last executing test programs: 16.482776104s ago: executing program 2 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 14.388998682s ago: executing program 0 (id=586): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,po']) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f89) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000100)={'\x00', 0x891, 0x8000, 0x7b, 0x0, 0x4}) 10.460174321s ago: executing program 2 (id=588): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000040)={@remote, r9}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 10.443364072s ago: executing program 0 (id=591): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x3, 0x6, 0x6, 0x1ff, 0x0, 0x0, 0x0, 0x62c}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000440)={'\x00', 0x7f, 0x0, 0xf0d}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20080005) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x40) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) prctl$PR_SVE_GET_VL(0x33, 0x1e6b7) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r2, @ANYRESDEC], 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xae2, 0xfffffff9, 0x4, 0x7f}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x7, 0x0, &(0x7f0000000000)="c9f7b986f2ca3a", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000140)=ANY=[@ANYBLOB="e43f0201000f83000000000000000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002100), 0x0) 10.383714083s ago: executing program 0 (id=593): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@volatile={0x8, 0x0, 0x0, 0x9, 0x1}, @const={0x4, 0x0, 0x0, 0xa, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000080)=""/4096, 0x51, 0x1000, 0x1, 0xfff, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0xdf2}, 0x8) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x13}, 0x50) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r1, r2+10000000}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x42, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$eJzs3U9vG2kZAPBnJnY2abPrLHBYVmJ3xS5KIqjTbOhuhNACEoLTSoVyDyFxoyhOXMVO20QVpOIDICEESFzgxAWJD4CE+hEQUiW4I0CgClo4cCgMsj1OQ2qnierYJfn9pDfzzj8/z2tnxvPOjDwBnFtvRcR0RGRZls1ERCmfnuYl9tqludyjh3eWmyWJLLv2tySSfFrntV7Khxfz1cYi4utfjfhW8nTc+s7u+lK1WtnKx2cbG8njLNu9tLaxtFpZrWzOvxLvLby/cGXhcl/aORkRH3z5zz/83s+/8sGvP3PrD4t/nf52u4FtB9vRT+2mF1vvRUchIrZOI9iQFFotbLsy5FwAADha83j/IxHxyYiYiVKMtI7mWmaGmxkAAADQL9kXJuJx0r7+BwAAAJxNaURMxNXRcn6/70Skabncvof3Y3EhrdbqjU9npf3zBZNRTK+vVSuX83sHJqOYNMfn8ntsO+PvHhqfj4hXI+IHpfHWeHm5Vl0Z6pkPAAAAOD8utvr8Sdrp//+z1O7/AwAAAGfM5LATAAAAAE6d/j8AAACcffr/AAAAcKZd/fDDZsk6z79eubmzvV67eWmlUl8vb2wvl5drWzfKq7Xa6oNCRG3jWa9XrdVufDY2t2/PNir1xmx9Z3dxo7a92Vhc+59HYAMAAAAD9Oqb936fRMTe58bTiMiSA/OKEdnIwYULg88POD3pSRb+0+nlAQzeyLATAIbGIT2cX8VhJwAM3bP2Az1v3vlN/3MBAABOx9TH96//t0rTaD4v6b7K3uCyA05Tfv0/6bGtA2eY6/9wfnXO+7sPAM6f4lFHADoFcOalx9jUn//6f5adKCkAAKDvJlolSct5P2Ai0rRcjni59ViAJ2cFX4mI35WKL11fq1bmWlMSpwcAAAAAAAAAAAAAAAAAAAAAAAAA4JiyLImsh/bTAGO013wAAADg/0NE+pckf/7XVOmdicPnB0aTf5Vaw4i49ZNrP7q91GhszTWn/31/euPH+fR3B376AgAAAOii00/v9OMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePbyz3CmDjPvgSxEx2S1+IcZaw7EoRsSFfyRROLBeEhEjfYi/dzciXusWP2mmFZN5FofjpxExPuT4F/sQH86ze839zxe7bX9pvNUadt/+Cnl5Xu3930jX+J3930iP/d/L3V4wfXrS6/d/Odsz/t2I1wvd9z+d+En+JhQOxG6Wt4/Zxm9+Y3e317zsZxFTXb9/kv1lmrXZpHBjtr6ze2ltY2m1slrZnJ+fe2/h/YUrC5dnr69VK/nfrjG+/4lf/eeo9l/oEX/ySfu7vv/vHLP9/75/++FH29XioVnF+GmWTb/d/f/vtXb8zy8eit/57vtU/nE3x6c69b12/aA3fvHbN948ov0rPdo/9oz2Tx+z/TNf++4fj7koADAA9Z3d9aVqtbJ1skoSsfccq6v0qozHC5FGnyvjMcCgS3HUMp2D2AHk85081AvxEZy4Mrx9EgAAcDqS/YP+YWcCAAAAAAAAAAAAAAAAAAAA51d9Z/TI3yc75s/RPcraui5zOObecJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wYAAP//CIzIxg==") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x22be836, 0x0) bind$qrtr(r6, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000001c0), 0x0, &(0x7f0000008640), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0x1}}, 0x40) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 10.273790936s ago: executing program 2 (id=595): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0xfd, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x7b7c, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000002b200000140012800b0001006272696467650000040002800500110007000000052010000600000099a4d041a9038deb12991e9509197c9aacdaf8d8e6186de0e9a825886ca5f55f4a31fc49336c1a36b3547fd93109e326c580a282d95c05acd036a68a6b17615043225be80f13dac9b83d1b1d973b1b2a8d54b9b808b0a29127e3bf2ce2299a23f3b8eaf61e7b178c9b989099fff74cc21ff65308b7635b8e3049c30bab6c8ad4f3d1b2ce9fc688577426ca202890af72af5f0b5c745e53146d3544de93fcb1a23bfadf51b9e9bee6d537cf526f498f48050fb41704c1587ad16f0e215c356a3efd6a510b"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYBLOB='&'], 0x10) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r7, 0xa777, 0x0) accept$inet(r7, 0x0, &(0x7f00000002c0)) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x3d9, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r10) mq_open(0x0, 0x1, 0x11, &(0x7f0000000180)={0xffff, 0x7f, 0x9, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x560a, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000580)={0x6, 0x0, [{0x3, 0x3, 0x4, [0x4, 0x1, 0x2, 0x2, 0xcf, 0x1, 0x7, 0x6]}, {0x5, 0x8, 0x1ff, [0x6, 0x630d9ee0, 0x7fffffff, 0xfffffffd, 0x401, 0x80000001, 0xa, 0x102]}, {0x3, 0x6, 0x10000, [0x0, 0xfc000000, 0x4, 0xd, 0x0, 0x9, 0xe59, 0xa]}, {0x1, 0xffff, 0x10001, [0x9, 0x7, 0x80000000, 0x9, 0x9, 0x6, 0x1, 0x7]}, {0x0, 0x0, 0x2, [0x5, 0x51f27d9a, 0x9, 0x4, 0x7, 0x0, 0x70, 0x8]}, {0x5, 0xfffffe00, 0x7fffffff, [0x80000000, 0x81, 0x2, 0x3, 0x2, 0x1, 0x3, 0x97]}]}) 9.634209431s ago: executing program 4 (id=596): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_matches\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x7, 0xae, 0xfffffffd, 0x2, 0x5, 0xfff}}, {0x4}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x4044050}, 0x40050) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xc0}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x24000040) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000110001080000", @ANYBLOB="000000000000000004002b"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800010, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x30, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x4, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef28, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x0, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0xdae, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x2, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x480}}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.21256714s ago: executing program 4 (id=598): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8994, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x28, 0x0, 0x10, 0xffeff024}]}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108010, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, 0x0, 0x8040) close(r7) prctl$PR_SET_FP_MODE(0x42, 0x2) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 8.316838981s ago: executing program 4 (id=599): mkdirat(0xffffffffffffff9c, 0x0, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@uid_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='nomand'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0x0, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0x8, 0x0, 0x313, 0x1, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40c00) close(0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000002010102000000000000000002000009100002800c000280050001001100fdff0c0019800800020008000000d63d837f4b7aab07c22e78d4536eccba85114cec404a0c36fe68835d812144ffbbbd521cd8edc8dae3f1ddf5be9c6182cce4e57da9356f6780c62b642aca3f0295ac960ff85c06a16f16917c921d98b597d5c9bf5500a9a02473fb0cb47e5e155525a9fb618521c90ad9967452bf69ec122e38338e5fe782cd06cba97ecf2ab51501e6de"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") 4.179466205s ago: executing program 3 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 4.170757005s ago: executing program 0 (id=614): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000880)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000240)={r4, 0x9, 0x10, 0x10001, 0x2008000}, &(0x7f0000000000)=0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c00)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x40000) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r9 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r9, 0xc000) fallocate(r9, 0x0, 0x0, 0x8800000) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000040)) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) sendmsg$SOCK_DESTROY(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec000000150001002dbd70f1d82e83ae0e5ccdd86600fbdbdf252205d8000100ca5581c79c94c9ce86c946269c9a09000000d45fec6896291654b62091f1ece32ea885023bd6341be86902eaf98f6bffed097e491d424591551fb6bbaaa750e6a4a14922fe35b28d180b03712a82ee52dbabad8ce231402e078a5eba1181210336f4e7dadbedfdb85cb8ee56b1b438c87cc70428090000002041967e485138728af4c8fe0c3a402f67dc0c71199c3b3625cac9e31172a1cfbec4083013cf8eef365d3a8ac54c73044c8bb4f2b7aba4530d000000000000003c1771006c9cfd578d788309e6cf48a5974ba1cc533120bfaf296f87df484b21fbb9ba890000838e7145b39b4e4869d5f4792298f7231c3d2541db5b89e3456b11c2b4d96c37"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000100)={0xc000000b}) signalfd4(r9, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 4.000858759s ago: executing program 4 (id=603): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x1000, 0x200, 0xb9, 0x8}, 0x10) mkdir(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x100000000}, 0x0, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @ib={0x1b, 0x9, 0x4, {"755e4353c75c8a3599e31f0f7e882950"}, 0x1000000000008, 0x456d, 0xfcb4}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x400c0c0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000540)={r9, 0x1, 0xff80}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002ba17000fbdbdf25030000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r13], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r12, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x804c044}, 0x881) 3.027676051s ago: executing program 2 (id=604): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x3, 0x6, 0x6, 0x1ff, 0x0, 0x0, 0x0, 0x62c}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000440)={'\x00', 0x7f, 0x0, 0xf0d}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20080005) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x40) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) prctl$PR_SVE_GET_VL(0x33, 0x1e6b7) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8=r2, @ANYRESDEC], 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xae2, 0xfffffff9, 0x4, 0x7f}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x7, 0x0, &(0x7f0000000000)="c9f7b986f2ca3a", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000140)=ANY=[@ANYBLOB="e43f0201000f83000000000000000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002100), 0x0) 2.984189292s ago: executing program 1 (id=605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10044}, 0x4000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x522, &(0x7f0000000240)="$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") mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', 0x0, 0x81, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4004802) shutdown(r12, 0x1) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, &(0x7f0000000080)={r14, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x8, 0x806}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x24, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) 2.966386392s ago: executing program 4 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ea8d0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000000048106d80eccbe8f556becacd126c3d7d759afd3a959f9054fe27648a2ae28071ca1b693e49e21c2b4018424570deb25d51ec063d8ccaf323f21db296034e5884c23ed6e3f87989dd23a49f2b3def4c55024b41bdc33eea9cefef9dc747d9dd8d28eedd80e78cf7a3da7d04f4e0f1331db94097d8b45171752ef21740b64903ee55274decd396b37ccdd2400ea771dd589d72da6e8ed605af67c97d8ca0209b6e65de92af6e17a051b13b383bd952b1a8c3551dff314a1d265309f587b5f8b94adf69dc009230fcfe39b5ab7d039b17bb594081976623d586beadb510ed4e844d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)="e4", 0x1, 0xc00) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlockall(0x7) munlockall() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v'], 0x20}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) 1.886560827s ago: executing program 3 (id=608): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}, 0x4000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000001ac0)={0x0, 'batadv0\x00', {0x7}, 0x802}) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x105}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x200}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x2, 0x5) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x13}, @TCA_PIE_ALPHA={0x8, 0x4, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) signalfd(r4, &(0x7f0000000100)={[0x4e]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) 1.589324704s ago: executing program 1 (id=609): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000040)={@remote, r9}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 1.588731134s ago: executing program 2 (id=611): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8994, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x28, 0x0, 0x10, 0xffeff024}]}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108010, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, 0x0, 0x8040) close(r7) prctl$PR_SET_FP_MODE(0x42, 0x2) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 1.588112634s ago: executing program 3 (id=612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x77288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDMKTONE(r8, 0x4b30, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20000040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0xffffffffffffff5a, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1.131671124s ago: executing program 3 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.072286395s ago: executing program 0 (id=615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x10000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001200100000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fe80000000000000000000000000000f000000003200000000000000000000000000000000000000feffffffffffffff0100000000000000030000000000000000000000000000000000000000000000fcffffffffffffff04000000000000000900000000000000ffffffffffffff7f000840000000000009000000000000009202000000000000001087ac000000000000000000000000000000000a0004002c00000000000000600002006362632863616d656c6c696129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b0000", @ANYRES64=r2, @ANYBLOB="0b606b140a09757b0b518a40d3b70899f7a924ba638128fc337d6558880615da52217b673a06ed1d1db5020f839a26b64a9772fd676bb3979f043ce0254149ca6000f1fd1bad3531548b2da6afc4d2", @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYRES8=r0], 0x19c}}, 0x4c050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xb0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x71}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket(0x2d, 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x11d, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r5) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x604cc40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r9) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10000, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x5c, 0x4, 0x7, 0x7fffffff}, {0x6, 0x6, 0x3, 0x7fff0000}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x929}]}, 0x24}, 0x1, 0x0, 0x0, 0x40018c5}, 0x20000010) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x20044000) 1.032870576s ago: executing program 1 (id=616): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000280)='./file0\x00', 0xb4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x189800, 0x131) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000100)) keyctl$negate(0xd, 0x0, 0x9, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r9, 0x0, 0x0}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) r13 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00') preadv(r13, 0x0, 0x0, 0x9, 0x8) r14 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000060000000300000004000000d0000100", @ANYRES32=r9, @ANYBLOB="0100000000000000000000000007010000000000", @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="0200000001000000000000000200"/24, @ANYRES32=r14, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r15}, 0x38) 1.031730356s ago: executing program 3 (id=617): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x400, 0x2, 0x9, 0x8001}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) faccessat2(0xffffffffffffffff, 0x0, 0x46, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r6, 0x7, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xd0}, 0x38) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x4, &(0x7f0000000180)=[{0xfff, 0x3, 0x81}, {0x9, 0x0, 0xd7, 0x4e}, {0xc63, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x2, 0x8}]}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0xc090) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 766.437753ms ago: executing program 1 (id=618): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006c000100279d7000ffdbdf250000", @ANYRES32=0x0, @ANYBLOB="fc0000339c280000140045"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0xa3010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000429bd7000fddbdf250a20f3048000000212000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "f4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x110, 0xac7}], 0x10, 0x500}}], 0x2, 0x40058) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}], {0x14}}, 0xd0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8010000", @ANYRES16, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x20004000}, 0x44000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) 478.148249ms ago: executing program 4 (id=619): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0xff, 0x9, 0x9, 0x0, 0x100000000004, 0x68ad3ee8825332e5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x56, 0xe75}, 0x10444, 0x4, 0x4a38, 0x4, 0xa61, 0x1000, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2003, r2, 0x1) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, r4, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824", 0x2c}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e412", 0x28}], 0x2}, 0x40000) ppoll(0x0, 0x0, &(0x7f0000001240), &(0x7f0000001280), 0x8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r6, &(0x7f0000000240)="6bb41d3f", 0x4, 0xc0400c0, 0x0, 0x0) sendto(r6, &(0x7f0000001e00)="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", 0xca9, 0x2000c010, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000080)='cpu~-0\xd9\xc8\xb9\xdbJ`g\x9b\xe8\xa2\n\x00|') sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x2204c080) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 436.77094ms ago: executing program 3 (id=620): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x50000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @remote}, &(0x7f0000000100)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@remote, @empty, r2}, 0xc) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x10000000}, 0x1c) r3 = dup(r0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000500)={&(0x7f0000000480)=']^!\\{\x00', &(0x7f00000004c0)='!pu\t&0&&\t', 0x9f}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000020200000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26be2bd8, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x100000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) connect$inet(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000340)='!pu\t&0&&\t') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0xa0005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x6, 0xffffffffffffffff, 0xf8eb80e89ad42c01) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x21, &(0x7f0000000300)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000140001032dbd7000fedbdf250c000000c5bc2ef002641a0e31b7d636f67219e1d721430f8dea6267f3e80404a4f875aaf1786e3d09d7d98a4e3727ac91f33abba840"], 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20008080) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4600c081}, 0x4000) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000000700020073797a3000000000130007407e7ecbb34d3ffd146df2e60c54defd0014000580080002400000000108000240000000000900010073797a310000000000000000000000000000000200000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x44000004) 420.38421ms ago: executing program 1 (id=621): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}, 0x4000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000001ac0)={0x0, 'batadv0\x00', {0x7}, 0x802}) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x105}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x200}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x2, 0x5) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x13}, @TCA_PIE_ALPHA={0x8, 0x4, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) signalfd(r4, &(0x7f0000000100)={[0x4e]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) 403.881181ms ago: executing program 0 (id=622): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x4060, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setgroups(0x24, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0xfe, 0x2, 0x200}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f00000004c0)={[{@grpid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@bh}, {@journal_checksum}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x81}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/warn_count', 0x181080, 0x30) io_submit(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x4000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x5, 0x705, 0x1, 0x80000001]}, &(0x7f0000000340)=0x54) getpgid(0xffffffffffffffff) r2 = dup(0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="d9588002", 0x4}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002680)={r4, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000440)={r4, 0x0, 0x54d}, 0x8) timerfd_settime(r1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x4000, &(0x7f0000000000), 0xc1, 0x7eb, &(0x7f0000001fc0)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x2004000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10.38019ms ago: executing program 1 (id=623): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = io_uring_setup(0x3450, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r6, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2b, 0x5a, 0x0, 0x0, 0x0, 0xa, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x5ad8}, 0x106200, 0x1000, 0x6, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) r8 = dup(r0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) io_uring_setup(0x1b77, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) 0s ago: executing program 2 (id=624): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) close(0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0xd7, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) r1 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000000) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @multicast1}, 0xc) syz_emit_ethernet(0x2a, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, 0x0, 0x0) getpgid(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$security_capability(r0, &(0x7f00000006c0), &(0x7f00000005c0)=@v3={0x3000000, [{0x3374, 0x6}, {0x2, 0x59ab}], r6}, 0x18, 0x2) gettid() syz_emit_ethernet(0xc2, &(0x7f0000000400)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1, {[@end, @end]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "f3a8158d6d54b6b7112c8fd4cf25640fe1c3358efc3132bc396d53a720c1c132", "087b052307ebaf31655328c967f626fdb1edb9cae417df1b09c8bf7992599bfda8f8a7e6132e2fbb996f9a83d1b720a2", "45de7917db88d48e3ac3ed0e86e5ea1ce17bd189c6815f49ba679c03", {"eb5deef50731ff6d7bbb9ec294e612c9", "e97f55a20a02ae02d0fe6c4c92ed355e"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ed to initialize the IGMP autojoin socket (err -2) [ 114.120657][ T4604] syz.2.172 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 114.132032][ T4604] CPU: 0 UID: 0 PID: 4604 Comm: syz.2.172 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.132069][ T4604] Tainted: [W]=WARN [ 114.132076][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.132096][ T4604] Call Trace: [ 114.132105][ T4604] [ 114.132116][ T4604] __dump_stack+0x1d/0x30 [ 114.132202][ T4604] dump_stack_lvl+0x95/0xd0 [ 114.132233][ T4604] dump_stack+0x15/0x1b [ 114.132253][ T4604] dump_header+0x80/0x240 [ 114.132315][ T4604] oom_kill_process+0x295/0x350 [ 114.132350][ T4604] out_of_memory+0x981/0xbc0 [ 114.132420][ T4604] try_charge_memcg+0x621/0xa00 [ 114.132460][ T4604] ? xas_load+0x3ee/0x430 [ 114.132509][ T4604] charge_memcg+0x6d/0x120 [ 114.132549][ T4604] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 114.132584][ T4604] swap_cache_alloc_folio+0x47b/0x5e0 [ 114.132688][ T4604] swap_cluster_readahead+0x3d2/0x460 [ 114.132741][ T4604] swapin_readahead+0xd8/0x8a0 [ 114.132778][ T4604] ? _raw_spin_unlock+0x9/0x30 [ 114.132902][ T4604] ? swap_put_entries_cluster+0x49c/0x4c0 [ 114.132948][ T4604] ? __entry_text_end+0x11228/0x102179 [ 114.132990][ T4604] ? __rcu_read_unlock+0x4e/0x70 [ 114.133024][ T4604] ? swap_cache_get_folio+0x1f7/0x200 [ 114.133054][ T4604] do_swap_page+0x2a2/0x1ec0 [ 114.133112][ T4604] ? __css_rstat_updated+0xbb/0x280 [ 114.133214][ T4604] ? __rcu_read_lock+0x36/0x50 [ 114.133237][ T4604] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 114.133267][ T4604] handle_mm_fault+0xb3c/0x2da0 [ 114.133327][ T4604] do_user_addr_fault+0x634/0x1060 [ 114.133368][ T4604] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 114.133522][ T4604] ? trace_page_fault_user+0x1f/0xa0 [ 114.133624][ T4604] exc_page_fault+0x62/0xa0 [ 114.133649][ T4604] asm_exc_page_fault+0x26/0x30 [ 114.133670][ T4604] RIP: 0033:0x7f42ebc937e4 [ 114.133686][ T4604] Code: 48 8b 14 25 d0 ff ff ff 48 85 d2 0f 85 4f ff ff ff 0f 1f 44 00 00 80 3d e1 ae 28 00 00 0f 85 db 00 00 00 48 c7 c0 e0 ff ff ff <64> 48 8b 28 48 85 ed 0f 84 0f 02 00 00 31 c0 ba 01 00 00 00 f0 0f [ 114.133754][ T4604] RSP: 002b:00007ffdee576b00 EFLAGS: 00010246 [ 114.133771][ T4604] RAX: ffffffffffffffe0 RBX: 0000000000000110 RCX: 0000000000000000 [ 114.133857][ T4604] RDX: 000055556d4fae90 RSI: 0000000000000010 RDI: 0000000000000011 [ 114.133872][ T4604] RBP: 0000000000000010 R08: 00000000ffffffff R09: 0000000000000000 [ 114.133886][ T4604] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdee576cb0 [ 114.133902][ T4604] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 114.133957][ T4604] [ 114.134001][ T4604] memory: usage 307200kB, limit 307200kB, failcnt 7915 [ 114.390577][ T4604] memory+swap: usage 328540kB, limit 9007199254740988kB, failcnt 0 [ 114.399223][ T4604] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 114.406545][ T4604] Memory cgroup stats for /syz2: [ 114.406779][ T4604] cache 24576 [ 114.415051][ T4604] rss 4096 [ 114.418132][ T4604] shmem 0 [ 114.421086][ T4604] mapped_file 0 [ 114.424558][ T4604] dirty 0 [ 114.428102][ T4604] writeback 4096 [ 114.431673][ T4604] workingset_refault_anon 2013 [ 114.436466][ T4604] workingset_refault_file 269 [ 114.441168][ T4604] swap 21852160 [ 114.444643][ T4604] swapcached 30625792 [ 114.448822][ T4604] pgpgin 51094 [ 114.452215][ T4604] pgpgout 51086 [ 114.456310][ T4604] pgfault 60442 [ 114.459795][ T4604] pgmajfault 295 [ 114.463361][ T4604] inactive_anon 0 [ 114.467050][ T4604] active_anon 0 [ 114.470526][ T4604] inactive_file 12288 [ 114.474640][ T4604] active_file 8192 [ 114.478406][ T4604] unevictable 0 [ 114.481893][ T4604] hierarchical_memory_limit 314572800 [ 114.487885][ T4604] hierarchical_memsw_limit 9223372036854771712 [ 114.494120][ T4604] total_cache 24576 [ 114.498066][ T4604] total_rss 4096 [ 114.501692][ T4604] total_shmem 0 [ 114.505164][ T4604] total_mapped_file 0 [ 114.509496][ T4604] total_dirty 0 [ 114.512983][ T4604] total_writeback 4096 [ 114.517660][ T4604] total_workingset_refault_anon 2013 [ 114.522986][ T4604] total_workingset_refault_file 269 [ 114.528250][ T4604] total_swap 21852160 [ 114.532250][ T4604] total_swapcached 30625792 [ 114.536785][ T4604] total_pgpgin 51094 [ 114.540768][ T4604] total_pgpgout 51086 [ 114.544783][ T4604] total_pgfault 60442 [ 114.549327][ T4604] total_pgmajfault 295 [ 114.553411][ T4604] total_inactive_anon 0 [ 114.557688][ T4604] total_active_anon 0 [ 114.561753][ T4604] total_inactive_file 12288 [ 114.566279][ T4604] total_active_file 8192 [ 114.570537][ T4604] total_unevictable 0 [ 114.574533][ T4604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7,pid=3530,uid=0 [ 114.589620][ T4604] Memory cgroup out of memory: Killed process 3530 (syz.2.7) total-vm:121272kB, anon-rss:1244kB, file-rss:33092kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 114.619226][ T4604] syz.2.172 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 114.629910][ T4604] CPU: 0 UID: 0 PID: 4604 Comm: syz.2.172 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 114.629950][ T4604] Tainted: [W]=WARN [ 114.629958][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.630100][ T4604] Call Trace: [ 114.630107][ T4604] [ 114.630192][ T4604] __dump_stack+0x1d/0x30 [ 114.630278][ T4604] dump_stack_lvl+0x95/0xd0 [ 114.630343][ T4604] dump_stack+0x15/0x1b [ 114.630363][ T4604] dump_header+0x80/0x240 [ 114.630391][ T4604] oom_kill_process+0x295/0x350 [ 114.630555][ T4604] out_of_memory+0x981/0xbc0 [ 114.630591][ T4604] try_charge_memcg+0x621/0xa00 [ 114.630633][ T4604] ? xas_load+0x3ee/0x430 [ 114.630718][ T4604] charge_memcg+0x6d/0x120 [ 114.630750][ T4604] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 114.630795][ T4604] swap_cache_alloc_folio+0x47b/0x5e0 [ 114.630844][ T4604] swap_cluster_readahead+0x3d2/0x460 [ 114.630923][ T4604] swapin_readahead+0xd8/0x8a0 [ 114.630959][ T4604] ? _raw_spin_unlock+0x9/0x30 [ 114.631056][ T4604] ? swap_put_entries_cluster+0x49c/0x4c0 [ 114.631143][ T4604] ? __entry_text_end+0x11228/0x102179 [ 114.631176][ T4604] ? __rcu_read_unlock+0x4e/0x70 [ 114.631209][ T4604] ? swap_cache_get_folio+0x1f7/0x200 [ 114.631258][ T4604] do_swap_page+0x2a2/0x1ec0 [ 114.631293][ T4604] ? __css_rstat_updated+0xbb/0x280 [ 114.631321][ T4604] ? __rcu_read_lock+0x36/0x50 [ 114.631450][ T4604] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 114.631478][ T4604] handle_mm_fault+0xb3c/0x2da0 [ 114.631516][ T4604] do_user_addr_fault+0x634/0x1060 [ 114.631691][ T4604] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 114.631723][ T4604] ? trace_page_fault_user+0x1f/0xa0 [ 114.631790][ T4604] exc_page_fault+0x62/0xa0 [ 114.631823][ T4604] asm_exc_page_fault+0x26/0x30 [ 114.631850][ T4604] RIP: 0033:0x7f42ebc937e4 [ 114.631871][ T4604] Code: 48 8b 14 25 d0 ff ff ff 48 85 d2 0f 85 4f ff ff ff 0f 1f 44 00 00 80 3d e1 ae 28 00 00 0f 85 db 00 00 00 48 c7 c0 e0 ff ff ff <64> 48 8b 28 48 85 ed 0f 84 0f 02 00 00 31 c0 ba 01 00 00 00 f0 0f [ 114.631915][ T4604] RSP: 002b:00007ffdee576b00 EFLAGS: 00010246 [ 114.631931][ T4604] RAX: ffffffffffffffe0 RBX: 0000000000000110 RCX: 0000000000000000 [ 114.631946][ T4604] RDX: 000055556d4fae90 RSI: 0000000000000010 RDI: 0000000000000011 [ 114.631962][ T4604] RBP: 0000000000000010 R08: 00000000ffffffff R09: 0000000000000000 [ 114.631979][ T4604] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdee576cb0 [ 114.632002][ T4604] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 114.632028][ T4604] [ 114.632038][ T4604] memory: usage 307200kB, limit 307200kB, failcnt 7932 [ 114.668992][ T4626] netlink: 236 bytes leftover after parsing attributes in process `syz.3.174'. [ 114.672582][ T4604] memory+swap: usage 316864kB, limit 9007199254740988kB, failcnt 0 [ 114.672603][ T4604] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 114.672618][ T4604] Memory cgroup stats for /syz2: [ 114.672846][ T4604] cache 24576 [ 114.672857][ T4604] rss 4096 [ 114.672884][ T4604] shmem 0 [ 114.672893][ T4604] mapped_file 0 [ 114.672902][ T4604] dirty 0 [ 114.672910][ T4604] writeback 4096 [ 114.672920][ T4604] workingset_refault_anon 2013 [ 114.672946][ T4604] workingset_refault_file 269 [ 114.672954][ T4604] swap 9895936 [ 114.672963][ T4604] swapcached 30625792 [ 114.672973][ T4604] pgpgin 51094 [ 114.672981][ T4604] pgpgout 51086 [ 114.672990][ T4604] pgfault 60442 [ 114.672999][ T4604] pgmajfault 295 [ 114.673007][ T4604] inactive_anon 0 [ 114.673014][ T4604] active_anon 0 [ 114.673020][ T4604] inactive_file 4096 [ 114.673092][ T4604] active_file 16384 [ 114.673102][ T4604] unevictable 0 [ 114.673111][ T4604] hierarchical_memory_limit 314572800 [ 114.673123][ T4604] hierarchical_memsw_limit 9223372036854771712 [ 114.673135][ T4604] total_cache 24576 [ 114.673143][ T4604] total_rss 4096 [ 114.673152][ T4604] total_shmem 0 [ 114.673161][ T4604] total_mapped_file 0 [ 114.673170][ T4604] total_dirty 0 [ 114.673254][ T4604] total_writeback 4096 [ 114.673265][ T4604] total_workingset_refault_anon 2013 [ 114.673276][ T4604] total_workingset_refault_file 269 [ 114.673287][ T4604] total_swap 9895936 [ 114.673308][ T4604] total_swapcached 30625792 [ 114.673317][ T4604] total_pgpgin 51094 [ 114.673333][ T4604] total_pgpgout 51086 [ 114.673343][ T4604] total_pgfault 60442 [ 114.673352][ T4604] total_pgmajfault 295 [ 114.673362][ T4604] total_inactive_anon 0 [ 114.673372][ T4604] total_active_anon 0 [ 114.673381][ T4604] total_inactive_file 4096 [ 114.673389][ T4604] total_active_file 16384 [ 114.673399][ T4604] total_unevictable 0 [ 114.673409][ T4604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.172,pid=4604,uid=0 [ 114.673604][ T4604] Memory cgroup out of memory: Killed process 4604 (syz.2.172) total-vm:100584kB, anon-rss:1240kB, file-rss:26184kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 115.245553][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.325227][ T4631] loop1: detected capacity change from 0 to 512 [ 115.356855][ T4631] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 115.375600][ T4570] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 115.392695][ T4631] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.411489][ T4631] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 115.436173][ T4631] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 115.474131][ T4631] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.177: Failed to acquire dquot type 1 [ 115.502288][ T4631] loop1: lost filesystem error report for type 5 error -5 [ 115.502794][ T4631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.177: bg 0: block 40: padding at end of block bitmap is not set [ 115.510063][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 115.510087][ C1] EXT4-fs (loop1): initial error at time 115: ext4_acquire_dquot:7041 [ 115.510107][ C1] EXT4-fs (loop1): last error at time 115: ext4_acquire_dquot:7041 [ 115.592281][ T4631] loop1: lost filesystem error report for type 5 error -117 [ 115.592602][ T4631] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 115.629436][ T4637] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 115.641844][ T4637] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.641844][ T4637] [ 115.651660][ T4637] EXT4-fs (loop3): Total free blocks count 0 [ 115.657699][ T4637] EXT4-fs (loop3): Free/Dirty block details [ 115.663621][ T4637] EXT4-fs (loop3): free_blocks=0 [ 115.668668][ T4637] EXT4-fs (loop3): dirty_blocks=1892 [ 115.674042][ T4637] EXT4-fs (loop3): Block reservation details [ 115.680114][ T4637] EXT4-fs (loop3): i_reserved_data_blocks=1892 [ 115.782710][ T4631] loop1: lost filesystem error report for type 5 error -117 [ 115.783038][ T4631] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.177: data will be lost [ 115.802514][ T4631] EXT4-fs (loop1): 1 truncate cleaned up [ 115.848410][ T4613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.174'. [ 115.858205][ T4631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.873919][ T4613] veth0_macvtap: Caught tx_queue_len zero misconfig [ 115.884008][ T4631] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.177: corrupted xattr block 31: invalid header [ 115.914929][ T4631] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 115.924251][ T4631] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.177: corrupted xattr block 31: invalid header [ 115.939227][ T4631] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 115.995320][ T4631] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.177: bad symlink. [ 116.036421][ T28] audit: type=1400 audit(115.946:574): avc: denied { read } for pid=4630 comm="syz.1.177" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.129965][ T3297] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 116.158520][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.302243][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.322210][ T4649] loop4: detected capacity change from 0 to 512 [ 116.388246][ T4651] loop1: detected capacity change from 0 to 1024 [ 116.390946][ T4649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.420577][ T4645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.181'. [ 116.442058][ T4645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.181'. [ 116.573623][ T4651] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 116.591093][ T4658] Failed to initialize the IGMP autojoin socket (err -2) [ 116.611845][ T4651] futex_wake_op: syz.1.184 tries to shift op by 144; fix this program [ 116.746514][ T4651] futex_wake_op: syz.1.184 tries to shift op by 144; fix this program [ 117.542469][ T28] audit: type=1400 audit(117.496:575): avc: denied { write } for pid=4648 comm="syz.4.183" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.625218][ T4676] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 117.667598][ T28] audit: type=1400 audit(117.496:576): avc: denied { append } for pid=4648 comm="syz.4.183" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.700773][ T28] audit: type=1400 audit(117.526:577): avc: denied { ioctl } for pid=4648 comm="syz.4.183" path="socket:[7331]" dev="sockfs" ino=7331 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.788030][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.801653][ T4681] tipc: Started in network mode [ 117.808606][ T4681] tipc: Node identity 4, cluster identity 4711 [ 117.815367][ T4681] tipc: Node number set to 4 [ 117.825933][ T4676] wireguard: wg2: Could not create IPv4 socket [ 118.107152][ T4698] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 118.141798][ T4698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.191'. [ 118.183976][ T28] audit: type=1400 audit(118.136:578): avc: denied { map } for pid=4689 comm="syz.2.190" path="socket:[7386]" dev="sockfs" ino=7386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.218803][ T4699] loop1: detected capacity change from 0 to 512 [ 118.233705][ T4699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.247681][ T28] audit: type=1400 audit(118.136:579): avc: denied { read accept } for pid=4689 comm="syz.2.190" path="socket:[7386]" dev="sockfs" ino=7386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.322446][ T23] lo speed is unknown, defaulting to 1000 [ 118.338214][ T4699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 118.357518][ T4699] System zones: 1-12 [ 118.366424][ T4699] EXT4-fs (loop1): 1 truncate cleaned up [ 118.374495][ T4699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.487821][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 118.528092][ T4692] netlink: 27 bytes leftover after parsing attributes in process `syz.1.191'. [ 118.642886][ T28] audit: type=1326 audit(118.566:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.2.192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f42ebcc6bd7 code=0x0 [ 118.688862][ T4704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 119.463047][ T4709] loop4: detected capacity change from 0 to 512 [ 119.544585][ T4709] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 119.563069][ T4709] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.188: invalid block [ 119.579725][ T4709] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 119.586273][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 119.604303][ C1] EXT4-fs (loop4): initial error at time 119: ext4_get_branch:178: inode 13: block 1024 [ 119.616342][ C1] EXT4-fs (loop4): last error at time 119: ext4_get_branch:178: inode 13: block 1024 [ 119.636917][ T4709] EXT4-fs (loop4): 1 truncate cleaned up [ 119.672838][ T4709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.776550][ T28] audit: type=1400 audit(119.156:581): avc: denied { block_suspend } for pid=4705 comm="syz.4.188" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.031050][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.091321][ T28] audit: type=1400 audit(120.026:582): avc: denied { write } for pid=4703 comm="syz.0.193" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 120.192010][ T4713] loop3: detected capacity change from 0 to 128 [ 120.216354][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 120.284802][ T4713] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.314797][ T28] audit: type=1400 audit(120.126:583): avc: denied { bind } for pid=4703 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.391231][ T4713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.448597][ T28] audit: type=1400 audit(120.236:584): avc: denied { accept } for pid=4703 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.669097][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 120.850175][ T4713] process 'syz.3.195' launched './file0' with NULL argv: empty string added [ 120.876602][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.928977][ T28] audit: type=1400 audit(120.886:585): avc: denied { execute_no_trans } for pid=4712 comm="syz.3.195" path="/39/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.696821][ T4728] loop1: detected capacity change from 0 to 512 [ 121.798221][ T4728] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 121.823870][ T4728] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.194: invalid block [ 121.838041][ T4728] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 121.845475][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 121.863502][ C1] EXT4-fs (loop1): initial error at time 121: ext4_get_branch:178: inode 13: block 1024 [ 121.876406][ C1] EXT4-fs (loop1): last error at time 121: ext4_get_branch:178: inode 13: block 1024 [ 121.907384][ T4728] EXT4-fs (loop1): 1 truncate cleaned up [ 121.942462][ T4728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.388883][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 122.425947][ T4738] loop4: detected capacity change from 0 to 512 [ 122.467625][ T4739] tipc: Started in network mode [ 122.541926][ T28] audit: type=1400 audit(122.496:586): avc: denied { getopt } for pid=4735 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.602907][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 122.616111][ T4739] tipc: Node identity 7, cluster identity 4711 [ 122.662212][ T4739] tipc: Node number set to 7 [ 122.754272][ T4744] netlink: 10 bytes leftover after parsing attributes in process `syz.4.198'. [ 122.938578][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.026733][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 123.037869][ T4752] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 123.047960][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 123.167872][ T4758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4758 comm=syz.0.204 [ 123.270356][ T4757] loop1: detected capacity change from 0 to 512 [ 123.286062][ T4757] EXT4-fs: Ignoring removed bh option [ 123.521217][ T4761] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 123.529327][ T4761] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.583271][ T4757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.883635][ T4769] loop3: detected capacity change from 0 to 512 [ 123.897567][ T28] audit: type=1400 audit(123.856:587): avc: denied { create } for pid=4770 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.930004][ T4772] veth0_to_team: entered promiscuous mode [ 123.942879][ T4769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.950568][ T28] audit: type=1400 audit(123.876:588): avc: denied { write } for pid=4770 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.976897][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.006435][ T4769] EXT4-fs (loop3): 1 truncate cleaned up [ 124.017729][ T4769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.097286][ T4769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 125.004622][ T28] audit: type=1400 audit(124.046:589): avc: denied { write } for pid=4768 comm="syz.3.207" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.044488][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.549704][ T4782] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -2 [ 125.796666][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.832824][ T4788] loop4: detected capacity change from 0 to 512 [ 125.857000][ T4788] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.212: iget: bad i_size value: 38620345925642 [ 125.892767][ T4788] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.894271][ T4788] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.212: couldn't read orphan inode 15 (err -117) [ 125.895590][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 125.921755][ C1] EXT4-fs (loop4): initial error at time 125: ext4_orphan_get:1399: inode 15 [ 125.930578][ C1] EXT4-fs (loop4): last error at time 125: ext4_orphan_get:1399: inode 15 [ 125.939899][ T4788] loop4: lost filesystem error report for type 5 error -117 [ 125.940453][ T4788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.986230][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 126.003807][ T4798] tipc: Cannot configure node identity twice [ 126.035117][ T4797] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 126.048039][ T4790] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 126.089841][ T4797] veth0_macvtap: left promiscuous mode [ 126.097842][ T4800] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 126.224514][ T4800] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 126.244544][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 126.295530][ T28] audit: type=1400 audit(126.252:590): avc: denied { write } for pid=4799 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.317748][ T4800] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 126.387468][ T4800] bond1 (unregistering): Released all slaves [ 126.393425][ T4811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 126.416308][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.444973][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 126.477190][ T4808] loop3: detected capacity change from 0 to 512 [ 126.495165][ T4808] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 126.517743][ T4808] EXT4-fs: error: could not find journal device path [ 127.032367][ T4823] loop1: detected capacity change from 0 to 512 [ 127.094823][ T4823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.367523][ T4823] EXT4-fs (loop1): 1 truncate cleaned up [ 127.383280][ T4823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.493912][ T28] audit: type=1400 audit(127.452:591): avc: denied { write } for pid=4822 comm="syz.1.232" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.522484][ T4829] __nla_validate_parse: 1 callbacks suppressed [ 127.522500][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 127.669237][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.863232][ T4844] loop1: detected capacity change from 0 to 512 [ 127.887915][ T4844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.908762][ T4844] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.226: bad orphan inode 131083 [ 127.929243][ T4844] loop1: lost filesystem error report for type 5 error -117 [ 127.935552][ T4844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.092770][ T28] audit: type=1400 audit(128.012:592): avc: denied { ioctl } for pid=4843 comm="syz.1.226" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.179891][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.284624][ T4847] loop1: detected capacity change from 0 to 1024 [ 128.332285][ T4847] EXT4-fs: Ignoring removed orlov option [ 128.378293][ T4847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.392450][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 128.422781][ T4841] loop3: detected capacity change from 0 to 512 [ 128.429297][ T4851] tipc: Cannot configure node identity twice [ 128.513627][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 128.535921][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 128.654945][ T4859] loop4: detected capacity change from 0 to 256 [ 128.682159][ T28] audit: type=1400 audit(128.642:593): avc: denied { setattr } for pid=4846 comm="syz.1.227" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.709029][ T4841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.795031][ T4856] netlink: 4172 bytes leftover after parsing attributes in process `syz.2.230'. [ 128.808579][ T4862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 128.851501][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.907831][ T4842] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.225: corrupted xattr block 33: invalid ea_ino [ 128.926958][ T4842] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 128.933854][ T28] audit: type=1400 audit(128.892:594): avc: denied { map } for pid=4865 comm="syz.0.233" path="socket:[8566]" dev="sockfs" ino=8566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.944814][ T4842] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.225: corrupted xattr block 33: invalid ea_ino [ 129.019149][ T28] audit: type=1400 audit(128.892:595): avc: denied { read } for pid=4865 comm="syz.0.233" path="socket:[8566]" dev="sockfs" ino=8566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.091969][ T4871] loop1: detected capacity change from 0 to 512 [ 129.109113][ T4842] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 129.123829][ T4871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.153125][ T28] audit: type=1400 audit(129.112:596): avc: denied { read write } for pid=4872 comm="syz.4.236" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 129.161131][ T4842] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.225: corrupted xattr block 33: invalid ea_ino [ 129.187764][ T28] audit: type=1400 audit(129.112:597): avc: denied { open } for pid=4872 comm="syz.4.236" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 129.214544][ T28] audit: type=1400 audit(129.122:598): avc: denied { setattr } for pid=4840 comm="syz.3.225" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.249369][ T4871] EXT4-fs (loop1): 1 truncate cleaned up [ 129.249939][ T4871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.314526][ T28] audit: type=1400 audit(129.272:599): avc: denied { write } for pid=4870 comm="syz.1.234" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.318240][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 129.331036][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 129.373700][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.419234][ T4892] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 129.471965][ T4892] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 129.509896][ T4835] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 129.556372][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 129.567047][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.618346][ T4892] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 129.979928][ T4892] bond0 (unregistering): Released all slaves [ 131.173717][ T4911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 131.205873][ T4903] tipc: Started in network mode [ 131.223211][ T4903] tipc: Node identity 7, cluster identity 4711 [ 131.243668][ T4903] tipc: Node number set to 7 [ 131.312710][ T4905] loop4: detected capacity change from 0 to 512 [ 131.763717][ T4905] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.243: Unrecognised inode hash code 255 [ 131.900205][ T4905] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.243: Corrupt directory, running e2fsck is recommended [ 132.032703][ T4905] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 132.052945][ T4905] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.243: corrupted in-inode xattr: e_name out of bounds [ 132.103706][ T4905] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.104724][ T4905] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.243: couldn't read orphan inode 15 (err -117) [ 132.114294][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 132.114344][ C0] EXT4-fs (loop4): initial error at time 132: ext4_iget_extra_inode:5180: inode 15 [ 132.114689][ C0] EXT4-fs (loop4): last error at time 132: ext4_iget_extra_inode:5180: inode 15 [ 132.173365][ T4907] loop3: detected capacity change from 0 to 512 [ 132.256928][ T4905] loop4: lost filesystem error report for type 5 error -117 [ 132.262875][ T4905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.519606][ T4922] loop3: detected capacity change from 0 to 1024 [ 132.527826][ T4923] __nla_validate_parse: 1 callbacks suppressed [ 132.527839][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 132.546301][ T28] audit: type=1400 audit(132.492:600): avc: denied { ioctl } for pid=4921 comm="syz.1.256" path="socket:[8645]" dev="sockfs" ino=8645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.578301][ T4922] EXT4-fs: Ignoring removed orlov option [ 132.593223][ T4923] sch_tbf: burst 0 is lower than device macvlan0 mtu (1514) ! [ 132.618844][ T4922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.692365][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 132.713292][ T4923] ÿ: renamed from dummy0 (while UP) [ 132.727151][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 132.754841][ T4905] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.243: Unrecognised inode hash code 255 [ 132.809404][ T4924] loop1: detected capacity change from 0 to 1024 [ 132.819663][ T4905] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.243: Corrupt directory, running e2fsck is recommended [ 132.835210][ T4924] ext4: Unknown parameter 'subj_role' [ 132.916331][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.980064][ T28] audit: type=1400 audit(132.942:601): avc: denied { getopt } for pid=4928 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.022992][ T4918] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 133.040389][ T4931] batadv_slave_0: Caught tx_queue_len zero misconfig [ 133.064975][ T4905] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.243: Unrecognised inode hash code 255 [ 133.095580][ T4933] loop1: detected capacity change from 0 to 512 [ 133.107091][ T4905] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.243: Corrupt directory, running e2fsck is recommended [ 133.136465][ T4933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.162943][ T4905] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 4: comm syz.4.243: path /43/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 133.169642][ T4929] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 133.216634][ T4933] EXT4-fs (loop1): 1 truncate cleaned up [ 133.217164][ T4933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.251792][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 133.253467][ T4905] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.243: path /43/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 133.334918][ T4931] loop3: detected capacity change from 0 to 1024 [ 133.362300][ T28] audit: type=1400 audit(133.322:602): avc: denied { write } for pid=4932 comm="syz.1.248" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.397005][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 133.399213][ T4929] bond1: entered promiscuous mode [ 133.412923][ T4931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.412968][ T4929] bond1: entered allmulticast mode [ 133.437217][ T28] audit: type=1400 audit(133.402:603): avc: denied { write } for pid=4930 comm="syz.3.246" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.462697][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.489157][ T4929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.491052][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.578529][ T4949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 133.597423][ T4955] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 133.644015][ T4931] netlink: 4172 bytes leftover after parsing attributes in process `syz.3.246'. [ 133.698657][ T4961] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 133.755379][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 133.765411][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.787255][ T4955] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 133.861921][ T4955] bond1 (unregistering): Released all slaves [ 134.120660][ T4974] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 134.177788][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 134.177806][ T28] audit: type=1326 audit(134.142:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.212213][ T4972] loop4: detected capacity change from 0 to 512 [ 134.220323][ T28] audit: type=1326 audit(134.142:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.251124][ T28] audit: type=1326 audit(134.172:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.276305][ T28] audit: type=1326 audit(134.172:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.301214][ T28] audit: type=1326 audit(134.172:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.326195][ T28] audit: type=1326 audit(134.182:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8fef02d68e code=0x7ffc0000 [ 134.354930][ T28] audit: type=1326 audit(134.182:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.382632][ T28] audit: type=1326 audit(134.182:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.407647][ T28] audit: type=1326 audit(134.212:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.432454][ T28] audit: type=1326 audit(134.212:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4967 comm="syz.1.255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 134.515585][ T4974] veth0_macvtap: left promiscuous mode [ 134.669027][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 135.760136][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 135.810475][ T5005] loop1: detected capacity change from 0 to 1024 [ 135.853007][ T5005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.848174][ T5023] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 137.132960][ T5026] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 137.158714][ T5029] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 137.171605][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.549224][ T5029] bond1 (unregistering): Released all slaves [ 138.032333][ T5036] loop1: detected capacity change from 0 to 512 [ 138.187728][ T5036] EXT4-fs: Ignoring removed bh option [ 138.394576][ T5036] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 138.598891][ T5036] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.280: corrupted in-inode xattr: e_value size too large [ 138.923193][ T5036] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.925505][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 138.941979][ C1] EXT4-fs (loop1): initial error at time 138: ext4_iget_extra_inode:5180: inode 15 [ 138.951796][ C1] EXT4-fs (loop1): last error at time 138: ext4_iget_extra_inode:5180: inode 15 [ 138.965376][ T5051] __nla_validate_parse: 3 callbacks suppressed [ 138.990914][ T5051] netlink: 10 bytes leftover after parsing attributes in process `syz.0.274'. [ 139.015321][ T5036] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.280: couldn't read orphan inode 15 (err -117) [ 139.076210][ T5036] loop1: lost filesystem error report for type 5 error -117 [ 139.120174][ T5036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.736001][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.906871][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 139.984964][ T5069] loop1: detected capacity change from 0 to 512 [ 140.035959][ T5069] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 140.118583][ T5069] EXT4-fs: error: could not find journal device path [ 140.267760][ T5072] bridge0: port 3(team0) entered disabled state [ 140.275591][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.285517][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.363041][ T5072] bridge0: entered allmulticast mode [ 140.449070][ T5076] team0: left allmulticast mode [ 140.457205][ T5076] team_slave_0: left allmulticast mode [ 140.463676][ T5076] team_slave_1: left allmulticast mode [ 140.487634][ T5076] bond0: left allmulticast mode [ 140.493454][ T5076] bond_slave_0: left allmulticast mode [ 140.526351][ T5076] bond_slave_1: left allmulticast mode [ 140.535469][ T5076] team0: left promiscuous mode [ 140.581804][ T5076] team_slave_0: left promiscuous mode [ 140.605587][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.713494][ T5076] team_slave_1: left promiscuous mode [ 140.776636][ T5076] bond0: left promiscuous mode [ 140.796854][ T5076] bond_slave_0: left promiscuous mode [ 140.859508][ T5076] bond_slave_1: left promiscuous mode [ 140.900889][ T5074] netlink: 4172 bytes leftover after parsing attributes in process `syz.0.281'. [ 140.970382][ T5076] bridge0: port 3(team0) entered disabled state [ 141.069409][ T5076] bridge_slave_1: left allmulticast mode [ 141.267343][ T5076] bridge_slave_1: left promiscuous mode [ 141.315796][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.373653][ T5076] bridge_slave_0: left allmulticast mode [ 141.392923][ T5076] bridge_slave_0: left promiscuous mode [ 141.412509][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.593785][ T5091] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 143.294348][ T5099] loop1: detected capacity change from 0 to 512 [ 143.310497][ T5099] EXT4-fs: Ignoring removed orlov option [ 143.337805][ T5099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.377999][ T5099] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.285: invalid indirect mapped block 32768 (level 2) [ 143.393870][ T5099] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 143.395845][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 143.413883][ C0] EXT4-fs (loop1): initial error at time 143: ext4_free_branches:1023: inode 16 [ 143.425365][ C0] EXT4-fs (loop1): last error at time 143: ext4_free_branches:1023: inode 16 [ 143.569488][ T5099] EXT4-fs (loop1): 1 orphan inode deleted [ 143.579986][ T5099] EXT4-fs (loop1): 1 truncate cleaned up [ 143.589590][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.790500][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.967528][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.050031][ T5091] bond0: entered promiscuous mode [ 144.064014][ T5091] bond0: entered allmulticast mode [ 144.074691][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.692623][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.723961][ T5111] loop4: detected capacity change from 0 to 1024 [ 144.742032][ T5113] loop1: detected capacity change from 0 to 512 [ 144.786859][ T5114] veth0_to_team: entered promiscuous mode [ 145.798327][ T5111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.021374][ T5128] netlink: 10 bytes leftover after parsing attributes in process `syz.1.289'. [ 148.211862][ T5132] loop1: detected capacity change from 0 to 512 [ 148.975120][ T5105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 149.230267][ T5140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 149.277933][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.437543][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 149.561342][ T5144] netlink: 10 bytes leftover after parsing attributes in process `syz.2.308'. [ 149.996713][ T5149] batadv_slave_0: Caught tx_queue_len zero misconfig [ 150.027731][ T5149] loop4: detected capacity change from 0 to 1024 [ 150.059412][ T5149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 150.075142][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 150.075199][ T28] audit: type=1400 audit(150.032:707): avc: denied { write } for pid=5148 comm="syz.4.297" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.134868][ T5149] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.297'. [ 150.179076][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.682642][ T5165] loop3: detected capacity change from 0 to 512 [ 150.700462][ T28] audit: type=1400 audit(150.662:708): avc: denied { bind } for pid=5160 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.772288][ T5165] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.298: Unrecognised inode hash code 255 [ 150.803420][ T5165] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.298: Corrupt directory, running e2fsck is recommended [ 150.834822][ T5165] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 150.843926][ T5165] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.298: corrupted in-inode xattr: e_name out of bounds [ 150.861478][ T5165] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.861923][ T5165] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.298: couldn't read orphan inode 15 (err -117) [ 150.871300][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 150.871341][ C0] EXT4-fs (loop3): initial error at time 150: ext4_iget_extra_inode:5180: inode 15 [ 150.871379][ C0] EXT4-fs (loop3): last error at time 150: ext4_iget_extra_inode:5180: inode 15 [ 151.311034][ T5161] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 151.402443][ T5165] loop3: lost filesystem error report for type 5 error -117 [ 151.408926][ T5165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.634685][ T5178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 151.698638][ T5178] netlink: 'syz.0.303': attribute type 5 has an invalid length. [ 151.743382][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 151.900835][ T5183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.910041][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.920691][ T5183] loop4: detected capacity change from 0 to 256 [ 151.922836][ T5161] bond1: entered promiscuous mode [ 151.942546][ T5161] bond1: entered allmulticast mode [ 152.517185][ T5185] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 152.621990][ T5157] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.298: Unrecognised inode hash code 255 [ 152.671892][ T5183] FAT-fs (loop4): data area starts beyond volume (32 > 0) [ 152.694679][ T5183] FAT-fs (loop4): Can't find a valid FAT filesystem [ 152.739305][ T5161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.751090][ T5157] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.298: Corrupt directory, running e2fsck is recommended [ 152.911027][ T5185] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 152.941070][ T5157] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.298: Unrecognised inode hash code 255 [ 152.965728][ T5157] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.298: Corrupt directory, running e2fsck is recommended [ 152.981915][ T5157] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.298: path /56/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 153.011388][ T5157] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.298: path /56/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 153.159973][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.379513][ T5197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.306'. [ 153.421832][ T5200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.309'. [ 154.085573][ T5211] netlink: 'syz.4.311': attribute type 19 has an invalid length. [ 154.094554][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 154.603436][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 154.978028][ T5211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5211 comm=syz.4.311 [ 154.991078][ T5211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=5211 comm=syz.4.311 [ 155.020407][ T28] audit: type=1400 audit(154.982:709): avc: denied { bind } for pid=5208 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.183030][ T5223] loop3: detected capacity change from 0 to 1024 [ 155.214642][ T5223] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.271628][ T5223] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 155.316220][ T5223] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 155.364192][ T5223] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 155.402189][ T5223] EXT4-fs (loop3): journal inode is deleted [ 155.530779][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'. [ 155.578531][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'. [ 155.668277][ T5232] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'. [ 156.324321][ T5240] loop4: detected capacity change from 0 to 512 [ 156.435053][ T5240] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.318: corrupted xattr block 95: invalid header [ 156.476979][ T5240] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.484048][ T5240] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.318: bg 0: block 7: invalid block bitmap [ 156.494288][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 156.494317][ C0] EXT4-fs (loop4): initial error at time 156: ext4_expand_extra_isize_ea:2810: inode 11 [ 156.494345][ C0] EXT4-fs (loop4): last error at time 156: ext4_expand_extra_isize_ea:2810: inode 11 [ 156.540409][ T5240] loop4: lost filesystem error report for type 5 error -117 [ 156.542987][ T5240] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 156.561251][ T5240] loop4: lost filesystem error report for type 5 error -117 [ 156.564609][ T5240] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.318: corrupted xattr block 95: invalid header [ 156.599929][ T5240] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.603839][ T5240] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 156.638079][ T5240] EXT4-fs (loop4): 1 orphan inode deleted [ 156.666581][ T5240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.724786][ T5240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'. [ 157.035305][ T5243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=5243 comm=syz.2.317 [ 157.219433][ T5216] loop3: detected capacity change from 0 to 512 [ 157.371335][ T5216] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.314: corrupted in-inode xattr: invalid ea_ino [ 157.460740][ T5216] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.464651][ T5216] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.314: couldn't read orphan inode 15 (err -117) [ 157.474280][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 157.474308][ C0] EXT4-fs (loop3): initial error at time 157: ext4_iget_extra_inode:5180: inode 15 [ 157.474530][ C0] EXT4-fs (loop3): last error at time 157: ext4_iget_extra_inode:5180: inode 15 [ 157.685408][ T5216] loop3: lost filesystem error report for type 5 error -117 [ 157.704110][ T5216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.867660][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.925980][ T5259] loop4: detected capacity change from 0 to 512 [ 157.943633][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.052514][ T5267] netlink: 60 bytes leftover after parsing attributes in process `syz.3.325'. [ 158.152216][ T5272] netlink: 10 bytes leftover after parsing attributes in process `syz.4.322'. [ 158.201137][ T5256] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 158.604087][ T28] audit: type=1326 audit(158.562:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 158.674963][ T28] audit: type=1326 audit(158.602:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 158.706409][ T28] audit: type=1326 audit(158.602:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 158.748550][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.764048][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.768540][ T5256] bond1: entered promiscuous mode [ 158.770005][ T28] audit: type=1326 audit(158.602:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 158.813828][ T5256] bond1: entered allmulticast mode [ 158.845342][ T5256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.027712][ T28] audit: type=1326 audit(158.612:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe91a1ed68e code=0x7ffc0000 [ 159.054484][ T28] audit: type=1326 audit(158.612:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 159.130851][ T28] audit: type=1326 audit(158.612:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 159.468878][ T28] audit: type=1326 audit(158.612:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 159.544928][ T28] audit: type=1326 audit(158.612:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 159.615061][ T28] audit: type=1326 audit(158.612:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 160.331020][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 160.340990][ T5342] netlink: 'syz.2.329': attribute type 21 has an invalid length. [ 160.878472][ T5347] loop3: detected capacity change from 0 to 512 [ 160.911770][ T5347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.002301][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 161.080139][ T5365] netlink: 104 bytes leftover after parsing attributes in process `syz.4.334'. [ 161.138833][ T5350] bridge_slave_0: left allmulticast mode [ 161.144744][ T5350] bridge_slave_0: left promiscuous mode [ 161.151384][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.174662][ T5350] bridge_slave_1: left allmulticast mode [ 161.181823][ T5350] bridge_slave_1: left promiscuous mode [ 161.188783][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.214591][ T5350] bond0: (slave bond_slave_0): Releasing backup interface [ 161.283467][ T5350] bond0: (slave bond_slave_1): Releasing backup interface [ 161.489055][ T5350] team0: Port device team_slave_0 removed [ 161.590053][ T5350] team0: Port device team_slave_1 removed [ 161.631973][ T5350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.640211][ T5350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.679320][ T5350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.700408][ T5350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.777620][ T5350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.800186][ T5356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 161.815580][ T5356] netlink: 7 bytes leftover after parsing attributes in process `syz.2.333'. [ 161.837355][ T5362] veth0_to_team: entered promiscuous mode [ 161.876877][ T5361] gtp0: entered promiscuous mode [ 162.007704][ T5358] syz.4.334 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 162.027865][ T5358] CPU: 1 UID: 0 PID: 5358 Comm: syz.4.334 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 162.027999][ T5358] Tainted: [W]=WARN [ 162.028010][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.028043][ T5358] Call Trace: [ 162.028053][ T5358] [ 162.028063][ T5358] __dump_stack+0x1d/0x30 [ 162.028092][ T5358] dump_stack_lvl+0x95/0xd0 [ 162.028112][ T5358] dump_stack+0x15/0x1b [ 162.028131][ T5358] dump_header+0x80/0x240 [ 162.028249][ T5358] oom_kill_process+0x295/0x350 [ 162.028283][ T5358] out_of_memory+0x981/0xbc0 [ 162.028318][ T5358] try_charge_memcg+0x621/0xa00 [ 162.028372][ T5358] __memcg_kmem_charge_page+0x199/0x3a0 [ 162.028411][ T5358] __alloc_frozen_pages_noprof+0x18a/0x350 [ 162.028442][ T5358] alloc_pages_mpol+0xa9/0x1d0 [ 162.028472][ T5358] alloc_pages_noprof+0x8f/0x140 [ 162.028599][ T5358] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 162.028636][ T5358] __kvmalloc_node_noprof+0x3a0/0x590 [ 162.028680][ T5358] ? futex_hash_allocate+0x192/0x920 [ 162.028709][ T5358] ? futex_hash_allocate+0x192/0x920 [ 162.028734][ T5358] ? futex_hash_allocate+0x192/0x920 [ 162.028756][ T5358] futex_hash_allocate+0x192/0x920 [ 162.028788][ T5358] ? cap_task_prctl+0x13f/0x6b0 [ 162.028826][ T5358] futex_hash_prctl+0xd8/0xf0 [ 162.028850][ T5358] __se_sys_prctl+0x4f4/0x13b0 [ 162.028960][ T5358] __x64_sys_prctl+0x67/0x80 [ 162.028995][ T5358] x64_sys_call+0x2533/0x3020 [ 162.029035][ T5358] do_syscall_64+0x136/0x3c0 [ 162.029120][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.029150][ T5358] RIP: 0033:0x7fe91a22ce59 [ 162.029184][ T5358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.029209][ T5358] RSP: 002b:00007fe918c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 162.029298][ T5358] RAX: ffffffffffffffda RBX: 00007fe91a4a5fa0 RCX: 00007fe91a22ce59 [ 162.029318][ T5358] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 162.029336][ T5358] RBP: 00007fe91a2c2e6f R08: 0000000000000000 R09: 0000000000000000 [ 162.029354][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.029369][ T5358] R13: 00007fe91a4a6038 R14: 00007fe91a4a5fa0 R15: 00007ffe21349928 [ 162.029456][ T5358] [ 162.029549][ T5358] memory: usage 307200kB, limit 307200kB, failcnt 595 [ 162.266735][ T5358] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 162.301361][ T5358] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 162.453208][ T5358] Memory cgroup stats for /syz4: [ 162.476664][ T5358] cache 0 [ 162.533488][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.548420][ T5358] rss 0 [ 162.567512][ T5358] shmem 0 [ 162.583046][ T5358] mapped_file 0 [ 162.601529][ T5358] dirty 0 [ 162.621686][ T5358] writeback 0 [ 162.638080][ T5358] workingset_refault_anon 100 [ 162.664891][ T5358] workingset_refault_file 657 [ 162.694245][ T5358] swap 385024 [ 162.892781][ T5358] swapcached 802816 [ 162.905573][ T5358] pgpgin 66034 [ 162.912387][ T5358] pgpgout 66032 [ 162.922474][ T5358] pgfault 86141 [ 162.927708][ T5358] pgmajfault 77 [ 162.934747][ T5358] inactive_anon 0 [ 162.939175][ T5358] active_anon 8192 [ 162.943054][ T5358] inactive_file 0 [ 162.947124][ T5358] active_file 0 [ 162.950618][ T5358] unevictable 0 [ 162.954109][ T5358] hierarchical_memory_limit 314572800 [ 162.960724][ T5358] hierarchical_memsw_limit 9223372036854771712 [ 162.967161][ T5358] total_cache 0 [ 162.970766][ T5358] total_rss 0 [ 162.974086][ T5358] total_shmem 0 [ 162.977836][ T5358] total_mapped_file 0 [ 162.981929][ T5358] total_dirty 0 [ 162.985408][ T5358] total_writeback 0 [ 162.992276][ T5358] total_workingset_refault_anon 100 [ 162.997638][ T5358] total_workingset_refault_file 657 [ 163.002968][ T5358] total_swap 385024 [ 163.007170][ T5358] total_swapcached 802816 [ 163.011576][ T5358] total_pgpgin 66034 [ 163.015769][ T5358] total_pgpgout 66032 [ 163.019781][ T5358] total_pgfault 86141 [ 163.023798][ T5358] total_pgmajfault 77 [ 163.028114][ T5358] total_inactive_anon 0 [ 163.032308][ T5358] total_active_anon 8192 [ 163.036808][ T5358] total_inactive_file 0 [ 163.041040][ T5358] total_active_file 0 [ 163.045047][ T5358] total_unevictable 0 [ 163.049273][ T5358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.334,pid=5357,uid=0 [ 163.064070][ T5358] Memory cgroup out of memory: Killed process 5358 (syz.4.334) total-vm:96348kB, anon-rss:1244kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 163.387432][ T5388] loop4: detected capacity change from 0 to 512 [ 163.549180][ T5390] netlink: 104 bytes leftover after parsing attributes in process `syz.1.350'. [ 163.810438][ T5391] gtp1: entered promiscuous mode [ 164.180584][ T5397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.342'. [ 164.252332][ T5399] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 164.284972][ T5384] syz.4.340 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 164.355144][ T5384] CPU: 1 UID: 0 PID: 5384 Comm: syz.4.340 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 164.355266][ T5384] Tainted: [W]=WARN [ 164.355276][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.355294][ T5384] Call Trace: [ 164.355303][ T5384] [ 164.355314][ T5384] __dump_stack+0x1d/0x30 [ 164.355346][ T5384] dump_stack_lvl+0x95/0xd0 [ 164.355385][ T5384] dump_stack+0x15/0x1b [ 164.355404][ T5384] dump_header+0x80/0x240 [ 164.355429][ T5384] oom_kill_process+0x295/0x350 [ 164.355466][ T5384] out_of_memory+0x981/0xbc0 [ 164.355510][ T5384] try_charge_memcg+0x621/0xa00 [ 164.355546][ T5384] ? _raw_spin_unlock+0x9/0x30 [ 164.355634][ T5384] __memcg_kmem_charge_page+0x199/0x3a0 [ 164.355674][ T5384] __alloc_frozen_pages_noprof+0x18a/0x350 [ 164.355708][ T5384] alloc_pages_mpol+0xa9/0x1d0 [ 164.355807][ T5384] alloc_pages_noprof+0x8f/0x140 [ 164.355894][ T5384] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 164.355941][ T5384] __kvmalloc_node_noprof+0x3a0/0x590 [ 164.355975][ T5384] ? futex_hash_allocate+0x192/0x920 [ 164.356043][ T5384] ? futex_hash_allocate+0x192/0x920 [ 164.356067][ T5384] ? futex_hash_allocate+0x192/0x920 [ 164.356145][ T5384] futex_hash_allocate+0x192/0x920 [ 164.356200][ T5384] ? cap_task_prctl+0x13f/0x6b0 [ 164.356245][ T5384] futex_hash_prctl+0xd8/0xf0 [ 164.356269][ T5384] __se_sys_prctl+0x4f4/0x13b0 [ 164.356350][ T5384] __x64_sys_prctl+0x67/0x80 [ 164.356383][ T5384] x64_sys_call+0x2533/0x3020 [ 164.356415][ T5384] do_syscall_64+0x136/0x3c0 [ 164.356522][ T5384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.356551][ T5384] RIP: 0033:0x7fe91a22ce59 [ 164.356571][ T5384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.356605][ T5384] RSP: 002b:00007fe918c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 164.356633][ T5384] RAX: ffffffffffffffda RBX: 00007fe91a4a5fa0 RCX: 00007fe91a22ce59 [ 164.356655][ T5384] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 164.356673][ T5384] RBP: 00007fe91a2c2e6f R08: 0000000000000000 R09: 0000000000000000 [ 164.356688][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.356726][ T5384] R13: 00007fe91a4a6038 R14: 00007fe91a4a5fa0 R15: 00007ffe21349928 [ 164.356747][ T5384] [ 164.602784][ T5407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.648622][ T5384] memory: usage 2228kB, limit 307200kB, failcnt 949 [ 164.666670][ T5384] memory+swap: usage 2604kB, limit 9007199254740988kB, failcnt 0 [ 164.676420][ T5407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.681887][ T5399] bond1: entered promiscuous mode [ 164.695343][ T5399] bond1: entered allmulticast mode [ 164.696646][ T5384] kmem: usage 2044kB, limit 9007199254740988kB, failcnt 0 [ 164.734474][ T5384] Memory cgroup stats for /syz4: [ 164.734796][ T5384] cache 4096 [ 164.748179][ T5407] loop3: detected capacity change from 0 to 256 [ 164.766261][ T5384] rss 28672 [ 164.776849][ T5384] shmem 0 [ 164.783081][ T5384] mapped_file 4096 [ 164.832679][ T5384] dirty 0 [ 164.871184][ T5384] writeback 0 [ 164.892104][ T5407] FAT-fs (loop3): data area starts beyond volume (32 > 0) [ 164.949078][ T5399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.950855][ T5384] workingset_refault_anon 166 [ 164.960976][ T5407] FAT-fs (loop3): Can't find a valid FAT filesystem [ 164.986515][ T5384] workingset_refault_file 1676 [ 165.007113][ T5384] swap 364544 [ 165.036349][ T5384] swapcached 1224704 [ 165.042069][ T5457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 165.055687][ T5384] pgpgin 67265 [ 165.062571][ T5384] pgpgout 67256 [ 165.071845][ T5384] pgfault 86453 [ 165.112044][ T5384] pgmajfault 144 [ 165.119066][ T5384] inactive_anon 0 [ 165.127634][ T5384] active_anon 32768 [ 165.131746][ T5384] inactive_file 0 [ 165.137721][ T5384] active_file 4096 [ 165.145688][ T5384] unevictable 0 [ 165.167719][ T5384] hierarchical_memory_limit 314572800 [ 165.187962][ T5384] hierarchical_memsw_limit 9223372036854771712 [ 165.211494][ T5384] total_cache 4096 [ 165.222012][ T5384] total_rss 28672 [ 165.233976][ T5384] total_shmem 0 [ 165.244569][ T5384] total_mapped_file 4096 [ 165.258130][ T5384] total_dirty 0 [ 165.267009][ T5384] total_writeback 0 [ 165.270930][ T5384] total_workingset_refault_anon 166 [ 165.276674][ T5384] total_workingset_refault_file 1676 [ 165.286585][ T5384] total_swap 364544 [ 165.297128][ T5384] total_swapcached 1224704 [ 165.303470][ T5384] total_pgpgin 67265 [ 165.325494][ T5384] total_pgpgout 67256 [ 165.329538][ T5384] total_pgfault 86453 [ 165.333533][ T5384] total_pgmajfault 144 [ 165.343412][ T5384] total_inactive_anon 0 [ 165.347762][ T5384] total_active_anon 32768 [ 165.359285][ T5384] total_inactive_file 0 [ 165.367289][ T5384] total_active_file 4096 [ 165.375747][ T5384] total_unevictable 0 [ 165.383183][ T5384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.340,pid=5383,uid=0 [ 165.408273][ T5384] Memory cgroup out of memory: Killed process 5384 (syz.4.340) total-vm:96348kB, anon-rss:1344kB, file-rss:22516kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 165.465479][ T5469] loop4: detected capacity change from 0 to 512 [ 165.480421][ T5469] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.491517][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 165.515858][ T5469] __quota_error: 28 callbacks suppressed [ 165.515954][ T5469] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 165.546062][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'. [ 165.557415][ T5461] netlink: 'syz.0.345': attribute type 21 has an invalid length. [ 165.566204][ T5469] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 165.581567][ T5471] netlink: 'syz.1.347': attribute type 5 has an invalid length. [ 165.605339][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 165.625791][ T5469] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 165.645460][ T5469] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #14: comm syz.4.348: invalid orphan symlink nlink 1 [ 165.679755][ T5469] loop4: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 165.681316][ T5469] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.348: couldn't read orphan inode 14 (err -117) [ 165.690545][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 165.690563][ C1] EXT4-fs (loop4): last error at time 165: ext4_orphan_get:1399: inode 14 [ 165.754180][ T5469] loop4: lost filesystem error report for type 5 error -117 [ 165.756910][ T5469] EXT4-fs (loop4): 1 truncate cleaned up [ 165.774680][ T5469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.860989][ T28] audit: type=1400 audit(165.822:748): avc: denied { write } for pid=3303 comm="syz-executor" name="79" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 165.932770][ T28] audit: type=1400 audit(165.852:749): avc: denied { write } for pid=3303 comm="syz-executor" name="79" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 165.980377][ T28] audit: type=1400 audit(165.852:750): avc: denied { write } for pid=3303 comm="syz-executor" name="79" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 166.041384][ T28] audit: type=1400 audit(165.852:751): avc: denied { write } for pid=3303 comm="syz-executor" name="79" dev="tmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 166.558396][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.624386][ T5489] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 166.774056][ T5493] loop4: detected capacity change from 0 to 128 [ 166.791417][ T5493] vfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 166.938405][ T5474] bridge_slave_0: left allmulticast mode [ 166.945583][ T5474] bridge_slave_0: left promiscuous mode [ 166.953766][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.222819][ T5500] rdma_rxe: Failed to create IPv4 UDP tunnel [ 167.240046][ T5474] bridge_slave_1: left allmulticast mode [ 167.308018][ T5474] bridge_slave_1: left promiscuous mode [ 167.374349][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.110966][ T5474] bond0: (slave bond_slave_1): Releasing backup interface [ 168.210955][ T5474] team0: Port device team_slave_0 removed [ 168.286245][ T5474] team0: Port device team_slave_1 removed [ 168.324337][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.342537][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.389987][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.410025][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.464426][ T5474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.588771][ T5489] team0 (unregistering): Port device team_slave_0 removed [ 168.604828][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 168.695671][ T5489] team0 (unregistering): Port device team_slave_1 removed [ 168.714785][ T5489] team0 (unregistering): Port device bond0 removed [ 168.968564][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 169.063257][ T5516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 169.164661][ T5524] Failed to initialize the IGMP autojoin socket (err -2) [ 169.530013][ T5513] syz.0.361 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 169.563075][ T5513] CPU: 1 UID: 0 PID: 5513 Comm: syz.0.361 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 169.563163][ T5513] Tainted: [W]=WARN [ 169.563170][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.563183][ T5513] Call Trace: [ 169.563190][ T5513] [ 169.563199][ T5513] __dump_stack+0x1d/0x30 [ 169.563226][ T5513] dump_stack_lvl+0x95/0xd0 [ 169.563329][ T5513] dump_stack+0x15/0x1b [ 169.563379][ T5513] dump_header+0x80/0x240 [ 169.563408][ T5513] oom_kill_process+0x295/0x350 [ 169.563450][ T5513] out_of_memory+0x981/0xbc0 [ 169.563541][ T5513] try_charge_memcg+0x621/0xa00 [ 169.563606][ T5513] ? __rcu_read_unlock+0x4e/0x70 [ 169.563640][ T5513] __memcg_kmem_charge_page+0x199/0x3a0 [ 169.563681][ T5513] __alloc_frozen_pages_noprof+0x18a/0x350 [ 169.563723][ T5513] alloc_pages_mpol+0xa9/0x1d0 [ 169.563752][ T5513] alloc_pages_noprof+0x8f/0x140 [ 169.563790][ T5513] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 169.563906][ T5513] __kvmalloc_node_noprof+0x3a0/0x590 [ 169.563941][ T5513] ? futex_hash_allocate+0x192/0x920 [ 169.563963][ T5513] ? futex_hash_allocate+0x192/0x920 [ 169.564044][ T5513] ? futex_hash_allocate+0x192/0x920 [ 169.564075][ T5513] futex_hash_allocate+0x192/0x920 [ 169.564103][ T5513] ? cap_task_prctl+0x13f/0x6b0 [ 169.564146][ T5513] futex_hash_prctl+0xd8/0xf0 [ 169.564201][ T5513] __se_sys_prctl+0x4f4/0x13b0 [ 169.564235][ T5513] __x64_sys_prctl+0x67/0x80 [ 169.564268][ T5513] x64_sys_call+0x2533/0x3020 [ 169.564293][ T5513] do_syscall_64+0x136/0x3c0 [ 169.564404][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.564431][ T5513] RIP: 0033:0x7fa8fde7ce59 [ 169.564452][ T5513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.564551][ T5513] RSP: 002b:00007fa8fc8d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 169.564576][ T5513] RAX: ffffffffffffffda RBX: 00007fa8fe0f5fa0 RCX: 00007fa8fde7ce59 [ 169.564590][ T5513] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 169.564603][ T5513] RBP: 00007fa8fdf12e6f R08: 0000000000000000 R09: 0000000000000000 [ 169.564616][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.564704][ T5513] R13: 00007fa8fe0f6038 R14: 00007fa8fe0f5fa0 R15: 00007ffeea08cf98 [ 169.564724][ T5513] [ 169.678539][ T5513] memory: usage 188120kB, limit 307200kB, failcnt 379 [ 169.815736][ T28] audit: type=1400 audit(169.782:752): avc: denied { write } for pid=3296 comm="syz-executor" name="66" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 169.863932][ T5513] memory+swap: usage 123528kB, limit 9007199254740988kB, failcnt 0 [ 169.870108][ T28] audit: type=1400 audit(169.802:753): avc: denied { write } for pid=3296 comm="syz-executor" name="66" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 169.871977][ T5513] kmem: usage 110940kB, limit 9007199254740988kB, failcnt 0 [ 169.871993][ T5513] Memory cgroup stats for /syz0 [ 169.901599][ T28] audit: type=1400 audit(169.802:754): avc: denied { write } for pid=3296 comm="syz-executor" name="66" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 169.924264][ T5513] : [ 169.936688][ T28] audit: type=1400 audit(169.802:755): avc: denied { write } for pid=3296 comm="syz-executor" name="66" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 169.950700][ T5513] cache 524288 [ 169.975875][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 170.009420][ T5513] rss 4096 [ 170.012514][ T5513] shmem 0 [ 170.015464][ T5513] mapped_file 65536 [ 170.019292][ T5513] dirty 0 [ 170.022312][ T5513] writeback 0 [ 170.025624][ T5513] workingset_refault_anon 60 [ 170.030267][ T5513] workingset_refault_file 798 [ 170.034975][ T5513] swap 12140544 [ 170.038459][ T5513] swapcached 21360640 [ 170.042460][ T5513] pgpgin 119983 [ 170.046069][ T5513] pgpgout 119853 [ 170.049896][ T5513] pgfault 114794 [ 170.053464][ T5513] pgmajfault 46 [ 170.056945][ T5513] inactive_anon 0 [ 170.060602][ T5513] active_anon 8192 [ 170.064336][ T5513] inactive_file 0 [ 170.067987][ T5513] active_file 524288 [ 170.071896][ T5513] unevictable 0 [ 170.075362][ T5513] hierarchical_memory_limit 314572800 [ 170.080791][ T5513] hierarchical_memsw_limit 9223372036854771712 [ 170.087003][ T5513] total_cache 524288 [ 170.090951][ T5513] total_rss 4096 [ 170.094583][ T5513] total_shmem 0 [ 170.098063][ T5513] total_mapped_file 65536 [ 170.102408][ T5513] total_dirty 0 [ 170.105893][ T5513] total_writeback 0 [ 170.115142][ T5513] total_workingset_refault_anon 60 [ 170.122559][ T5513] total_workingset_refault_file 798 [ 170.128503][ T5513] total_swap 12140544 [ 170.156473][ T5513] total_swapcached 21360640 [ 170.161126][ T5513] total_pgpgin 119983 [ 170.165174][ T5513] total_pgpgout 119853 [ 170.174045][ T5513] total_pgfault 114794 [ 170.178241][ T5513] total_pgmajfault 46 [ 170.182483][ T5513] total_inactive_anon 0 [ 170.183645][ T5539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.369'. [ 170.186748][ T5513] total_active_anon 8192 [ 170.204339][ T5513] total_inactive_file 0 [ 170.208811][ T5513] total_active_file 524288 [ 170.213379][ T5513] total_unevictable 0 [ 170.217985][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 170.220471][ T5513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.361,pid=5511,uid=0 [ 170.250316][ T5513] Memory cgroup out of memory: Killed process 5511 (syz.0.361) total-vm:96348kB, anon-rss:1228kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 172.471967][ T5555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.372'. [ 172.963572][ T5555] netlink: 'syz.4.372': attribute type 5 has an invalid length. [ 173.064660][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 173.120833][ T5562] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 173.714715][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 173.781308][ T5568] bridge_slave_0: left allmulticast mode [ 173.787038][ T5568] bridge_slave_0: left promiscuous mode [ 173.792775][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.849169][ T5568] bridge_slave_1: left allmulticast mode [ 173.854911][ T5568] bridge_slave_1: left promiscuous mode [ 173.861108][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.901548][ T28] audit: type=1400 audit(173.862:756): avc: denied { write } for pid=5574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.959138][ T28] audit: type=1400 audit(173.902:757): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.118400][ T5568] team0: Port device team_slave_0 removed [ 174.256252][ T5568] team0: Port device team_slave_1 removed [ 174.317780][ T5568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.416142][ T5568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.518514][ T5568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.535589][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.544402][ T5568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.558014][ T5568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.203329][ T28] audit: type=1400 audit(175.162:758): avc: denied { write } for pid=5593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.261448][ T28] audit: type=1400 audit(175.212:759): avc: denied { write } for pid=5604 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.453917][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 176.695965][ T5611] tipc: Enabled bearer , priority 0 [ 176.706202][ T5633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.380'. [ 176.937925][ T5608] tipc: Disabling bearer [ 180.085020][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 180.320234][ T28] audit: type=1400 audit(180.282:760): avc: denied { write } for pid=5705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.374735][ T28] audit: type=1400 audit(180.322:761): avc: denied { write } for pid=5720 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.847900][ T5678] netlink: 10 bytes leftover after parsing attributes in process `syz.0.386'. [ 180.896097][ T5725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 180.906471][ T5728] bond0: left promiscuous mode [ 180.912001][ T5728] bond0: left allmulticast mode [ 180.941667][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.968417][ T5728] team0: Port device bond0 added [ 181.006135][ T5728] bridge0: port 1(team0) entered blocking state [ 181.013344][ T5728] bridge0: port 1(team0) entered disabled state [ 181.023496][ T5728] team0: entered allmulticast mode [ 181.029535][ T5728] bond0: entered allmulticast mode [ 181.063916][ T5728] team0: entered promiscuous mode [ 181.069566][ T5728] bond0: entered promiscuous mode [ 181.362059][ T5738] netlink: 14 bytes leftover after parsing attributes in process `syz.2.395'. [ 181.969218][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 182.014092][ T28] audit: type=1400 audit(181.972:762): avc: denied { write } for pid=5732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.100195][ T28] audit: type=1400 audit(182.062:763): avc: denied { write } for pid=5760 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.173681][ T5738] bond0 (unregistering): Released all slaves [ 182.817232][ T28] audit: type=1326 audit(182.772:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 182.896347][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 183.020962][ T5767] netlink: 'syz.4.397': attribute type 21 has an invalid length. [ 183.055336][ T28] audit: type=1326 audit(182.812:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 183.331243][ T28] audit: type=1326 audit(182.812:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 183.416906][ T28] audit: type=1326 audit(182.812:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 183.445376][ T28] audit: type=1326 audit(182.812:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa8fde7bcc7 code=0x7ffc0000 [ 183.486192][ T28] audit: type=1326 audit(182.842:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.0.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 183.797870][ T5795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 185.537110][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 186.781327][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 186.801388][ T5867] IPv6: addrconf: prefix option has invalid lifetime [ 186.809438][ T5867] IPv6: addrconf: prefix option has invalid lifetime [ 188.305608][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 188.305630][ T28] audit: type=1326 audit(188.242:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 188.720403][ T28] audit: type=1326 audit(188.242:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 188.745091][ T28] audit: type=1326 audit(188.242:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 188.769858][ T28] audit: type=1326 audit(188.242:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 188.794507][ T28] audit: type=1326 audit(188.242:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 189.003902][ T28] audit: type=1326 audit(188.242:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa8fde7bcc7 code=0x7ffc0000 [ 189.051806][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 189.070327][ T5875] netlink: 'syz.1.411': attribute type 21 has an invalid length. [ 189.078619][ T28] audit: type=1326 audit(188.242:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 189.134858][ T28] audit: type=1326 audit(188.242:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 189.186405][ T28] audit: type=1326 audit(188.242:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 189.233915][ T28] audit: type=1326 audit(188.242:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fa8fde7ce59 code=0x7ffc0000 [ 189.784716][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 190.605836][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 191.175129][ T5932] ªªªªªª: renamed from vlan0 (while UP) [ 191.344359][ T5934] xt_hashlimit: max too large, truncated to 1048576 [ 195.435218][ T5942] netlink: 'syz.4.430': attribute type 29 has an invalid length. [ 195.628254][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 196.482718][ T5960] xt_hashlimit: size too large, truncated to 1048576 [ 196.806715][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 196.806742][ T28] audit: type=1400 audit(196.772:805): avc: denied { shutdown } for pid=6013 comm="syz.2.441" lport=38563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.216087][ T5958] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.275362][ T5958] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.286229][ T5958] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.295298][ T5958] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.088918][ T28] audit: type=1400 audit(198.032:806): avc: denied { connect } for pid=6062 comm="syz.2.447" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.118391][ T28] audit: type=1400 audit(198.072:807): avc: denied { setopt } for pid=6062 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 198.143769][ T28] audit: type=1400 audit(198.072:808): avc: denied { name_connect } for pid=6062 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 199.179655][ T6074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.197998][ T6073] netlink: 'syz.1.450': attribute type 12 has an invalid length. [ 199.215269][ T6073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.450'. [ 199.267365][ T6074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.278052][ T28] audit: type=1326 audit(199.212:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.4.449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 199.500705][ T28] audit: type=1326 audit(199.212:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.4.449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 199.684526][ T28] audit: type=1326 audit(199.212:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.4.449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 199.734076][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 199.746060][ T28] audit: type=1326 audit(199.212:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.4.449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe91a22bcc7 code=0x7ffc0000 [ 199.779632][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 199.807353][ T28] audit: type=1326 audit(199.212:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.4.449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 199.859959][ T6074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.914400][ T28] audit: type=1326 audit(199.212:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.4.449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 199.978436][ T6074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.084726][ T120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.108096][ T120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.143313][ T120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.179631][ T120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.031776][ T6152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.042607][ T6152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.166270][ T6152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.176805][ T6152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.268164][ T6152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.281490][ T6152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.397769][ T417] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 201.424576][ T6152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.435679][ T6152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.467312][ T6156] xt_hashlimit: size too large, truncated to 1048576 [ 201.530028][ T417] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.538387][ T417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.579833][ T417] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.588090][ T417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.605479][ T417] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.614257][ T417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.630190][ T4195] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.647382][ T4195] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.920613][ T6177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.462'. [ 202.745156][ T6185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.462'. [ 202.890696][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 202.890712][ T28] audit: type=1326 audit(202.852:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 203.872021][ T28] audit: type=1326 audit(203.272:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 203.921361][ T28] audit: type=1326 audit(203.272:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 204.896662][ T28] audit: type=1326 audit(203.272:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe91a22bcc7 code=0x7ffc0000 [ 204.921503][ T28] audit: type=1326 audit(203.272:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 205.405506][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.899866][ T28] audit: type=1326 audit(203.272:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 205.924715][ T28] audit: type=1326 audit(203.272:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 206.281667][ T28] audit: type=1326 audit(203.272:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 206.457165][ T28] audit: type=1326 audit(203.272:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 206.617466][ T28] audit: type=1326 audit(203.272:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.4.463" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fe91a22ce59 code=0x7ffc0000 [ 207.947228][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 209.193650][ T6236] Failed to initialize the IGMP autojoin socket (err -2) [ 210.722117][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 210.722203][ T28] audit: type=1400 audit(210.682:860): avc: denied { write } for pid=3303 comm="syz-executor" name="103" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 210.804330][ T6287] netlink: 'syz.0.474': attribute type 12 has an invalid length. [ 210.817446][ T28] audit: type=1400 audit(210.682:861): avc: denied { write } for pid=3303 comm="syz-executor" name="103" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 210.843127][ T6287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.474'. [ 210.880023][ T28] audit: type=1400 audit(210.682:862): avc: denied { write } for pid=3303 comm="syz-executor" name="103" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 210.931789][ T28] audit: type=1400 audit(210.682:863): avc: denied { write } for pid=3303 comm="syz-executor" name="103" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 211.340431][ T6289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.454707][ T6289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.550405][ T6289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.636737][ T6289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.720151][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'. [ 211.766903][ T4198] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.783427][ T6303] netlink: 148 bytes leftover after parsing attributes in process `syz.2.477'. [ 211.795441][ T4198] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.821962][ T4198] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.884156][ T6303] netlink: 148 bytes leftover after parsing attributes in process `syz.2.477'. [ 211.901767][ T4198] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.921114][ T4198] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.945812][ T4198] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.954565][ T4198] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.962762][ T4198] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.977382][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 212.747639][ T28] audit: type=1400 audit(212.712:864): avc: denied { setattr } for pid=6323 comm="syz.3.486" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 213.565486][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.657881][ T6342] wireguard: wireguard0: Could not create IPv4 socket [ 213.665464][ T6342] A link change request failed with some changes committed already. Interface wireguard0 may have been left with an inconsistent configuration, please check. [ 214.177691][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 215.256836][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 216.410297][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'. [ 216.419234][ T6429] netlink: 'syz.2.498': attribute type 5 has an invalid length. [ 216.426955][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'. [ 216.490385][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.510'. [ 216.511732][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.510'. [ 216.570896][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.509'. [ 217.001873][ T4179] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.024517][ T4179] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.038137][ T4179] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.057022][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 217.066631][ T6483] netlink: 'syz.1.503': attribute type 30 has an invalid length. [ 217.074721][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 217.096229][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 217.520775][ T4179] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.086312][ T28] audit: type=1400 audit(218.042:865): avc: denied { write } for pid=6525 comm="syz.3.505" name="kcm" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 219.358716][ T28] audit: type=1400 audit(219.082:866): avc: denied { write } for pid=3300 comm="syz-executor" name="113" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 220.338464][ T28] audit: type=1400 audit(219.082:867): avc: denied { write } for pid=3300 comm="syz-executor" name="113" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 220.364035][ T28] audit: type=1400 audit(219.082:868): avc: denied { write } for pid=3300 comm="syz-executor" name="113" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 221.157436][ T6547] __nla_validate_parse: 2 callbacks suppressed [ 221.157474][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.513'. [ 221.380097][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.513'. [ 221.556864][ T6541] Failed to initialize the IGMP autojoin socket (err -2) [ 221.661017][ T28] audit: type=1400 audit(219.082:869): avc: denied { write } for pid=3300 comm="syz-executor" name="113" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 221.761501][ T28] audit: type=1400 audit(220.092:870): avc: denied { audit_write } for pid=6545 comm="syz.3.514" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 221.782060][ T28] audit: type=1107 audit(221.102:871): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 222.056000][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 222.064844][ T6559] netlink: 'syz.2.518': attribute type 30 has an invalid length. [ 222.072652][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 222.109968][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 222.254966][ T6553] Failed to initialize the IGMP autojoin socket (err -2) [ 223.153299][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 223.230532][ T28] audit: type=1107 audit(223.152:872): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 225.457782][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.530'. [ 225.466948][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.530'. [ 225.791861][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.532'. [ 226.518245][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 226.721433][ T6668] netlink: 236 bytes leftover after parsing attributes in process `syz.2.531'. [ 227.084517][ T6699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.537'. [ 227.123222][ T5954] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 227.399514][ T6704] sg_write: process 364 (syz.3.538) changed security contexts after opening file descriptor, this is not allowed. [ 230.205521][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.325520][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.988016][ T28] audit: type=1400 audit(233.949:873): avc: denied { connect } for pid=6729 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.960675][ T28] audit: type=1400 audit(234.609:874): avc: denied { bind } for pid=6729 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 236.785818][ T6753] ucma_write: process 410 (syz.1.548) changed security contexts after opening file descriptor, this is not allowed. [ 236.838695][ T6760] pim6reg: entered allmulticast mode [ 236.880621][ T6760] pim6reg: left allmulticast mode [ 236.941004][ T28] audit: type=1400 audit(236.849:875): avc: denied { name_bind } for pid=6761 comm="syz.0.552" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 237.650100][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 237.841481][ T6778] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 237.857078][ T6778] xt_hashlimit: max too large, truncated to 1048576 [ 239.624132][ T28] audit: type=1400 audit(239.579:876): avc: denied { setopt } for pid=6774 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.945928][ T28] audit: type=1400 audit(239.889:877): avc: denied { create } for pid=6783 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.445556][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.580999][ T6780] lo: Caught tx_queue_len zero misconfig [ 241.919988][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 243.082719][ T6811] pim6reg: entered allmulticast mode [ 243.105563][ T6823] pim6reg: left allmulticast mode [ 244.285520][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.183043][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 245.261488][ T6834] netlink: 'syz.3.568': attribute type 3 has an invalid length. [ 245.460443][ T6849] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 245.473598][ T6849] xt_hashlimit: max too large, truncated to 1048576 [ 248.040926][ T6859] 9pnet_fd: p9_fd_create_tcp (6859): problem creating socket [ 248.436936][ T28] audit: type=1400 audit(247.999:878): avc: denied { create } for pid=6853 comm="syz.2.571" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.459799][ T28] audit: type=1400 audit(248.059:879): avc: denied { write } for pid=6853 comm="syz.2.571" name="file0" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.483151][ T28] audit: type=1400 audit(248.059:880): avc: denied { open } for pid=6853 comm="syz.2.571" path="/125/file0" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.526507][ T6861] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 248.543522][ T28] audit: type=1400 audit(248.059:881): avc: denied { ioctl } for pid=6853 comm="syz.2.571" path="/125/file0" dev="tmpfs" ino=712 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.923311][ T28] audit: type=1400 audit(248.769:882): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 251.229513][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 255.215411][ T6905] pim6reg: entered allmulticast mode [ 255.222777][ T6905] pim6reg: left allmulticast mode [ 256.202470][ T28] audit: type=1400 audit(256.159:883): avc: denied { nlmsg_write } for pid=6921 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 256.224213][ T6922] 9p: Bad value for 'rfdno' [ 258.375495][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.118286][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 261.136578][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 261.145834][ T6932] netlink: 'syz.3.589': attribute type 30 has an invalid length. [ 261.183127][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 261.200622][ T6935] netlink: 'syz.2.588': attribute type 3 has an invalid length. [ 261.252986][ T6939] netlink: 'syz.3.589': attribute type 30 has an invalid length. [ 261.415203][ T28] audit: type=1326 audit(261.369:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.3.589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccfd28ce59 code=0x0 [ 261.549927][ T28] audit: type=1400 audit(261.509:885): avc: denied { getopt } for pid=6930 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 261.872851][ T6949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.884175][ T6949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.968089][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 262.273129][ T6949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.308546][ T6949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.535314][ T6949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.036437][ T6949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.132078][ T6949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.142695][ T6949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.293165][ T28] audit: type=1326 audit(263.249:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 264.125469][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.581529][ T28] audit: type=1326 audit(263.279:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8fef0292ac code=0x7ffc0000 [ 264.606350][ T28] audit: type=1326 audit(263.279:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8fef02930e code=0x7ffc0000 [ 265.586693][ T28] audit: type=1326 audit(263.279:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fef06caeb code=0x7ffc0000 [ 265.611387][ T28] audit: type=1326 audit(263.279:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 265.725959][ T6985] xt_hashlimit: max too large, truncated to 1048576 [ 266.589734][ T28] audit: type=1326 audit(263.279:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 266.615973][ T28] audit: type=1326 audit(263.279:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 267.373945][ T28] audit: type=1326 audit(263.279:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 267.423440][ T28] audit: type=1326 audit(263.279:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 267.549428][ T28] audit: type=1326 audit(263.279:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 267.584565][ T5958] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.596842][ T5958] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.615313][ T5958] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.623863][ T28] audit: type=1326 audit(263.279:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8fef06bcc7 code=0x7ffc0000 [ 268.231034][ T5958] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.251543][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 268.274070][ T5958] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.497948][ T5958] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.535053][ T5958] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.574709][ T5958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.602423][ T28] audit: type=1326 audit(263.279:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 268.627749][ T28] audit: type=1326 audit(263.279:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 268.768214][ T28] audit: type=1326 audit(263.279:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 268.793091][ T28] audit: type=1326 audit(263.279:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8fef06ce59 code=0x7ffc0000 [ 269.574035][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 270.168528][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 270.380639][ T7031] netlink: 'syz.1.609': attribute type 3 has an invalid length. [ 270.515138][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 270.561284][ T7037] netlink: 76 bytes leftover after parsing attributes in process `syz.0.615'. [ 270.854146][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.618'. [ 271.005800][ T7040] netlink: 'syz.3.617': attribute type 29 has an invalid length. [ 271.130749][ T7070] xt_hashlimit: size too large, truncated to 1048576 [ 271.207567][ T7068] wireguard: wireguard0: Could not create IPv4 socket [ 271.214396][ T7068] wireguard0: entered promiscuous mode [ 271.219888][ T7068] wireguard0: entered allmulticast mode [ 271.309821][ T7079] siw: device registration error -23 [ 271.602745][ T7080] ================================================================== [ 271.610898][ T7080] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 271.617975][ T7080] [ 271.620315][ T7080] write to 0xffff888104a5a7b0 of 8 bytes by task 7074 on cpu 0: [ 271.627965][ T7080] release_task+0x6cf/0xb40 [ 271.632510][ T7080] do_exit+0xd79/0x1500 [ 271.636689][ T7080] kthread+0x229/0x270 [ 271.640771][ T7080] ret_from_fork+0x146/0x330 [ 271.645388][ T7080] ret_from_fork_asm+0x1a/0x30 [ 271.650176][ T7080] [ 271.652524][ T7080] read to 0xffff888104a5a280 of 3456 bytes by task 7080 on cpu 1: [ 271.660339][ T7080] memcpy_and_pad+0x48/0x80 [ 271.664969][ T7080] arch_dup_task_struct+0x2c/0x40 [ 271.670026][ T7080] dup_task_struct+0x6d/0x670 [ 271.674722][ T7080] copy_process+0x5a0/0x2340 [ 271.679336][ T7080] kernel_clone+0x1c0/0x5f0 [ 271.683858][ T7080] __se_sys_clone3+0x1f5/0x230 [ 271.688671][ T7080] __x64_sys_clone3+0x31/0x40 [ 271.693370][ T7080] x64_sys_call+0x580/0x3020 [ 271.697997][ T7080] do_syscall_64+0x136/0x3c0 [ 271.702624][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.708541][ T7080] [ 271.710878][ T7080] Reported by Kernel Concurrency Sanitizer on: [ 271.717066][ T7080] CPU: 1 UID: 0 PID: 7080 Comm: syz.1.623 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 271.727858][ T7080] Tainted: [W]=WARN [ 271.731673][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.741747][ T7080] ================================================================== [ 271.763783][ T7083] netlink: 'syz.2.624': attribute type 4 has an invalid length. [ 271.935130][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 271.935145][ T28] audit: type=1400 audit(271.889:921): avc: denied { append } for pid=7080 comm="syz.1.623" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1