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 253.386671ms ago: executing program 4 (id=8343): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000051}, 0x404c000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x10010, 0xffffffffffffffff, 0x7ff5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r6}, 0x10) unshare(0x400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r7, 0x87, &(0x7f0000000800)}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/205, 0xcd, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r8, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d20f9d0040ed691e7770c000043bdb358a8b6245c00"}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x90) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=0x3, 0x4) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000040)={0x11, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x7ffd}}) 252.906421ms ago: executing program 4 (id=8344): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) open(&(0x7f00000002c0)='./bus\x00', 0x4c143, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ftruncate(r2, 0x2007ffb) (async) ftruncate(r2, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) r4 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r4, 0x107, 0x18, 0x0, 0x20600000) sendto(r1, &(0x7f00000002c0)='%', 0x300810, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f00000002c0)='%', 0x300810, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='bcache_read\x00', r3}, 0x10) unshare(0x22020600) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) fstat(r6, &(0x7f0000000900)) (async) fstat(r6, &(0x7f0000000900)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) 242.32428ms ago: executing program 0 (id=8345): syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="cdb8c0cc80b58b87e41d58fc1d15121bc17bac42c593d9c2708f53d0f24991c4b367ce0cdad32c3d58df4e33ab8ba923c05ae92379365baa3730ae8aac5003fd918618f378163820819214a13eeb3dd9bfb2312421b03e4a35d2b51f9c635443722f4ed6cebbdbf888159c174098c33102e52307824f1f2ac3a9a990c6aa8575421c", 0x82}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) semop(0x0, &(0x7f0000000000)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 223.375671ms ago: executing program 0 (id=8346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000003800128008000100736974002c00028006000f000000800008000200"], 0x58}}, 0x0) 178.670053ms ago: executing program 4 (id=8347): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "5ba785fc32279e7c"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xf7}}]}, 0x34}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x9d, &(0x7f0000000000)=""/157, 0x41100}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x16) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430af34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0x99}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x6, &(0x7f00000011c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="92e58f85c9cb98dbfd140e13c0b2121f1c039f13af64a68d0751135db097479c0d4a925be660c2230e5b49126ed89a8bd98bdab7547eb3048646839bace19a6c97a6167d130a650db45735be46857d6eec8b11d65b47ad575897adce5ea0d4d4776e7c7693952613008e3b41544e86d824fe094f0990a528813d68120355d478cb419fc8e96fd023c503000039363f2b9a600a5e844de28fe013976ea6", @ANYRES32, @ANYRES32=0xee00, @ANYRES8=r3, @ANYRES64=r2, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES8=r4, @ANYRESDEC, @ANYRES64=r2], 0xa0}, 0x20000041) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000180)=0x5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x4, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000300000000000000260b00000000004b00000000183d000003000000000000000000000000000000006743edee5a70ad2219a867d775e1e303424e97e637125926dbb8add2d944fb241adc6537c70fc595ec75b91e077b4f8e9b84ae3419ec7d69fa2d9767723ca8348ce33bc3d1b9cccb5b04ca825b0c540301e9ffe54902950dd9dad481727df8a55d8228be42f44e1b72c4575f254deedceb81d27d665afca1f69cc3", @ANYBLOB="00000000000000001866a8e090fbbd8805019d3f7a8644580000066e6d891800ae7700950000000004006dedcb053c667aa28316d3faf2ec60a1d627ba764bf92b2665bd9767079123aa687eed8adb3e3e796c3bc6b5b640cf0c4bc56042db702c714364594c8ebaa8523058e6c6a28d2616270e7ffbae9b4652513786e9c82eb290ec161e27909978e70eaf9418bbda4ca4f53ff9eb2d4825bacc5e0ad5b2d1e180ec5fac2242f9a3eaf26d58d5b637baedecc8c154e19fa04c0a953cc3ac3e2def5fbf55a464540a28480f7140a68f4e72c7ea0a82ed237d74b7d4b180ce89", @ANYRES16=0xffffffffffffffff, @ANYRES16], &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0x30, &(0x7f0000000200)=""/48, 0x41100, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002440)={0x3, 0xf, 0x1}, 0x10}, 0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX=r5, @ANYRESOCT=r8, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597110e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9a", @ANYRES32, @ANYRESOCT, @ANYRESOCT=r3, @ANYRES64], 0x200}, {&(0x7f0000000a40)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES64=r7, @ANYBLOB="0400290014007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=r8, @ANYRESOCT=r2], 0x3b0}, {&(0x7f00000021c0)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="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"], 0x16c}], 0x4}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x2, 0xa, 0x0, @local, 0x100}]}}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="5c6014ed020000906c36cc0899f6b5538d42af188015702ec935aa96b66b86b6e25486f09d9f5cc5a0846bf87d9c71e6242844fdf7cf199055d9af3d99475fa89ce6688874c153e2756899cdc02eaaee2f46bccda936036d9a3dca41a7bc4e216b843bf92fb20fcd5636635f450a93bdb286e39eb1c4de8e9c7bd47007fae56c8adf74"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @rand_addr=0x64010100}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, 0x3f, {[@generic={0x2, 0x6, "98b2924d"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x8}, @sack_perm={0x4, 0x2}, @eol, @mptcp=@generic={0x3, 0x8, "42a7f1a75a10"}, @md5sig={0x13, 0x12, "4bf124408d0ced7203fd5bf83fd300"}]}}}}}}}, 0x0) 177.936193ms ago: executing program 0 (id=8348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "5ba785fc32279e7c"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xf7}}]}, 0x34}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x9d, &(0x7f0000000000)=""/157, 0x41100}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x16) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430af34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0x99}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x6, &(0x7f00000011c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="92e58f85c9cb98dbfd140e13c0b2121f1c039f13af64a68d0751135db097479c0d4a925be660c2230e5b49126ed89a8bd98bdab7547eb3048646839bace19a6c97a6167d130a650db45735be46857d6eec8b11d65b47ad575897adce5ea0d4d4776e7c7693952613008e3b41544e86d824fe094f0990a528813d68120355d478cb419fc8e96fd023c503000039363f2b9a600a5e844de28fe013976ea6", @ANYRES32, @ANYRES32=0xee00, @ANYRES8=r3, @ANYRES64=r2, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES8=r4, @ANYRESDEC, @ANYRES64=r2], 0xa0}, 0x20000041) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000180)=0x5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x4, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000300000000000000260b00000000004b00000000183d000003000000000000000000000000000000006743edee5a70ad2219a867d775e1e303424e97e637125926dbb8add2d944fb241adc6537c70fc595ec75b91e077b4f8e9b84ae3419ec7d69fa2d9767723ca8348ce33bc3d1b9cccb5b04ca825b0c540301e9ffe54902950dd9dad481727df8a55d8228be42f44e1b72c4575f254deedceb81d27d665afca1f69cc3", @ANYBLOB="00000000000000001866a8e090fbbd8805019d3f7a8644580000066e6d891800ae7700950000000004006dedcb053c667aa28316d3faf2ec60a1d627ba764bf92b2665bd9767079123aa687eed8adb3e3e796c3bc6b5b640cf0c4bc56042db702c714364594c8ebaa8523058e6c6a28d2616270e7ffbae9b4652513786e9c82eb290ec161e27909978e70eaf9418bbda4ca4f53ff9eb2d4825bacc5e0ad5b2d1e180ec5fac2242f9a3eaf26d58d5b637baedecc8c154e19fa04c0a953cc3ac3e2def5fbf55a464540a28480f7140a68f4e72c7ea0a82ed237d74b7d4b180ce89", @ANYRES16=0xffffffffffffffff, @ANYRES16], &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0x30, &(0x7f0000000200)=""/48, 0x41100, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002440)={0x3, 0xf, 0x1}, 0x10}, 0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX=r5, @ANYRESOCT=r8, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597110e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9a", @ANYRES32, @ANYRESOCT, @ANYRESOCT=r3, @ANYRES64], 0x200}, {&(0x7f0000000a40)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES64=r7, @ANYBLOB="0400290014007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=r8, @ANYRESOCT=r2], 0x3b0}, {&(0x7f00000021c0)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="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"], 0x16c}], 0x4}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x2, 0xa, 0x0, @local, 0x100}]}}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="5c6014ed020000906c36cc0899f6b5538d42af188015702ec935aa96b66b86b6e25486f09d9f5cc5a0846bf87d9c71e6242844fdf7cf199055d9af3d99475fa89ce6688874c153e2756899cdc02eaaee2f46bccda936036d9a3dca41a7bc4e216b843bf92fb20fcd5636635f450a93bdb286e39eb1c4de8e9c7bd47007fae56c8adf74"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @rand_addr=0x64010100}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, 0x3f, {[@generic={0x2, 0x6, "98b2924d"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x8}, @sack_perm={0x4, 0x2}, @eol, @mptcp=@generic={0x3, 0x8, "42a7f1a75a10"}, @md5sig={0x13, 0x12, "4bf124408d0ced7203fd5bf83fd300"}]}}}}}}}, 0x0) 95.356726ms ago: executing program 2 (id=8349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x8, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x4}]}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0xcc, [{0x9, 0x2, 0x6}, {0x2, 0x1, 0x100}]}, @union={0xd, 0x3, 0x0, 0x5, 0x0, 0x2, [{0x8, 0x0, 0x6}, {0x0, 0x1003, 0x8001}, {0xd, 0x1, 0x10000}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x4c, 0x4}]}, {0x0, [0x30, 0x0, 0x30, 0x61, 0x61, 0x30]}}, &(0x7f0000000180)=""/220, 0x98, 0xdc, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) 94.673987ms ago: executing program 4 (id=8350): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 91.169957ms ago: executing program 0 (id=8351): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 58.374568ms ago: executing program 2 (id=8352): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) r2 = epoll_create1(0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x2008}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) io_uring_enter(0xffffffffffffffff, 0x4c0a, 0x80e1, 0x12, &(0x7f00000000c0)={[0x3]}, 0x8) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x822140, 0x14, 0x1c}, 0x18) getdents(r5, &(0x7f0000000180)=""/44, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000200)=@file={0x1, './file0/file0\x00'}, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x3a, 0x5, 0xe, @mcast1, @loopback, 0x8000, 0x40, 0x0, 0xac1c}}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0xd}, {0x10, 0x4}, {0x10, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x96c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) close_range(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'syzkaller1\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x80000000, 0x132, [0x3, 0x8]}}) r9 = socket$netlink(0x10, 0x3, 0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r11, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r12 = socket(0xa, 0x1, 0x3) sendto$llc(r12, &(0x7f0000000600)="5c200312c06c9e13eed4c7d3cdc94d3df24fe4ca43b80027a265c9e929ba0c4792799bcc6a26725885e5b9732a11f50531b4b45009bcdb40b16990883169cbe1733f079b33741de186c5cf362b074534aa5a1211e39f59c2c4358799a5cc6f357dedbd0433fbdfbb184e284f4b82ec808f867000844ee1fba8e02af6dacfa4c93d5a", 0x82, 0x800, &(0x7f00000006c0)={0x1a, 0x1, 0x9, 0x2, 0x80, 0x7, @local}, 0x10) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', r8, 0x29, 0x7, 0x9, 0x401, 0x26, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x8000, 0x1}}) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r10) sendmsg$NFC_CMD_START_POLL(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r13, 0x0, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000e00)={0x3, 0x0, 0xc, 0x7, 0x18c, &(0x7f0000000a00)}) 977.93µs ago: executing program 4 (id=8353): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600), 0x0, 0x5e7, &(0x7f0000000c00)="$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") lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00') quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) io_uring_setup(0x1534, &(0x7f0000000280)={0x0, 0x7e6b, 0x800, 0x3, 0x267, 0x0, r1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000440)={0x7, 0x800, 0xffffffff, 0xffffffff, 0x7, "6dff702d71ab175d55aebe81813c85b89d1d82"}) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r1, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x4, 0x8}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 470.43µs ago: executing program 2 (id=8354): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x4, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x1094) (async) io_uring_setup(0xdd4, &(0x7f0000000100)) (async) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}], 0x1) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x43aa1d37, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000880)="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", &(0x7f0000000480)="7597028562f061b457ac66b60419b828709647a129bd9b80f68549a6d4f85548653b3bb2200398a6064b"}}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(r6, &(0x7f0000000840)=""/29, 0x1d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00'}, 0x90) (async) r7 = io_uring_setup(0x30d3, &(0x7f0000000000)) r8 = perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10048, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) close_range(r7, r5, 0x2) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) (async) r9 = syz_io_uring_setup(0x4d06, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd=r4, 0x1, {0x0, r8}, 0x3, 0x1}) io_uring_enter(r9, 0x17ac1, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=8355): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x15e7, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): 2 [ 316.996058][T23599] EXT4-fs (loop2): orphan cleanup on readonly fs [ 317.006423][T23599] EXT4-fs error (device loop2): __ext4_get_inode_loc:4357: comm syz.2.6508: Invalid inode table block 0 in block_group 0 [ 317.020433][T23599] EXT4-fs (loop2): Remounting filesystem read-only [ 317.027029][T23599] Quota error (device loop2): write_blk: dquota write failed [ 317.034545][T23599] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 317.047212][T23599] EXT4-fs (loop2): 1 truncate cleaned up [ 317.053729][T23599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.066356][T23599] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 317.073560][T23599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.107009][T23606] loop3: detected capacity change from 0 to 1024 [ 317.118422][T23606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.500727][T23625] usb usb9: usbfs: process 23625 (syz.2.6517) did not claim interface 32 before use [ 317.530695][T23627] loop2: detected capacity change from 0 to 512 [ 317.639305][T23631] x_tables: duplicate underflow at hook 2 [ 317.639898][T13686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.671594][T23633] loop2: detected capacity change from 0 to 512 [ 317.693381][T23635] loop4: detected capacity change from 0 to 512 [ 317.694112][T23633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 317.715404][T23635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.729627][T23633] ext4 filesystem being mounted at /root/syzkaller.5vUGO2/504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.743585][T23635] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 317.771279][T23639] loop1: detected capacity change from 0 to 1024 [ 317.800951][T23639] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 317.827559][T16258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 317.839671][T23639] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 317.852078][T23639] EXT4-fs (loop1): orphan cleanup on readonly fs [ 317.859466][T23639] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.6521: Invalid inode table block 0 in block_group 0 [ 317.872337][T23639] EXT4-fs (loop1): Remounting filesystem read-only [ 317.878974][T23639] EXT4-fs (loop1): 1 truncate cleaned up [ 317.899248][T23639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.917112][T23639] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 317.924224][T23639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.935233][T23213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.945718][T23643] __nla_validate_parse: 9 callbacks suppressed [ 317.945736][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6525'. [ 317.965245][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6524'. [ 317.979871][T23645] bridge0: port 5(gretap0) entered blocking state [ 317.986446][T23645] bridge0: port 5(gretap0) entered disabled state [ 317.993510][T23645] gretap0: entered allmulticast mode [ 318.001457][T23645] gretap0: entered promiscuous mode [ 318.020848][T23645] bridge0: port 5(gretap0) entered blocking state [ 318.027392][T23645] bridge0: port 5(gretap0) entered forwarding state [ 318.113732][T23655] loop2: detected capacity change from 0 to 512 [ 318.172328][T23663] x_tables: duplicate underflow at hook 2 [ 318.235377][T23669] loop2: detected capacity change from 0 to 512 [ 318.250465][T23669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.264468][T23669] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 318.303930][T23680] loop4: detected capacity change from 0 to 1024 [ 318.312770][T23680] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.324528][T23680] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 318.334019][T23680] EXT4-fs (loop4): orphan cleanup on readonly fs [ 318.340865][T23680] EXT4-fs error (device loop4): __ext4_get_inode_loc:4357: comm syz.4.6539: Invalid inode table block 0 in block_group 0 [ 318.357629][T23680] EXT4-fs (loop4): Remounting filesystem read-only [ 318.364602][T23680] EXT4-fs (loop4): 1 truncate cleaned up [ 318.375143][T23680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.390617][T23680] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 318.399795][T23680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.459236][T23680] loop4: detected capacity change from 0 to 1024 [ 318.467459][T23680] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 318.493830][T23680] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 318.509578][T23680] jbd2_journal_init_inode: Cannot locate journal superblock [ 318.513404][T23694] x_tables: duplicate underflow at hook 2 [ 318.517156][T23680] EXT4-fs (loop4): Could not load journal inode [ 318.632889][T23701] netlink: 'syz.4.6546': attribute type 27 has an invalid length. [ 318.646427][T23701] loop4: detected capacity change from 0 to 256 [ 318.786120][T23704] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 318.786120][T23704] The task syz.4.6547 (23704) triggered the difference, watch for misbehavior. [ 319.420163][T23730] x_tables: duplicate underflow at hook 2 [ 319.422310][T23728] loop2: detected capacity change from 0 to 1024 [ 319.451648][T23732] loop3: detected capacity change from 0 to 1024 [ 319.452369][T23728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.460415][T23732] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.484207][T23732] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 319.492516][T23732] EXT4-fs (loop3): orphan cleanup on readonly fs [ 319.499277][T23732] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm syz.3.6556: Invalid inode table block 0 in block_group 0 [ 319.514180][T23732] EXT4-fs (loop3): Remounting filesystem read-only [ 319.520847][T23732] EXT4-fs (loop3): 1 truncate cleaned up [ 319.527000][T23732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.540684][T23732] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 319.548403][T23732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.560588][T16258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.590738][T23732] loop3: detected capacity change from 0 to 1024 [ 319.595474][T23738] loop4: detected capacity change from 0 to 1024 [ 319.600354][T23732] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 319.605317][T23738] EXT4-fs: Ignoring removed orlov option [ 319.614285][T23732] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 319.619804][T23738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.632255][T23732] jbd2_journal_init_inode: Cannot locate journal superblock [ 319.644863][T23732] EXT4-fs (loop3): Could not load journal inode [ 319.658006][T23740] loop2: detected capacity change from 0 to 2048 [ 319.665819][T23740] EXT4-fs: Ignoring removed bh option [ 319.671317][T23740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.673212][T23738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.678002][T23740] EXT4-fs: Ignoring removed nobh option [ 319.703765][T23740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.778345][T23740] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #12: block 5: comm syz.2.6557: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 319.819027][T22310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.848125][T16258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.923355][T23761] SELinux: Context Ž is not valid (left unmapped). [ 319.948835][T23766] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 320.046632][T23776] loop1: detected capacity change from 0 to 1024 [ 320.059052][T23776] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 320.079405][T23776] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 320.092074][T23776] EXT4-fs (loop1): orphan cleanup on readonly fs [ 320.110277][T23776] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.6569: Invalid inode table block 0 in block_group 0 [ 320.135226][T23776] EXT4-fs (loop1): Remounting filesystem read-only [ 320.142710][T23776] __quota_error: 94 callbacks suppressed [ 320.142725][T23776] Quota error (device loop1): write_blk: dquota write failed [ 320.155919][T23776] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 320.177773][T23776] EXT4-fs (loop1): 1 truncate cleaned up [ 320.185985][T23776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.215289][T23776] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 320.224548][T23776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.299280][T23776] loop1: detected capacity change from 0 to 1024 [ 320.308192][T23776] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 320.320931][T23776] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 320.333578][T23776] jbd2_journal_init_inode: Cannot locate journal superblock [ 320.341049][T23776] EXT4-fs (loop1): Could not load journal inode [ 320.543199][T23815] x_tables: duplicate underflow at hook 2 [ 320.604523][T23821] program syz.2.6585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.684279][T23833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6591'. [ 320.736340][ T29] audit: type=1400 audit(1719910069.328:40326): avc: denied { connect } for pid=23841 comm="syz.2.6594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 320.737157][T23843] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6594'. [ 320.766952][T23843] unsupported nlmsg_type 40 [ 320.778001][T23843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6594'. [ 320.787318][T23843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6594'. [ 320.797096][T23843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'. [ 320.956940][T23856] bond0: (slave bond_slave_0): Releasing backup interface [ 320.964933][T23856] bond_slave_0: left promiscuous mode [ 320.970437][T23856] bond_slave_0: left allmulticast mode [ 321.279477][T23862] loop4: detected capacity change from 0 to 512 [ 321.329347][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6604'. [ 321.379673][T23870] x_tables: duplicate underflow at hook 2 [ 321.414925][T23872] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 321.414925][T23872] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 321.414925][T23872] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 321.414925][T23872] csum(0x350e2a11 start=10769 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 321.414925][T23872] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 321.414925][T23872] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 321.414925][T23872] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 321.464822][T23872] dev name=veth0 feat=0x000061164fdd19e9 [ 321.470536][T23872] skb linear: 00000000: 45 02 29 89 2f 93 00 00 0f 2f b2 81 ac 14 14 18 [ 321.479297][T23872] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 321.487839][T23872] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 321.496371][T23872] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 321.504940][T23872] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 321.513472][T23872] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 321.522162][T23872] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.530781][T23872] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.539390][T23872] skb linear: 00000080: 00 00 00 00 00 00 00 80 74 46 e3 f1 bd f1 1f 5e [ 321.548910][T23872] skb linear: 00000090: a9 e7 03 00 fe 3d df ff 00 b0 7f 5e bf 79 fb 32 [ 321.557463][T23872] skb linear: 000000a0: 2f 8a f3 41 96 f5 22 6e 86 4d d9 94 ed da f6 cf [ 321.566105][T23872] skb linear: 000000b0: 5f 14 e7 8f b3 a9 b3 f9 bb 6e 9a a6 bc 3b eb 9f [ 321.574730][T23872] skb linear: 000000c0: b4 7d b6 dc 1f c5 69 d7 3f 5d db 1f c7 a3 87 6d [ 321.583291][T23872] skb linear: 000000d0: 3f e9 9e bd 2a 56 fa 93 b8 d8 fc f6 01 00 00 00 [ 321.591835][T23872] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 e0 56 e8 67 33 [ 321.600389][T23872] skb linear: 000000f0: 6b ef f7 f7 fb bf eb db b4 f0 ff 00 2b f7 f7 0f [ 321.608905][T23872] skb linear: 00000100: e3 fe e1 7f db 06 00 00 00 00 00 00 00 00 00 00 [ 321.617492][T23872] ------------[ cut here ]------------ [ 321.622954][T23872] offset (10633) >= skb_headlen() (10633) [ 321.629267][T23872] WARNING: CPU: 0 PID: 23872 at net/core/dev.c:3325 skb_checksum_help+0x3bd/0x450 [ 321.638606][T23872] Modules linked in: [ 321.642514][T23872] CPU: 0 PID: 23872 Comm: syz.0.6606 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 321.652725][T23872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 321.663017][T23872] RIP: 0010:skb_checksum_help+0x3bd/0x450 [ 321.668830][T23872] Code: b9 3a 60 fd 41 8b 5d 00 48 8b 6c 24 08 48 89 ef e8 a8 3a 60 fd 2b 5d 00 48 c7 c7 e1 5b e1 85 44 89 e6 89 da e8 f4 dd 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 c3 fe ff ff e8 00 b4 48 fd 48 c7 c7 [ 321.688487][T23872] RSP: 0018:ffffc90001263410 EFLAGS: 00010246 [ 321.694581][T23872] RAX: 2051903082c61b00 RBX: 0000000000002989 RCX: 0000000000040000 [ 321.702585][T23872] RDX: ffffc90001da6000 RSI: 00000000000158e7 RDI: 00000000000158e8 [ 321.710659][T23872] RBP: ffff88812d631e74 R08: ffffffff8110fbd7 R09: 0000000000000000 [ 321.718754][T23872] R10: 0001ffffffffffff R11: ffff888101f40000 R12: 0000000000002989 [ 321.726768][T23872] R13: ffff88812d631e70 R14: ffff88812d631e00 R15: 0000000000000000 [ 321.734765][T23872] FS: 00007f1dc04916c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 321.743835][T23872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.750443][T23872] CR2: 000000002000e000 CR3: 000000012f958000 CR4: 00000000003506f0 [ 321.758503][T23872] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.766512][T23872] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 321.774538][T23872] Call Trace: [ 321.777834][T23872] [ 321.780854][T23872] ? __warn+0x13c/0x350 [ 321.785098][T23872] ? report_bug+0x315/0x420 [ 321.789691][T23872] ? skb_checksum_help+0x3bd/0x450 [ 321.794858][T23872] ? handle_bug+0x3e/0x70 [ 321.799198][T23872] ? exc_invalid_op+0x1a/0x50 [ 321.803985][T23872] ? asm_exc_invalid_op+0x1a/0x20 [ 321.809030][T23872] ? __warn_printk+0x167/0x1b0 [ 321.813884][T23872] ? skb_checksum_help+0x3bd/0x450 [ 321.819213][T23872] ip_do_fragment+0xdb/0xd00 [ 321.823864][T23872] ? __folio_put+0x114/0x150 [ 321.828529][T23872] ? free_large_kmalloc+0x8c/0xb0 [ 321.833651][T23872] ? kfree+0x148/0x290 [ 321.837791][T23872] ? __pfx_ip_finish_output2+0x10/0x10 [ 321.843343][T23872] ? skb_release_data+0x583/0x5a0 [ 321.848413][T23872] ip_fragment+0xd2/0x140 [ 321.852790][T23872] ip_finish_output+0x1c4/0x2a0 [ 321.857707][T23872] ip_output+0xab/0x170 [ 321.861889][T23872] ? __pfx_ip_finish_output+0x10/0x10 [ 321.867271][T23872] ? __pfx_ip_output+0x10/0x10 [ 321.872098][T23872] ip_local_out+0xab/0xd0 [ 321.876473][T23872] iptunnel_xmit+0x33f/0x460 [ 321.881093][T23872] ip_tunnel_xmit+0x1685/0x1740 [ 321.885977][T23872] ipgre_xmit+0x5f4/0x6d0 [ 321.890366][T23872] dev_hard_start_xmit+0x119/0x3f0 [ 321.895568][T23872] __dev_queue_xmit+0xf83/0x1e50 [ 321.900521][T23872] ? __dev_queue_xmit+0x161/0x1e50 [ 321.906522][T23872] packet_xmit+0x4b/0x1e0 [ 321.910977][T23872] packet_sendmsg+0x2ae1/0x3320 [ 321.916067][T23872] ? selinux_socket_sendmsg+0x182/0x1b0 [ 321.921689][T23872] ? __pfx_packet_sendmsg+0x10/0x10 [ 321.926985][T23872] __sock_sendmsg+0x140/0x180 [ 321.931721][T23872] ____sys_sendmsg+0x312/0x410 [ 321.936517][T23872] __sys_sendmsg+0x1e9/0x280 [ 321.941210][T23872] ? futex_wait+0x18e/0x1c0 [ 321.945789][T23872] __x64_sys_sendmsg+0x46/0x50 [ 321.950637][T23872] x64_sys_call+0xb25/0x2d70 [ 321.955493][T23872] do_syscall_64+0xc9/0x1c0 [ 321.960108][T23872] ? clear_bhb_loop+0x55/0xb0 [ 321.964879][T23872] ? clear_bhb_loop+0x55/0xb0 [ 321.969651][T23872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.975659][T23872] RIP: 0033:0x7f1dc120fb99 [ 321.980124][T23872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.999863][T23872] RSP: 002b:00007f1dc0491048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.008292][T23872] RAX: ffffffffffffffda RBX: 00007f1dc139dfa0 RCX: 00007f1dc120fb99 [ 322.016288][T23872] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 000000000000000b [ 322.024286][T23872] RBP: 00007f1dc129077e R08: 0000000000000000 R09: 0000000000000000 [ 322.032275][T23872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.040470][T23872] R13: 000000000000000b R14: 00007f1dc139dfa0 R15: 00007ffc0c94e088 [ 322.048568][T23872] [ 322.051618][T23872] ---[ end trace 0000000000000000 ]--- [ 322.086922][T23876] loop2: detected capacity change from 0 to 512 [ 322.246062][T23900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6615'. [ 322.257015][T23900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 322.518925][T23910] loop2: detected capacity change from 0 to 256 [ 323.039843][T23917] loop1: detected capacity change from 0 to 512 [ 323.267822][T23921] netlink: 'syz.1.6622': attribute type 4 has an invalid length. [ 323.308933][T23921] netlink: 'syz.1.6622': attribute type 4 has an invalid length. [ 323.356765][T23921] loop1: detected capacity change from 0 to 256 [ 323.372049][T23921] FAT-fs (loop1): Unrecognized mount option "noõLx”" or missing value [ 323.513539][T23939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6629'. [ 323.531029][T23939] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 323.568939][T23942] loop1: detected capacity change from 0 to 512 [ 323.590396][ T29] audit: type=1400 audit(1719910072.178:40327): avc: denied { recv } for pid=23882 comm="syz.0.6610" saddr=10.128.0.163 src=35214 daddr=10.128.1.149 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 323.655543][T23942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.670869][T23942] ext4 filesystem being mounted at /root/syzkaller.ei0hsU/682/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.720724][T23952] x_tables: duplicate underflow at hook 2 [ 323.776261][T13686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.811646][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6638'. [ 323.826945][T23962] bond0: (slave bond_slave_0): Releasing backup interface [ 323.837665][T23962] bond_slave_0: left promiscuous mode [ 323.843331][T23962] bond_slave_0: left allmulticast mode [ 324.036775][T23978] loop3: detected capacity change from 0 to 512 [ 324.103492][T23983] vlan3: entered promiscuous mode [ 324.110634][T23983] team0: Device vlan3 is already an upper device of the team interface [ 324.243856][T23991] x_tables: duplicate underflow at hook 2 [ 324.273403][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6649'. [ 324.612188][T24008] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6654'. [ 324.933436][T24014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6655'. [ 324.965423][T24016] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6656'. [ 324.988785][T24016] loop4: detected capacity change from 0 to 2048 [ 325.099001][T24016] loop4: unable to read partition table [ 325.106802][T24016] loop4: partition table beyond EOD, truncated [ 325.113080][T24016] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 325.206983][T24025] loop4: detected capacity change from 0 to 128 [ 325.219566][T24025] FAT-fs (loop4): invalid media value (0x00) [ 325.226831][T24025] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 325.236278][T24025] FAT-fs (loop4): Can't find a valid FAT filesystem [ 325.285826][T24027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6660'. [ 325.317257][T24025] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 325.441984][T24036] loop3: detected capacity change from 0 to 1024 [ 325.464371][T24036] EXT4-fs: Ignoring removed nobh option [ 325.487916][T24036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 325.506799][T24036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.615415][T23213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.898339][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 325.936880][T24062] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 326.032700][T24062] netlink: 'syz.1.6672': attribute type 322 has an invalid length. [ 326.083520][T24073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6675'. [ 326.180943][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6677'. [ 326.344808][T24101] loop2: detected capacity change from 0 to 512 [ 326.353305][T24101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.368106][T24101] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 326.437532][ T29] audit: type=1400 audit(1719910075.028:40328): avc: denied { create } for pid=24106 comm="syz.1.6687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 326.558133][T24113] loop2: detected capacity change from 0 to 512 [ 326.815543][T24143] x_tables: duplicate underflow at hook 2 [ 326.816963][T24141] loop4: detected capacity change from 0 to 512 [ 326.909308][T24141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.935149][T24140] loop3: detected capacity change from 0 to 8192 [ 326.941848][T24141] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 327.128353][T24140] loop3: p1 p2 p4 [ 327.143156][T24140] loop3: p1 start 83821824 is beyond EOD, truncated [ 327.149852][T24140] loop3: p2 start 4293394690 is beyond EOD, truncated [ 327.157515][T24140] loop3: p4 size 50331904 extends beyond EOD, truncated [ 327.367601][T24160] loop2: detected capacity change from 0 to 512 [ 327.395505][T24160] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 327.403525][T24160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 327.448328][T24140] loop3: detected capacity change from 0 to 128 [ 327.458979][T24168] loop4: detected capacity change from 0 to 164 [ 327.467495][T24160] System zones: 0-1, 15-15, 18-18, 34-34 [ 327.480154][T24160] EXT4-fs (loop2): orphan cleanup on readonly fs [ 327.490675][T24168] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 327.503365][T24160] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 327.514235][T24160] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 327.528969][T24160] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 327.538057][T24160] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6706: bg 0: block 40: padding at end of block bitmap is not set [ 327.556913][T24160] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 327.566501][T24160] EXT4-fs (loop2): 1 truncate cleaned up [ 327.574281][T24160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.589573][T24160] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 327.598694][T24160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 327.649504][T24178] nfs4: Unexpected value for 'rdma' [ 327.660301][T24183] loop4: detected capacity change from 0 to 512 [ 327.681164][T16258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.689013][T24183] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.707839][T24188] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 327.736879][ T29] audit: type=1400 audit(1719910076.328:40329): avc: denied { setattr } for pid=24182 comm="syz.4.6715" name="tun" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 327.775410][ T29] audit: type=1400 audit(1719910076.358:40330): avc: denied { setattr } for pid=24190 comm="syz.2.6717" name="ns" dev="proc" ino=81174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 327.807487][T24197] loop1: detected capacity change from 0 to 512 [ 327.839267][T22310] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 327.928469][T24213] x_tables: duplicate underflow at hook 2 [ 328.084284][T24240] loop4: detected capacity change from 0 to 512 [ 328.241101][T24253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.248454][T24253] IPv6: NLM_F_CREATE should be set when creating new route [ 328.619070][T24288] loop2: detected capacity change from 0 to 512 [ 328.619841][T24286] __nla_validate_parse: 7 callbacks suppressed [ 328.619859][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6756'. [ 328.641372][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6756'. [ 328.693284][T24286] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 328.721984][T24291] pimreg1: entered allmulticast mode [ 328.728830][T24291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6758'. [ 329.164034][T24306] dccp_invalid_packet: P.Data Offset(0) too small [ 329.218542][T24311] dccp_invalid_packet: P.Data Offset(0) too small [ 329.331500][T24320] x_tables: duplicate underflow at hook 2 [ 329.349897][T24323] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6772'. [ 329.376020][T24307] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6763'. [ 329.454409][T24332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6774'. [ 329.481118][T24330] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6772'. [ 329.524379][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'. [ 329.533363][T24337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6777'. [ 329.572033][T24337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.681203][T24340] dccp_invalid_packet: P.Data Offset(0) too small [ 329.813885][ T29] audit: type=1326 audit(1719910078.408:40331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24341 comm="syz.1.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370cc27b99 code=0x7ffc0000 [ 329.838425][ T29] audit: type=1326 audit(1719910078.408:40332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24341 comm="syz.1.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370cc27b99 code=0x7ffc0000 [ 329.871276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.871652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.879566][ T29] audit: type=1326 audit(1719910078.458:40333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24341 comm="syz.1.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f370cc27b99 code=0x7ffc0000 [ 329.912043][ T29] audit: type=1326 audit(1719910078.458:40334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24341 comm="syz.1.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370cc27b99 code=0x7ffc0000 [ 329.912142][ T29] audit: type=1326 audit(1719910078.458:40335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24341 comm="syz.1.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370cc27b99 code=0x7ffc0000 [ 329.912176][ T29] audit: type=1326 audit(1719910078.458:40336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24341 comm="syz.1.6779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f370cc265d0 code=0x7ffc0000 [ 330.047025][T24349] dccp_invalid_packet: P.Data Offset(0) too small [ 330.115560][T24351] ip6gretap0: entered promiscuous mode [ 330.126799][T24351] ip6gretap0: left promiscuous mode [ 330.276291][T24363] loop2: detected capacity change from 0 to 1024 [ 330.296555][T24366] sock: sock_timestamping_bind_phc: sock not bind to device [ 330.312194][T24363] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 330.323885][T24367] dccp_invalid_packet: P.Data Offset(0) too small [ 330.330823][T24363] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 330.360909][T24363] jbd2_journal_init_inode: Cannot locate journal superblock [ 330.368355][T24363] EXT4-fs (loop2): Could not load journal inode [ 330.386095][T24369] loop3: detected capacity change from 0 to 512 [ 330.394986][T24369] EXT4-fs: Ignoring removed nobh option [ 330.412952][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6792'. [ 330.412972][T24369] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 330.440856][T24369] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz.3.6791: casefold flag without casefold feature [ 330.454407][T24371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 330.465182][T24369] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.6791: couldn't read orphan inode 13 (err -117) [ 330.478233][T24369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.498158][T24369] EXT4-fs warning (device loop3): ext4_lookup:1866: Inconsistent encryption contexts: 2/12 [ 330.539104][T24376] dccp_invalid_packet: P.Data Offset(0) too small [ 330.552649][T23213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.662684][T24378] loop3: detected capacity change from 0 to 512 [ 330.670339][T24378] EXT4-fs: Ignoring removed nobh option [ 330.683585][T24378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 330.728423][T24378] EXT4-fs (loop3): 1 truncate cleaned up [ 330.740832][T24378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.770366][T23213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.814219][T24391] tap0: tun_chr_ioctl cmd 1074025677 [ 330.819818][T24391] tap0: linktype set to 774 [ 330.886479][T24397] dccp_invalid_packet: P.Data Offset(0) too small [ 331.073045][T24430] tap0: tun_chr_ioctl cmd 1074025677 [ 331.079319][T24430] tap0: linktype set to 774 [ 331.133538][T24440] dccp_invalid_packet: P.Data Offset(0) too small [ 331.174930][T24449] loop3: detected capacity change from 0 to 512 [ 331.849523][T24516] loop2: detected capacity change from 0 to 512 [ 331.948462][T24519] loop1: detected capacity change from 0 to 512 [ 331.956674][T24519] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.967174][T24519] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 331.977053][T24519] EXT4-fs (loop1): group descriptors corrupted! [ 332.159288][T24537] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 332.177619][T24537] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 332.227177][T24546] loop1: detected capacity change from 0 to 512 [ 332.333935][T24558] loop1: detected capacity change from 0 to 2048 [ 332.361229][T24558] loop1: p1 < > p2 p3 < p5 > p4 [ 332.366314][T24558] loop1: partition table partially beyond EOD, truncated [ 332.374123][T24558] loop1: p1 start 4278190080 is beyond EOD, truncated [ 332.381067][T24558] loop1: p2 start 16908800 is beyond EOD, truncated [ 332.388130][T24558] loop1: p4 start 11326 is beyond EOD, truncated [ 332.394507][T24558] loop1: p5 start 16908800 is beyond EOD, truncated [ 332.804985][T24617] loop1: detected capacity change from 0 to 512 [ 332.962419][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 332.962433][ T29] audit: type=1400 audit(1719910081.555:40354): avc: denied { write } for pid=24622 comm="syz.2.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.145914][T24646] loop2: detected capacity change from 0 to 1024 [ 333.155941][T24646] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 333.166118][T24646] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 333.168334][T24648] loop1: detected capacity change from 0 to 512 [ 333.178071][T24646] jbd2_journal_init_inode: Cannot locate journal superblock [ 333.190806][T24646] EXT4-fs (loop2): Could not load journal inode [ 333.263015][T24654] bridge_slave_0: left allmulticast mode [ 333.268867][T24654] bridge_slave_0: left promiscuous mode [ 333.274752][T24654] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.409247][T24674] tap0: tun_chr_ioctl cmd 1074025677 [ 333.415312][T24674] tap0: linktype set to 774 [ 333.421324][T24678] loop3: detected capacity change from 0 to 512 [ 333.484864][ T29] audit: type=1400 audit(1719910082.083:40355): avc: denied { write } for pid=24685 comm="syz.1.6918" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 333.587773][ T29] audit: type=1400 audit(1719910082.183:40356): avc: denied { cmd } for pid=24696 comm="syz.2.6921" path="socket:[82710]" dev="sockfs" ino=82710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 333.622748][T24695] __nla_validate_parse: 13 callbacks suppressed [ 333.622766][T24695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6917'. [ 333.688462][T24712] tap0: tun_chr_ioctl cmd 1074025677 [ 333.694397][T24712] tap0: linktype set to 774 [ 333.699816][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6926'. [ 333.708791][T24714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6926'. [ 333.744300][T24721] loop2: detected capacity change from 0 to 512 [ 333.797041][T24724] No such timeout policy "syz0" [ 333.827147][T24726] loop2: detected capacity change from 0 to 1024 [ 333.836758][T24726] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 333.846714][T24726] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 333.858184][T24726] jbd2_journal_init_inode: Cannot locate journal superblock [ 333.865608][T24726] EXT4-fs (loop2): Could not load journal inode [ 333.938849][T24731] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6934'. [ 333.987149][T24735] loop2: detected capacity change from 0 to 1764 [ 333.994966][T24735] iso9660: Bad value for 'map' [ 334.157359][T24747] loop1: detected capacity change from 0 to 2048 [ 334.165606][T24747] EXT4-fs: Ignoring removed bh option [ 334.171179][T24747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.178061][T24747] EXT4-fs: Ignoring removed nobh option [ 334.382075][T24747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.419251][T24747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.556127][T24759] loop1: detected capacity change from 0 to 512 [ 334.574554][T24759] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.590543][T24759] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 334.651519][T24778] tap0: tun_chr_ioctl cmd 1074025677 [ 334.657487][T24778] tap0: linktype set to 774 [ 334.715484][T24782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6954'. [ 334.773057][T24787] loop3: detected capacity change from 0 to 1024 [ 334.784684][T24787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.801818][T24787] vhci_hcd: invalid port number 97 [ 334.806982][T24787] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 334.825402][T23213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.912779][T24796] loop3: detected capacity change from 0 to 512 [ 334.987886][T24800] 9pnet: p9_errstr2errno: server reported unknown error œæç(üx [ 346.496379][ T36] tipc: Disabling bearer [ 346.501795][ T36] tipc: Left network mode [ 346.543873][ T36] IPVS: stopping backup sync thread 15189 ... [ 346.565206][T25671] chnl_net:caif_netlink_parms(): no params data found [ 346.632714][ T36] hsr_slave_0: left promiscuous mode [ 346.638499][ T36] hsr_slave_1: left promiscuous mode [ 346.644982][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.652570][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.666760][ T36] pimreg1 (unregistering): left allmulticast mode [ 346.712658][ T36] team0 (unregistering): Port device team_slave_1 removed [ 346.723353][ T36] team0 (unregistering): Port device team_slave_0 removed [ 346.782810][T25671] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.789923][T25671] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.799125][T25671] bridge_slave_0: entered allmulticast mode [ 346.805854][T25671] bridge_slave_0: entered promiscuous mode [ 346.813137][T25671] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.820430][T25671] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.828272][T25671] bridge_slave_1: entered allmulticast mode [ 346.835215][T25671] bridge_slave_1: entered promiscuous mode [ 346.854509][T25671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.865405][T25671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.888254][T25671] team0: Port device team_slave_0 added [ 346.895615][T25671] team0: Port device team_slave_1 added [ 346.917455][T25671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.924521][T25671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.951321][T25671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.963146][T25671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.970476][T25671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.997174][T25671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.026829][T25671] hsr_slave_0: entered promiscuous mode [ 347.033336][T25671] hsr_slave_1: entered promiscuous mode [ 347.040684][T25671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.050328][T25671] Cannot create hsr debugfs directory [ 347.120198][ T36] IPVS: stop unused estimator thread 0... [ 347.213744][T25759] netlink: 'syz.0.7335': attribute type 27 has an invalid length. [ 347.390710][T25671] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.410922][T25671] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.443370][T25671] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.463526][T25671] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.495830][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7340'. [ 347.550781][T25777] syz_tun: entered promiscuous mode [ 347.557803][T25777] syz_tun: left promiscuous mode [ 347.584249][T25671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.599069][T25671] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.633148][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.640464][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.665651][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.672883][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.710522][T25671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.827106][T25671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.996780][T25671] veth0_vlan: entered promiscuous mode [ 348.007726][T25671] veth1_vlan: entered promiscuous mode [ 348.027057][T25671] veth0_macvtap: entered promiscuous mode [ 348.035833][T25671] veth1_macvtap: entered promiscuous mode [ 348.048919][T25671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.059734][T25671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.069704][T25671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.081232][T25671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.091160][T25671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.101767][T25671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.115187][T25671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.126393][T25671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.136968][T25671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.147674][T25671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.158334][T25671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.168978][T25671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.180398][T25671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.190280][T25671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.201639][T25671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.213178][T25671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.220644][T25815] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7354'. [ 348.234304][T25671] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.243096][T25671] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.251997][T25671] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.260809][T25671] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.749752][T25842] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7364'. [ 349.291871][T25876] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 349.304370][T25876] Cannot find map_set index 0 as target [ 349.310428][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7376'. [ 349.443782][T25884] vlan3: entered promiscuous mode [ 349.446970][T25886] loop1: detected capacity change from 0 to 1024 [ 349.467000][T25886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.482494][T25886] netlink: 'syz.1.7382': attribute type 10 has an invalid length. [ 349.490368][T25886] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7382'. [ 349.499504][T25886] bond0: entered promiscuous mode [ 349.504615][T25886] bond_slave_0: entered promiscuous mode [ 349.510290][T25886] bond_slave_1: entered promiscuous mode [ 349.516223][T25886] bridge0: port 3(bond0) entered blocking state [ 349.522870][T25886] bridge0: port 3(bond0) entered disabled state [ 349.530114][T25886] bond0: entered allmulticast mode [ 349.535422][T25886] bond_slave_0: entered allmulticast mode [ 349.541204][T25886] bond_slave_1: entered allmulticast mode [ 349.548067][T25890] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.548406][T25886] bridge0: port 3(bond0) entered blocking state [ 349.564219][T25886] bridge0: port 3(bond0) entered forwarding state [ 349.664152][T25671] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.673045][T25908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=25908 comm=syz.4.7388 [ 349.745448][T25910] loop1: detected capacity change from 0 to 2048 [ 349.753317][T25910] EXT4-fs: Ignoring removed i_version option [ 349.774157][T25910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.810631][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 349.810649][ T29] audit: type=1400 audit(349.794:40508): avc: denied { setattr } for pid=25909 comm="syz.1.7389" name="net_prio.prioidx" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 349.815266][T25910] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 349.873249][T25910] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 349.885816][T25910] EXT4-fs (loop1): This should not happen!! Data will be lost [ 349.885816][T25910] [ 349.895535][T25910] EXT4-fs (loop1): Total free blocks count 0 [ 349.901645][T25910] EXT4-fs (loop1): Free/Dirty block details [ 349.907712][T25910] EXT4-fs (loop1): free_blocks=2415919104 [ 349.913848][T25910] EXT4-fs (loop1): dirty_blocks=48 [ 349.919114][T25910] EXT4-fs (loop1): Block reservation details [ 349.924612][T25925] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7394'. [ 349.925125][T25910] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 349.968898][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 11 with error 28 [ 350.044162][T25940] loop1: detected capacity change from 0 to 512 [ 350.059496][T25940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.070244][T25940] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 350.130360][T25951] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7403'. [ 350.139733][T25951] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7403'. [ 350.180260][ T29] audit: type=1400 audit(350.164:40509): avc: denied { lock } for pid=25957 comm="syz.0.7408" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 350.209011][T25960] loop1: detected capacity change from 0 to 512 [ 350.229959][T25962] netlink: 'syz.2.7407': attribute type 27 has an invalid length. [ 350.323145][T25962] bridge0: port 5(gretap0) entered disabled state [ 350.396423][T25962] bridge0: port 4(bond0) entered disabled state [ 350.402834][T25962] bridge0: port 3(team0) entered disabled state [ 350.409301][T25962] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.504690][T25962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.533738][T25962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.895880][T25962] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.905117][T25962] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.914206][T25962] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.923236][T25962] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.018488][T25962] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 351.051457][T25989] bond0: (slave bond_slave_0): Releasing backup interface [ 351.261019][T26007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7422'. [ 351.290541][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7424'. [ 351.374208][T26019] netlink: 'syz.1.7426': attribute type 27 has an invalid length. [ 351.565849][T26019] bridge0: port 3(bond0) entered disabled state [ 351.572384][T26019] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.579610][T26019] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.656667][T26019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.669663][T26019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.720150][T26019] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.729395][T26019] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.738360][T26019] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.747361][T26019] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.805662][ T29] audit: type=1400 audit(351.794:40510): avc: denied { write } for pid=26030 comm="syz.1.7432" name="ptype" dev="proc" ino=4026533649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 351.835806][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7431'. [ 351.870279][T26038] loop1: detected capacity change from 0 to 512 [ 351.902584][T26038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.922812][T26038] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 351.941483][ T29] audit: type=1400 audit(351.924:40511): avc: denied { listen } for pid=26028 comm="syz.0.7431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.985704][T26047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7437'. [ 352.038901][T26053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7440'. [ 352.080527][T26060] netlink: 'syz.1.7443': attribute type 27 has an invalid length. [ 352.154938][T26074] loop1: detected capacity change from 0 to 512 [ 352.159195][T26076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7449'. [ 352.165298][T26074] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7448: invalid indirect mapped block 256 (level 2) [ 352.184339][T26074] EXT4-fs (loop1): 2 truncates cleaned up [ 352.190512][T26074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.205622][T26074] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7448: bg 0: block 5: invalid block bitmap [ 352.246800][ T29] audit: type=1326 audit(352.234:40512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 352.270906][ T29] audit: type=1326 audit(352.234:40513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26081 comm="syz.0.7451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 352.312577][ T29] audit: type=1326 audit(352.294:40514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26085 comm="syz.0.7452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x0 [ 352.366535][T25671] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.491014][T26097] x_tables: duplicate underflow at hook 2 [ 352.605477][ T29] audit: type=1400 audit(352.594:40515): avc: denied { create } for pid=26085 comm="syz.0.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 352.956754][ T29] audit: type=1326 audit(352.944:40516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.2.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1339bc7b99 code=0x7ffc0000 [ 352.982746][ T29] audit: type=1326 audit(352.944:40517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26135 comm="syz.2.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1339bc7b99 code=0x7ffc0000 [ 353.526623][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7478'. [ 353.901295][T26183] wireguard1: entered promiscuous mode [ 353.907265][T26183] wireguard1: entered allmulticast mode [ 354.697770][T26239] netlink: 'syz.0.7510': attribute type 27 has an invalid length. [ 354.893239][T26268] netlink: 'syz.2.7523': attribute type 27 has an invalid length. [ 355.099580][T26294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=26294 comm=syz.4.7535 [ 355.199528][T26300] netlink: 'syz.0.7537': attribute type 27 has an invalid length. [ 355.253175][T26309] __nla_validate_parse: 4 callbacks suppressed [ 355.253203][T26309] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7541'. [ 355.394159][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7545'. [ 355.601298][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7557'. [ 355.636252][T26351] pimreg: entered allmulticast mode [ 355.644041][T26349] pimreg: left allmulticast mode [ 355.707231][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 355.707317][ T29] audit: type=1326 audit(355.698:40531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.737506][ T29] audit: type=1326 audit(355.698:40532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.761535][ T29] audit: type=1326 audit(355.698:40533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.786184][ T29] audit: type=1326 audit(355.698:40534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.809234][ T29] audit: type=1326 audit(355.698:40535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.832965][ T29] audit: type=1326 audit(355.698:40536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.855949][ T29] audit: type=1326 audit(355.698:40537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.879827][ T29] audit: type=1326 audit(355.698:40538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.903474][ T29] audit: type=1326 audit(355.698:40539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.926613][ T29] audit: type=1326 audit(355.698:40540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26363 comm="syz.0.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc120fb99 code=0x7ffc0000 [ 355.982064][T26377] No such timeout policy "syz1" [ 355.989173][T26377] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 356.001713][T26377] netlink: 'syz.4.7570': attribute type 2 has an invalid length. [ 356.096495][T26391] netlink: 'syz.4.7576': attribute type 30 has an invalid length. [ 356.493322][T26426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7590'. [ 356.635267][T26449] x_tables: duplicate underflow at hook 2 [ 356.690907][T26454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=26454 comm=syz.2.7601 [ 357.066577][T20945] bond0: left allmulticast mode [ 357.071555][T20945] bond_slave_0: left allmulticast mode [ 357.077049][T20945] bond_slave_1: left allmulticast mode [ 357.082637][T20945] bond0: left promiscuous mode [ 357.087428][T20945] bond_slave_0: left promiscuous mode [ 357.093019][T20945] bond_slave_1: left promiscuous mode [ 357.098746][T20945] bridge0: port 3(bond0) entered disabled state [ 357.106982][T20945] bridge_slave_1: left allmulticast mode [ 357.112728][T20945] bridge_slave_1: left promiscuous mode [ 357.118472][T20945] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.133055][T20945] bridge_slave_0: left allmulticast mode [ 357.139855][T20945] bridge_slave_0: left promiscuous mode [ 357.145639][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.214291][T20945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.224476][T20945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.235776][T20945] bond0 (unregistering): Released all slaves [ 357.340440][T20945] hsr_slave_0: left promiscuous mode [ 357.346755][T20945] hsr_slave_1: left promiscuous mode [ 357.357054][T20945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.365687][T20945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.372794][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7632'. [ 357.429313][T20945] team0 (unregistering): Port device team_slave_1 removed [ 357.442135][T20945] team0 (unregistering): Port device team_slave_0 removed [ 357.532295][T26497] chnl_net:caif_netlink_parms(): no params data found [ 357.573108][T26497] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.580346][T26497] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.604885][T26497] bridge_slave_0: entered allmulticast mode [ 357.614578][T26497] bridge_slave_0: entered promiscuous mode [ 357.626395][T26497] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.633709][T26497] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.652322][T26497] bridge_slave_1: entered allmulticast mode [ 357.663185][T26497] bridge_slave_1: entered promiscuous mode [ 357.699759][T26497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.729581][T26497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.774195][T26497] team0: Port device team_slave_0 added [ 357.782520][T26497] team0: Port device team_slave_1 added [ 357.808924][T26497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.816641][T26497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.842782][T26497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.860696][T26497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.867743][T26497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.894452][T26497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.938427][T26497] hsr_slave_0: entered promiscuous mode [ 357.952856][T26497] hsr_slave_1: entered promiscuous mode [ 357.961581][T26497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.973189][T26497] Cannot create hsr debugfs directory [ 357.985158][T26587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7648'. [ 358.277992][T26497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.300631][T26497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.322873][T26497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.342566][T26497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.466410][T26497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.472007][T26635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7664'. [ 358.484337][T26497] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.496375][T14766] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.503509][T14766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.513225][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7664'. [ 358.522994][T26635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7664'. [ 358.538826][T14766] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.546033][T14766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.569106][T26497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.678480][T26497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.789779][T26497] veth0_vlan: entered promiscuous mode [ 358.809901][T26497] veth1_vlan: entered promiscuous mode [ 358.836737][T26497] veth0_macvtap: entered promiscuous mode [ 358.851296][T26497] veth1_macvtap: entered promiscuous mode [ 358.866331][T26497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.876889][T26497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.886784][T26497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.897341][T26497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.923716][T26497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.935906][T26497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.946440][T26497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.956504][T26497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.967024][T26497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.977005][T26497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.987614][T26497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.999498][T26497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.013076][T26497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.022027][T26497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.031206][T26497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.039999][T26497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.186786][T26676] loop1: detected capacity change from 0 to 1024 [ 359.212217][T26676] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 359.318096][T26690] loop1: detected capacity change from 0 to 512 [ 359.327998][T26690] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.7680: corrupted in-inode xattr: invalid ea_ino [ 359.342519][T26690] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.7680: couldn't read orphan inode 15 (err -117) [ 359.356103][T26690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.393969][T26690] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 13: comm syz.1.7680: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 359.456491][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7682'. [ 359.483243][T26698] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.496763][T26699] netlink: 'syz.1.7680': attribute type 10 has an invalid length. [ 359.509587][T26699] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 359.547286][T26698] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.629404][T26698] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.695888][T26698] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.747603][T26698] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.760035][T26698] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.771683][T26698] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.784233][T26698] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.131994][T26722] pimreg: entered allmulticast mode [ 360.138030][T26722] pimreg: left allmulticast mode [ 360.174959][T26497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.263774][T26740] tap0: tun_chr_ioctl cmd 1074025677 [ 360.269340][T26740] tap0: linktype set to 774 [ 360.336973][T26749] netlink: 'syz.3.7702': attribute type 27 has an invalid length. [ 360.391811][T26753] loop1: detected capacity change from 0 to 1024 [ 360.406906][T26753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.432871][T26753] vhci_hcd: invalid port number 97 [ 360.438067][T26753] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 360.463799][T26497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.562836][T26767] loop1: detected capacity change from 0 to 512 [ 360.573685][T26749] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.594670][T26767] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.7707: corrupted in-inode xattr: invalid ea_ino [ 360.617810][T26767] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.7707: couldn't read orphan inode 15 (err -117) [ 360.641216][T26767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.733366][T26769] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 13: comm syz.1.7707: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 360.836484][T26749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.857688][T26749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.906681][T26749] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.915519][T26749] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.923989][T26749] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.932573][T26749] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.952938][T26770] netlink: 'syz.1.7707': attribute type 10 has an invalid length. [ 361.107642][T26786] __nla_validate_parse: 1 callbacks suppressed [ 361.107665][T26786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7714'. [ 361.183543][T26793] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7713'. [ 361.354006][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 361.354023][ T29] audit: type=1400 audit(361.345:40604): avc: denied { write } for pid=26802 comm="syz.0.7722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 361.407413][T26497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.484974][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7729'. [ 361.512883][T26823] x_tables: duplicate underflow at hook 2 [ 361.647858][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7742'. [ 361.651840][T26849] x_tables: duplicate underflow at hook 2 [ 361.684567][T26851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7744'. [ 361.729874][T26861] loop1: detected capacity change from 0 to 512 [ 361.806779][T26868] 9pnet_fd: Insufficient options for proto=fd [ 361.891842][T26873] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.236325][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7754'. [ 362.311098][T26879] netlink: 'syz.4.7756': attribute type 27 has an invalid length. [ 362.357975][T26881] x_tables: duplicate underflow at hook 2 [ 362.655562][T26879] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.662927][T26879] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.729081][T26879] infiniband syz1: set down [ 362.776710][T26879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.792969][T26879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.875294][T26879] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.885094][T26879] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.894233][T26879] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.903323][T26879] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.933876][T26889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7760'. [ 362.944604][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7762'. [ 362.962501][T26894] (unnamed net_device) (uninitialized): option arp_validate: invalid value (205) [ 363.001719][T26904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7765'. [ 363.055232][T26912] loop1: detected capacity change from 0 to 512 [ 363.126070][T26912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.135830][T26912] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 363.169964][ T9143] bond0: (slave syz_tun): Releasing backup interface [ 363.179999][ T9143] syz_tun (unregistering): left promiscuous mode [ 363.186466][ T9143] syz_tun (unregistering): left allmulticast mode [ 363.250132][T26925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7770'. [ 363.399317][T26917] chnl_net:caif_netlink_parms(): no params data found [ 363.452737][T26917] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.459876][T26917] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.467839][T26917] bridge_slave_0: entered allmulticast mode [ 363.476489][T26917] bridge_slave_0: entered promiscuous mode [ 363.483918][T26917] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.491228][T26917] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.500211][T26917] bridge_slave_1: entered allmulticast mode [ 363.507408][T26917] bridge_slave_1: entered promiscuous mode [ 363.516145][T26950] netlink: 'syz.4.7777': attribute type 27 has an invalid length. [ 363.543020][T26917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.555416][T26917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.580152][T26917] team0: Port device team_slave_0 added [ 363.587309][T26917] team0: Port device team_slave_1 added [ 363.607947][T26917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.615084][T26917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.641316][T26917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.655100][T26917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.662885][T26917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.669580][T26957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 363.689113][T26917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.711813][ T36] bond0: left allmulticast mode [ 363.716758][ T36] bond_slave_1: left allmulticast mode [ 363.722247][ T36] bond0: left promiscuous mode [ 363.727022][ T36] bond_slave_1: left promiscuous mode [ 363.732703][ T36] bridge0: port 3(bond0) entered disabled state [ 363.739839][ T36] bridge_slave_1: left allmulticast mode [ 363.746092][ T36] bridge_slave_1: left promiscuous mode [ 363.751879][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.759529][ T36] : left allmulticast mode [ 363.764174][ T36] : left promiscuous mode [ 363.768809][ T36] bridge0: port 1() entered disabled state [ 363.903652][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.913020][ T36] bond0 (unregistering): Released all slaves [ 363.929552][T26917] hsr_slave_0: entered promiscuous mode [ 363.935806][T26917] hsr_slave_1: entered promiscuous mode [ 363.943067][T26917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.950657][T26917] Cannot create hsr debugfs directory [ 364.021388][ T36] IPVS: stopping backup sync thread 13361 ... [ 364.048984][ T36] hsr_slave_0: left promiscuous mode [ 364.055247][ T36] hsr_slave_1: left promiscuous mode [ 364.061337][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.069145][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.107647][ T36] team0 (unregistering): Port device team_slave_1 removed [ 364.119088][ T36] team0 (unregistering): Port device team_slave_0 removed [ 364.293562][T26977] netlink: 'syz.2.7787': attribute type 27 has an invalid length. [ 364.320250][T26982] x_tables: duplicate underflow at hook 2 [ 364.344846][T26917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.356384][T26917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.365355][T26917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.374765][T26917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.424643][T26917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.438947][T26917] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.449465][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.456660][T14762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.472271][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.479385][T14762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.513068][T26917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.524263][T26917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.589866][T26917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.666598][T27012] netlink: 'syz.4.7799': attribute type 27 has an invalid length. [ 364.723815][T26917] veth0_vlan: entered promiscuous mode [ 364.736843][T26917] veth1_vlan: entered promiscuous mode [ 364.759974][T26917] veth0_macvtap: entered promiscuous mode [ 364.768651][T26917] veth1_macvtap: entered promiscuous mode [ 364.781826][T26917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.792748][T26917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.805039][T26917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.816358][T26917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.826856][T26917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.836769][T26917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.847329][T26917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.858680][T26917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.870058][T26917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.878881][T26917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.887709][T26917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.896554][T26917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.985682][ T29] audit: type=1400 audit(364.975:40605): avc: denied { getopt } for pid=27028 comm="syz.2.7804" lport=43070 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 365.094226][T27043] netlink: 'syz.2.7809': attribute type 27 has an invalid length. [ 365.294899][T27063] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.302937][T27063] IPv6: Can't replace route, no match found [ 365.402048][T27076] netlink: 'syz.1.7823': attribute type 27 has an invalid length. [ 365.514208][T27076] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.521537][T27076] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.589322][T27076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.609308][T27076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.668445][T27076] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.677605][T27076] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.686648][T27076] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.695807][T27076] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.199952][T27142] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.209808][T27143] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 366.651881][T27168] __nla_validate_parse: 2 callbacks suppressed [ 366.651901][T27168] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7859'. [ 366.719418][ T29] audit: type=1326 audit(366.705:40606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27167 comm="syz.4.7859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989f4e7b99 code=0x0 [ 366.946366][T27192] loop1: detected capacity change from 0 to 512 [ 367.117920][T27206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7873'. [ 367.146720][T27208] tap0: tun_chr_ioctl cmd 1074025677 [ 367.152725][T27208] tap0: linktype set to 774 [ 367.278854][T27212] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 367.690435][T27235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7883'. [ 367.704655][T27236] netlink: 'syz.2.7884': attribute type 27 has an invalid length. [ 367.758726][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7887'. [ 367.863686][T27252] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7891'. [ 367.875909][T27252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=27252 comm=syz.0.7891 [ 367.895242][T27255] loop1: detected capacity change from 0 to 512 [ 367.973274][T27262] netlink: 'syz.0.7895': attribute type 27 has an invalid length. [ 368.089652][T27262] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.096965][T27262] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.188079][T27262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.207697][T27262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.310482][T27262] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.319592][T27262] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.328570][T27262] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.337565][T27262] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.357027][T27264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7896'. [ 368.382191][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7897'. [ 368.433582][T27272] tap0: tun_chr_ioctl cmd 1074025677 [ 368.439069][T27272] tap0: linktype set to 774 [ 368.539766][T27280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 368.612757][ T29] audit: type=1326 audit(368.608:40607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27287 comm="syz.4.7906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989f4e7b99 code=0x0 [ 368.714336][T27290] netlink: 'syz.4.7906': attribute type 10 has an invalid length. [ 369.041628][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7911'. [ 369.163114][T27320] loop1: detected capacity change from 0 to 512 [ 369.250378][T27333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7925'. [ 369.295775][T27338] netlink: 'syz.3.7927': attribute type 27 has an invalid length. [ 369.304820][T27343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7929'. [ 369.335192][T27345] netlink: 'syz.3.7930': attribute type 27 has an invalid length. [ 369.423318][T27347] bond0: (slave netdevsim1): Releasing backup interface [ 369.487231][T27364] loop0: detected capacity change from 0 to 512 [ 369.490241][T27368] netlink: 'syz.3.7940': attribute type 27 has an invalid length. [ 369.507997][T27364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.523689][T27364] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 369.549745][T27376] netlink: 'syz.2.7944': attribute type 27 has an invalid length. [ 369.584359][T27380] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 369.597500][T27380] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 369.618904][T27382] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 369.765015][T27394] loop1: detected capacity change from 0 to 512 [ 369.773392][T27394] EXT4-fs: quotafile must be on filesystem root [ 369.835654][T27406] loop0: detected capacity change from 0 to 512 [ 369.843443][T27406] EXT4-fs: quotafile must be on filesystem root [ 369.875993][T27408] netlink: 'syz.1.7957': attribute type 27 has an invalid length. [ 369.891421][T27392] netlink: 'syz.3.7951': attribute type 4 has an invalid length. [ 369.968055][T27420] usb usb8: usbfs: process 27420 (syz.1.7961) did not claim interface 0 before use [ 370.088389][T27435] x_tables: duplicate underflow at hook 2 [ 370.119732][T27439] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 370.138160][T27439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64788 sclass=netlink_route_socket pid=27439 comm=syz.1.7969 [ 370.482720][T27467] x_tables: duplicate underflow at hook 2 [ 370.494939][T27471] validate_nla: 4 callbacks suppressed [ 370.494976][T27471] netlink: 'syz.3.7982': attribute type 27 has an invalid length. [ 370.695959][ T29] audit: type=1400 audit(370.683:40608): avc: denied { write } for pid=27492 comm="syz.3.7992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 370.768871][T27501] x_tables: duplicate underflow at hook 2 [ 370.889158][T27518] netlink: 'syz.4.8003': attribute type 1 has an invalid length. [ 370.904349][T27518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.921397][T27518] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 370.967486][T27531] bridge0: port 1(vlan2) entered blocking state [ 370.974637][T27531] bridge0: port 1(vlan2) entered disabled state [ 370.984920][T27531] vlan2: entered allmulticast mode [ 370.991887][T27531] vlan2: left allmulticast mode [ 371.015408][T20940] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 371.046204][T27537] x_tables: duplicate underflow at hook 2 [ 371.067236][ T29] audit: type=1400 audit(371.053:40609): avc: denied { write } for pid=27538 comm="syz.1.8012" name="usbmon7" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 371.171272][T20936] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 371.287829][T27563] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 16975 (only 8 groups) [ 371.688417][T27590] __nla_validate_parse: 9 callbacks suppressed [ 371.688438][T27590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8030'. [ 371.870672][T27596] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8034'. [ 371.978492][ T29] audit: type=1400 audit(371.963:40610): avc: denied { getopt } for pid=27601 comm="syz.1.8035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 371.999750][T27600] netlink: 'syz.2.8037': attribute type 27 has an invalid length. [ 372.020803][T27604] tipc: Started in network mode [ 372.025714][T27604] tipc: Node identity total_si, cluster identity 4711 [ 372.032552][T27604] tipc: Enabling of bearer rejected, failed to enable media [ 372.050818][ T29] audit: type=1400 audit(372.003:40611): avc: denied { connect } for pid=27603 comm="syz.4.8038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 372.197106][T27614] tap0: tun_chr_ioctl cmd 1074025677 [ 372.221673][ T29] audit: type=1400 audit(372.193:40612): avc: denied { ioctl } for pid=27603 comm="syz.4.8038" path="socket:[94052]" dev="sockfs" ino=94052 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 372.295393][T27614] tap0: linktype set to 774 [ 372.372721][T27627] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8046'. [ 372.508773][T27636] netlink: 'syz.3.8050': attribute type 27 has an invalid length. [ 372.538285][ T29] audit: type=1400 audit(372.517:40613): avc: denied { ioctl } for pid=27637 comm="syz.1.8051" path="socket:[94854]" dev="sockfs" ino=94854 ioctlcmd=0x8913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.628833][T27645] loop1: detected capacity change from 0 to 512 [ 372.637818][T27645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.647050][T27645] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 372.775978][T27656] tap0: tun_chr_ioctl cmd 1074025677 [ 372.782364][T27656] tap0: linktype set to 774 [ 372.813427][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8060'. [ 372.906341][T27665] netlink: 'syz.0.8062': attribute type 27 has an invalid length. [ 372.937346][T27669] tipc: Started in network mode [ 372.942387][T27669] tipc: Node identity total_si, cluster identity 4711 [ 372.949251][T27669] tipc: Enabling of bearer rejected, failed to enable media [ 372.961112][T27669] loop0: detected capacity change from 0 to 128 [ 372.971090][T27669] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.983689][ T29] audit: type=1326 audit(372.978:40614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27672 comm="syz.2.8065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1339bc7b99 code=0x0 [ 373.017398][ T29] audit: type=1400 audit(372.998:40615): avc: denied { write } for pid=27668 comm="syz.0.8064" name="file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 373.038798][ T29] audit: type=1400 audit(372.998:40616): avc: denied { add_name } for pid=27668 comm="syz.0.8064" name="file4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 373.059597][ T29] audit: type=1400 audit(373.008:40617): avc: denied { remove_name } for pid=27668 comm="syz.0.8064" name="file5" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 373.104829][T26917] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.202869][T27692] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8072'. [ 373.242093][T27698] netlink: 'syz.1.8074': attribute type 27 has an invalid length. [ 373.279449][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8077'. [ 373.310519][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8078'. [ 373.475947][T27714] netlink: 'syz.3.8081': attribute type 6 has an invalid length. [ 373.484724][T27715] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8082'. [ 373.539027][T27718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8081'. [ 373.565717][T27720] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8084'. [ 373.592447][ T29] audit: type=1326 audit(373.588:40618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27721 comm="syz.4.8085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989f4e7b99 code=0x0 [ 373.668075][T27727] netlink: 'syz.0.8087': attribute type 27 has an invalid length. [ 373.701109][T27733] x_tables: duplicate underflow at hook 2 [ 373.781734][T27742] loop1: detected capacity change from 0 to 512 [ 373.792216][T27742] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.8094: casefold flag without casefold feature [ 373.805395][T27742] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.8094: couldn't read orphan inode 15 (err -117) [ 373.818232][T27742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.833012][ T29] audit: type=1400 audit(373.828:40619): avc: denied { setopt } for pid=27741 comm="syz.1.8094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 373.876821][T26497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.948738][T27754] netlink: 'syz.2.8099': attribute type 27 has an invalid length. [ 373.976422][T27758] x_tables: duplicate underflow at hook 2 [ 374.514072][T27783] netlink: 'syz.3.8111': attribute type 27 has an invalid length. [ 374.961647][T27821] loop0: detected capacity change from 0 to 1024 [ 374.972147][T27821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.986991][T27821] vhci_hcd: invalid port number 97 [ 374.992251][T27821] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 375.008413][T26917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.202622][T27851] loop0: detected capacity change from 0 to 1024 [ 375.212415][T27851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.229342][T27851] vhci_hcd: invalid port number 97 [ 375.234662][T27851] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 375.254197][T26917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.689428][T27901] validate_nla: 2 callbacks suppressed [ 375.689442][T27901] netlink: 'syz.1.8163': attribute type 27 has an invalid length. [ 375.784453][T27913] x_tables: duplicate underflow at hook 2 [ 375.828605][T27917] loop1: detected capacity change from 0 to 512 [ 375.844044][T27917] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 375.853956][T27917] EXT4-fs (loop1): orphan cleanup on readonly fs [ 375.860546][T27917] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 375.877837][T27917] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 375.885199][T27917] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8170: bg 0: block 40: padding at end of block bitmap is not set [ 375.902222][T27917] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 375.912150][T27917] EXT4-fs (loop1): 1 truncate cleaned up [ 375.918306][T27917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.939276][T27917] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.8170: corrupted xattr block 31: invalid header [ 375.954311][T27917] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 375.964218][T27917] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.8170: corrupted xattr block 31: invalid header [ 375.978819][T27917] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 375.989774][T27917] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.8170: corrupted xattr block 31: invalid header [ 376.004800][T27917] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 376.024369][T26497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.091199][T27934] netlink: 'syz.1.8176': attribute type 27 has an invalid length. [ 376.139523][T27939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.493932][T27962] x_tables: duplicate underflow at hook 2 [ 376.611933][T27971] loop0: detected capacity change from 0 to 512 [ 376.619449][T27971] EXT4-fs: Ignoring removed nobh option [ 376.627142][T27971] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 376.636100][T27971] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #13: comm syz.0.8192: casefold flag without casefold feature [ 376.649068][T27971] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.8192: couldn't read orphan inode 13 (err -117) [ 376.662868][T27971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.733647][T26917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.910583][T27991] __nla_validate_parse: 15 callbacks suppressed [ 376.910601][T27991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8199'. [ 376.989205][T27997] tipc: Enabling of bearer rejected, failed to enable media [ 377.076719][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 377.076735][ T29] audit: type=1326 audit(377.068:40625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27943 comm="syz.1.8181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ceabfb99 code=0x7fc00000 [ 377.265864][T28020] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8212'. [ 377.492322][T28045] x_tables: duplicate underflow at hook 1 [ 377.503780][T28044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8223'. [ 377.543659][T28048] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8224'. [ 377.587613][T28056] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8227'. [ 377.649692][ T29] audit: type=1326 audit(17734.634:40626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28054 comm="syz.4.8227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989f4e7b99 code=0x0 [ 377.779078][T28086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8237'. [ 377.859323][T28088] loop0: detected capacity change from 0 to 8192 [ 377.869793][T28088] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 378.040673][T28098] loop0: detected capacity change from 0 to 512 [ 378.263013][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8248'. [ 378.429953][T28121] loop0: detected capacity change from 0 to 1024 [ 378.454581][T28121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.475214][T28127] team0: entered promiscuous mode [ 378.480346][T28127] team_slave_0: entered promiscuous mode [ 378.486252][T28127] team_slave_1: entered promiscuous mode [ 378.575167][T28121] vhci_hcd: invalid port number 97 [ 378.580387][T28121] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 378.601704][T28127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 378.623175][T26917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.641436][T28127] team0: left promiscuous mode [ 378.646351][T28127] team_slave_0: left promiscuous mode [ 378.651933][T28127] team_slave_1: left promiscuous mode [ 378.985677][T28147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8262'. [ 379.710425][T28152] loop1: detected capacity change from 0 to 1024 [ 379.732880][T28152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.753012][T28152] vhci_hcd: invalid port number 97 [ 379.758528][T28152] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 379.787514][T26497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.844720][T28164] x_tables: duplicate underflow at hook 1 [ 379.907368][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8273'. [ 380.207580][T28212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8288'. [ 380.608160][T28249] x_tables: duplicate underflow at hook 2 [ 380.690122][T28260] loop0: detected capacity change from 0 to 512 [ 380.836744][T28278] loop1: detected capacity change from 0 to 1024 [ 380.855301][T28280] x_tables: duplicate underflow at hook 2 [ 380.863321][T28278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.914135][T28278] vhci_hcd: invalid port number 97 [ 380.919363][T28278] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 380.952845][T28295] x_tables: duplicate underflow at hook 1 [ 380.969300][ T29] audit: type=1326 audit(17737.952:40627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 380.993238][ T29] audit: type=1326 audit(17737.952:40628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 381.016532][ T29] audit: type=1326 audit(17737.952:40629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 381.040289][ T29] audit: type=1326 audit(17737.952:40630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 381.065111][ T29] audit: type=1326 audit(17737.952:40631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 381.088428][ T29] audit: type=1326 audit(17737.952:40632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 381.112315][ T29] audit: type=1326 audit(17737.952:40633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 381.136014][ T29] audit: type=1326 audit(17737.952:40634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.0.8318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f008e987b99 code=0x7ffc0000 [ 381.162440][T26497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.589080][T28324] x_tables: duplicate underflow at hook 2 [ 381.616352][T28326] tap0: tun_chr_ioctl cmd 1074025677 [ 381.622144][T28326] tap0: linktype set to 774 [ 381.776216][T28332] bond0: (slave bond_slave_0): Releasing backup interface [ 381.813957][T28336] tipc: Enabling of bearer rejected, failed to enable media [ 381.838791][T28338] netlink: 'syz.4.8335': attribute type 27 has an invalid length. [ 381.886568][T28341] netlink: 'syz.3.8336': attribute type 32 has an invalid length. [ 382.035710][T28352] x_tables: duplicate underflow at hook 2 [ 382.163205][T28364] __nla_validate_parse: 5 callbacks suppressed [ 382.163222][T28364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8346'. [ 382.214828][T28369] netlink: 'syz.0.8348': attribute type 27 has an invalid length. [ 382.245256][T28368] netlink: 'syz.4.8347': attribute type 27 has an invalid length. [ 382.291624][T28371] tipc: Started in network mode [ 382.296557][T28371] tipc: Node identity total_si, cluster identity 4711 [ 382.303467][T28371] tipc: Enabling of bearer rejected, failed to enable media [ 382.416117][T28396] ================================================================== [ 382.424241][T28396] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 382.431393][T28396] [ 382.433729][T28396] write to 0xffff888237c1ffa0 of 8 bytes by interrupt on cpu 0: [ 382.441549][T28396] hrtimer_interrupt+0x18c/0x7b0 [ 382.445915][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 382.445931][ T29] audit: type=1400 audit(17739.402:40678): avc: denied { watch } for pid=28394 comm="syz.0.8358" path="/root/syzkaller.iaXzZi/113/file1/file1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 382.446498][T28396] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 382.483323][T28396] sysvec_apic_timer_interrupt+0x32/0x80 [ 382.488982][T28396] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.495004][T28396] __sanitizer_cov_trace_pc+0x2f/0x70 [ 382.500432][T28396] pie_calculate_probability+0x20/0x530 [ 382.506026][T28396] fq_pie_timer+0xec/0x1c0 [ 382.510478][T28396] call_timer_fn+0x3a/0x300 [ 382.515005][T28396] __run_timer_base+0x417/0x640 [ 382.519897][T28396] run_timer_softirq+0x31/0x70 [ 382.524802][T28396] handle_softirqs+0xc3/0x280 [ 382.529599][T28396] irq_exit_rcu+0x3e/0x90 [ 382.533974][T28396] sysvec_apic_timer_interrupt+0x73/0x80 [ 382.539634][T28396] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.545645][T28396] should_fail_ex+0xa9/0x230 [ 382.550268][T28396] should_fail+0xb/0x10 [ 382.554458][T28396] get_futex_key+0xf4/0x710 [ 382.559095][T28396] futex_wait_setup+0x61/0x1d0 [ 382.563903][T28396] __futex_wait+0x97/0x290 [ 382.568358][T28396] futex_wait+0x99/0x1c0 [ 382.572654][T28396] do_futex+0x276/0x370 [ 382.576966][T28396] __se_sys_futex+0x25d/0x3a0 [ 382.581675][T28396] __x64_sys_futex+0x78/0x90 [ 382.586291][T28396] x64_sys_call+0x28c1/0x2d70 [ 382.591012][T28396] do_syscall_64+0xc9/0x1c0 [ 382.595544][T28396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.601478][T28396] [ 382.603812][T28396] read to 0xffff888237c1ffa0 of 8 bytes by task 28396 on cpu 1: [ 382.611460][T28396] print_cpu+0x2fb/0x670 [ 382.615725][T28396] timer_list_show+0x115/0x180 [ 382.620510][T28396] seq_read_iter+0x65b/0x940 [ 382.625124][T28396] proc_reg_read_iter+0x11e/0x190 [ 382.630204][T28396] copy_splice_read+0x3a4/0x5d0 [ 382.635089][T28396] splice_direct_to_actor+0x26c/0x670 [ 382.640510][T28396] do_splice_direct+0xd7/0x150 [ 382.645295][T28396] do_sendfile+0x3ab/0x950 [ 382.649755][T28396] __x64_sys_sendfile64+0x110/0x150 [ 382.654978][T28396] x64_sys_call+0x2c9f/0x2d70 [ 382.659674][T28396] do_syscall_64+0xc9/0x1c0 [ 382.664200][T28396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.670118][T28396] [ 382.672451][T28396] value changed: 0x00000059092135a2 -> 0x0000005909224712 [ 382.679569][T28396] [ 382.681952][T28396] Reported by Kernel Concurrency Sanitizer on: [ 382.688102][T28396] CPU: 1 PID: 28396 Comm: syz.0.8358 Tainted: G W 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 382.699835][T28396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 382.709898][T28396] ==================================================================