last executing test programs: 3m26.848816347s ago: executing program 4 (id=593): socket$unix(0x1, 0x1, 0x0) r0 = getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x7, &(0x7f00000002c0)=""/7, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xd, 0x6, 0x5280}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5127, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8905, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200}) migrate_pages(r0, 0x2c24, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x100000001) 3m25.98346348s ago: executing program 4 (id=607): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xfffffffc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b59f0000303afffe8800000000000000000000004e0101ff020000000000000000000000000001020090780000000167d32d6200022c00fe8000000000000000000000000000aa0c8100000000000000000000000000aa"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x65) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x2, 0xffff}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x189703, 0x0) ioctl$TUNSETIFF(r4, 0x5452, &(0x7f0000000000)={'pim6reg\x00', 0x800}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xff8b, 0x2, @TCA_CBS_PARMS={0x5, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) setuid(0xee01) listen(r8, 0x70000008) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r9, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 3m25.065063155s ago: executing program 4 (id=613): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0xf0, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8881}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) writev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000800)="c5e9321dcfb5", 0x6}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c00098008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048894) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 3m23.946917895s ago: executing program 4 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x6c020000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={r2, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000340)={@align=0x5, {0x0, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$tun(r0, &(0x7f0000002600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="310100099078100004021312afcdbd5c641cd54bf58db244b47445d1fe06e2d4c3d9fe06e2d4c3d92212e9cb7598f77830b1847a43bf116af3730303030000000a40a82efefbf0a306a1c3fc58db6c4d255c02bde876c117cd1112130e6a86"], 0x12b1) 3m23.444155628s ago: executing program 4 (id=623): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setresgid(0x0, 0x0, 0xee00) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000240), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000380)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}, {@noquota}, {@noblock_validity}, {@jqfmt_vfsv1}, {@nobarrier}, {@nomblk_io_submit}], [{@euid_eq}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0x1, 0x552, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003}, 0x94) 3m22.966464751s ago: executing program 4 (id=626): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0xffffffff) 3m22.938740862s ago: executing program 32 (id=626): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0xffffffff) 2m55.893244978s ago: executing program 5 (id=846): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000001c0)=""/149, &(0x7f0000000280)=0x95) r2 = socket(0x1f, 0x2, 0x8041) poll(&(0x7f0000000140)=[{r1, 0x84}, {r0, 0x80}, {r2}], 0x3, 0x800) setpgid(0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x20008023899) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000300)=""/106, 0x6a}], 0x1, 0xa3, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0xc29f, "12aeeb", 0x6, 0x1d}) close(0x3) setsockopt(r1, 0x9, 0x10, &(0x7f0000000100), 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e20, @local}, 0x144, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ipvlan0\x00', 0x5, 0x3, 0xf}) 2m55.870815319s ago: executing program 5 (id=848): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x21, 0x242, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0xff, 0x4) getdents64(r0, 0x0, 0x4f) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffffffff, 0x6ab}, 0x0, 0x1224, 0x1, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2, {0xfffffffe}}}}}}}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x7}) 2m55.753944001s ago: executing program 5 (id=850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8e0bdeb9"], 0x10}, 0x40) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000140)={0x8, 0x2}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x890002, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000}}, {@stripe}, {@inlinecrypt}, {@usrquota}, {@minixdf}, {@nouid32}, {@orlov}, {@nolazytime}, {@noinit_itable}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$eJzs3d9rm2sdAPDvmzZru/Wc9qgXxwMei+dId9Al7eq24sWcIHo1UOf9LG1aStOmNGm3liEd/gGCiApeeeWN4B8gyP4EEQZ6LyqKuM1deKORJG+2Nkvarkua0Xw+8O59nvdHv98na9+8T56HvAEMrKmIuBURQxHxSURMpNsz6RL7jaV23LOnDxZrSxLV6p1/JZGk25o/K0nXl9LTRiPiu9+KiCfVamvc8u7e2kKxWNhK6/nK+ma+vLt3ZXV9YaWwUtiYm5u9Pn9j/tr8zKnbthNJM6WYjIib3/jbT3/0q2/e/N2X7/357j8u/6C2czzdf7Ad3dRIIFt/LZqGI2KrF8H6YChtT7bfiQAAcCK1+9NPRcQX6vf/EzFUv5s7ytgZZQYAAAB0S/Vr45GN6kgVAAAAOLcy9TmwSSaXzvcdj0wml2vM4f1MXMwUS+XKl5ZL2xtLjbmyk5HNLK8WCzPpXOHJyCa1+mw6x7ZZv9pSn4uI9yLiJxNj9XpusVRc6veHHwAAADAgLrX0/59PNPr/AAAAwDkz2e8EAAAAgJ7T/wcAAIDzT/8fAAAAzrVv375dW6rN518v7exur5V2riwVymu59e3F3GJpazO3Uiqt1L+zb/24n1cslTa/Ehvb9/OVQrmSL+/u3V0vbW9U7q4eegQ2AAAAcIbe+/yjPyURsf/VsfoSScSFdF+2z7kBvZV5nYP/2rs8gLM31O8EgL4Z7ncCQN/o4wPJMfs7Tt75ffdzAQAAemP6sy3j/2H8HwbFa43/A+eK8X8YXG3G/00JgAGRdQcAA6/34//V6mslBAAAdN14fUkyuXQscDwymVwu4p36YwGyyfJqsTATEe9GxB8nsiO1+mz9zOTYPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlE9heenOQkAAADoi4jM35P0+V/TEx+Pt34+cCH5z0R9HRH3fnHnZ/cXKpWt2dr2Jy+2V36ebr968Mz9Vz9s8LBxAAAAOBPNfnqzHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6YPF5hLZs4v7z69HxGRL/LrhGK2vR+vpXPx3EsMHzksiYqgL8fcfRsT77eIntbRiMs2iNX4mIsb6HP9SF+LDIHtUu/7cavf3l4mp+rr9399wurypg9e/2uXgYPzm9W+ow/XvnRPG+ODxb/Id4z+M+GC4/fWnGT/pEP+jjhFHDtW+/729vU5HVn8ZMd36/vMiwstSvrK+mS/v7l1ZXV9YKawUNubmZq/P35i/Nj+TX14tFtJ/28b48ed++7+j2n+xQ/zJY9r/ccf2H/bfx/effrpRfOWdtRb/8keH40+l+97vED+Tvvd9MS3X9k83y/uN8kEf/voPH75Iuk38pQ7tP+7//3KzMnp0+z/5zg//csxLBACcofLu3tpCsVjYOmVhJ0568FT7Xc07opMH3Y83zFnhLSsMxeEtzfvULsfKnvB3fvQteVlOUHj3wJYLafO6FKIPFyMAAKCnXt70n+DgQwPuI71LCgAAAAAAAAAAAAAAAAAAAAbMWXxRWWvM/f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSP8PAAD//22Dxkw=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600"], 0xa8}}, 0x40080) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968818a}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000003c0)=""/109, &(0x7f0000000440)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m55.658184924s ago: executing program 5 (id=852): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000500)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2082, 0x32, 0x7, 0x7, 0x10000000009, 0x3, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180044270db50000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x1c}, 0x20) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) poll(&(0x7f0000000000)=[{r1, 0x4248}, {}, {r0, 0x1}, {r2}], 0x4, 0x3) fcntl$setlease(r1, 0x400, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) unlink(&(0x7f0000000280)='./file1\x00') r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x14) r6 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x4, 0x402, 0xffffffffffffeffc, r6}) 2m55.498531059s ago: executing program 5 (id=854): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m55.234782366s ago: executing program 5 (id=859): r0 = syz_ublk_setup_io_uring(0x47a6, &(0x7f0000000080)={0x0, 0xf808, 0x0, 0x3, 0x22}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) r1 = io_uring_setup(0xb5a, &(0x7f0000000200)={0x0, 0x6, 0x800, 0x0, 0x47, 0x0, r0}) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="00020201"], 0x18) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x3938700}, 0xfffffffffffffffe) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 2m55.181199357s ago: executing program 33 (id=859): r0 = syz_ublk_setup_io_uring(0x47a6, &(0x7f0000000080)={0x0, 0xf808, 0x0, 0x3, 0x22}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) r1 = io_uring_setup(0xb5a, &(0x7f0000000200)={0x0, 0x6, 0x800, 0x0, 0x47, 0x0, r0}) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="00020201"], 0x18) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x3938700}, 0xfffffffffffffffe) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 2m51.462422207s ago: executing program 3 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c00078008000640000000000500050002000000050004a50100000012000300686173683a6e65742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5b28bb96, 0xf}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002) writev(r4, &(0x7f0000000540)=[{&(0x7f00000007c0)="03e6b107e445a7d8276efefff13dfeff50e9d3d14a90a55ec1b3726eb4c0838db63c3594182fdcdf2fcc333c99c565920c0ac34bb23dcf42331c75af98c268be29e63fe7c43ee3825d016e37c073d8ca13c3dbeca3f6165320dc79", 0x5b}, {&(0x7f0000000300)="a4", 0x1}, {&(0x7f0000000640)="c35cae255f560718fd89dfd92a4c9aa1b53c151f6f57ec01afa574fa29846fb39c293c826bf1e6b28cff1749f6c76806cff16c096fea098694bbfdf2b5761ddfafd7be30c45b44ea565e4b2dd6b2561a0b0e2587f26bf53d90f5c7a05025e3e0614b24a7b66a49c621a3ec09630fe1e201000000b226fee50bbd1965780da36e56d9231951b0734fe951538f117da22419c3fd067dc9131ad49c4d38babed128952496cd2d620f490dd762987df7abc08d39514414d8011e7b3aab5b58ec5193bf259c8ff8046b13eb9159f75d938c0ab6081c7d7b72741a9e02a13b659fbafcd906a2aaaaed73ce41a70485fef59fadf4051e4c763fa6f9e77e20958a1a45dd4efd4ff28464e36690b9b6b434e5d3972fbc2a759cc0caecfbae160241c89ced22df777155ef3aa3fa0d4411a1ec8e9d1f0d05", 0x133}, {&(0x7f00000003c0)="00008287334aec085cd2b31681554c0bc55254e3cc223af9d1be9f4d121af1cc2723241f4853ed6237471e0edf1c36a4b9de2c4276", 0x35}, {&(0x7f0000000100)="6de7000018f973826fb4fc42bcce2f52e8a318536a2061", 0x17}, {&(0x7f0000000140)='G', 0x1}], 0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x8, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fstatfs(r5, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PTP_EXTTS_REQUEST(r7, 0xc4c03d12, 0x0) 2m51.34724009s ago: executing program 3 (id=890): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x318, 0x118, 0x318, 0x318, 0x3e8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0x0, 0xff000000, 0xffffff00], 'macvtap0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0xf9, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x41}, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x35, 0xa, 0x5}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff, 0xff000000, 0xff], [0xffffff00, 0xff], 'gre0\x00', 'dvmrp0\x00', {}, {}, 0x2b, 0x5, 0x5, 0x30}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0xfffffffd], 0x9, 0x5}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x27}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e24], [0x4e23, 0x4e23], 0x1, 0x10, 0x80, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0x80, 0xffffffff], 'lo\x00', 'bridge0\x00', {0xff}, {}, 0x33, 0x7, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0x0, 0xff000000], [0x0, 0xff, 0xffffffff, 0xff], 'hsr0\x00', 'veth0_to_hsr\x00', {}, {}, 0x32, 0x78, 0x0, 0x40}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, [0xff], 0x4e20, 0x4e20, 0x4e22, 0x4e24, 0x6, 0xfc01, 0xffffffff, 0x7, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x6, {0x7, 0x6, "2adfa2", 0x5, 0x3a, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, [], "2b2c6347b6147b68"}}}}}}}, 0x0) 2m51.238438733s ago: executing program 3 (id=892): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {}, 0xff}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0xffffffffffffffff}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pread64(r0, &(0x7f0000000280)=""/197, 0xc5, 0x2) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0xff7e) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f000000008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=r3], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0xfffffffffffffee9, &(0x7f00000003c0)}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000390400000000fcffffff00000000", @ANYRES16=r5, @ANYBLOB="1798010000001400bc262b205fb45ead9acc248b138fde6f0797a57baa39a58ea00c7bbf72e68ced01768f06c0ed3441174768ac07abe0943fa47e627fc661288d5c8718aed04f24efe636b35cba97c0f1b88ee3b84511f52bfff68fe9ba12f6415f49b72813ebd0806e9821e214aa016ba912edfbd02ecebe37f6ba1bf7db2c1b3e632d453680"], 0x20}}, 0x0) 2m51.235162743s ago: executing program 3 (id=893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$tun(r0, &(0x7f0000002600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="310100099078100004021312afcdbd5c641cd54bf58db244b47445d1fe06e2d4c3d9fe06e2d4c3d92212e9cb7598f77830b1847a43bf116af3730303030000000a40a82efefbf0a306a1c3fc58db6c4d255c02bde876c117cd1112130e6a86"], 0x12b1) 2m51.079825087s ago: executing program 3 (id=894): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) set_mempolicy(0x8006, 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x7, &(0x7f00000002c0)=""/7, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xd, 0x6, 0x5280}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5127, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8905, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200}) migrate_pages(0x0, 0x2c24, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x100000001) 2m51.000598559s ago: executing program 3 (id=895): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0xf0, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8881}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) writev(r0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c00098008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048894) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 2m50.943663261s ago: executing program 34 (id=895): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100, 0x80}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0xf0, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8881}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) writev(r0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c00098008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048894) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 1m21.058392214s ago: executing program 1 (id=1391): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m20.921880887s ago: executing program 1 (id=1393): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r2, r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xd0, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_LOSS={0x74}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x5}}]}}}]}, 0xd0}}, 0x4000010) 1m20.781929831s ago: executing program 1 (id=1397): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0xfffd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={0x0, 0x4}, 0x1306, 0x2, 0xfc, 0x2, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x31b, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) 1m20.718490773s ago: executing program 1 (id=1398): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m20.718200753s ago: executing program 1 (id=1399): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x24, 0x301, 0x70bd2b, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404c896}, 0x840) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f00000001c0)=r4, 0xa1) close(r5) 1m20.46651493s ago: executing program 1 (id=1411): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x2d, 'perf_event'}, {0x2d, 'net_cls'}, {0x2d, 'cpu'}, {0x2d, 'cpuset'}]}, 0x22) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffd25}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x11}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 1m20.409000571s ago: executing program 35 (id=1411): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x2d, 'perf_event'}, {0x2d, 'net_cls'}, {0x2d, 'cpu'}, {0x2d, 'cpuset'}]}, 0x22) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffd25}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x11}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 26.754693612s ago: executing program 2 (id=3448): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.741094322s ago: executing program 2 (id=3449): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.613378645s ago: executing program 2 (id=3450): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000010d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 26.597580626s ago: executing program 2 (id=3452): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 26.534451487s ago: executing program 2 (id=3453): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.359037312s ago: executing program 2 (id=3454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 26.358977852s ago: executing program 36 (id=3454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) 4.577823607s ago: executing program 6 (id=4212): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 4.529145448s ago: executing program 6 (id=4215): socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 3.648399241s ago: executing program 6 (id=4221): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 3.562427834s ago: executing program 6 (id=4225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2d4881a05b108c29cb37b3e2835e1a200f3a78af0f3d78a8a92fd83000000002161202000000001000000002000004100001800c00028005000100010000000c0019"], 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x44000) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200020, 0x4, @perf_config_ext={0x8, 0x4}, 0x100, 0x2, 0x8001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x268, 0x0, 0x5, 0xd01, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x9}, 0xff, 0xb, 0x3, 0x2, 0x20, 'syz0\x00', "001e790dc0a36d62112b75f45be4216d5af5bc73311d1f75885a38a1be8a9eff", "f14804e0a3ad6cbf0249eb89a36d2d5e505d8ff26643aba1a4050acded78af36", [{0xe59, 0x6, {0x3, 0x8}}, {0x2, 0x28, {0x2, 0x80000001}}, {0x2800, 0xffff, {0x0, 0x4}}, {0x1, 0xc, {0x2, 0x200000}}, {0x0, 0x8, {0x3, 0x40}}, {0x7, 0x8, {0x3}}, {0x2, 0xf, {0x2}}, {0x29, 0x8bd2, {0x3, 0x81}}, {0x0, 0x9, {0x0, 0x3}}, {0xfffc, 0x3, {0x1, 0x9}}, {0x3, 0x8, {0x1, 0x3ff}}, {0xe6a, 0x8, {0x2, 0x3}}, {0xffff, 0x8, {0x1, 0xc7}}, {0x100, 0x8, {0x1, 0x5}}, {0x2, 0xa, {0x1, 0x8}}, {0x1, 0x4, {0x2, 0x52e6}}, {0x7, 0x3, {0x3, 0x5}}, {0x9b, 0x7, {0x0, 0x100}}, {0x4000, 0xfffd, {0x0, 0x5}}, {0x7, 0x4, {0x3, 0x9}}, {0x8, 0x3, {0x3, 0x6}}, {0x5, 0x401, {0x0, 0xffffffad}}, {0x0, 0x7fff, {0x1, 0x1}}, {0x81, 0x1, {0x2, 0x3}}, {0x6, 0x9, {0x0, 0x1000}}, {0x40, 0xd, {0x0, 0x7}}, {0x1000, 0x5, {0x3, 0x2}}, {0x40, 0x2, {0x0, 0xc}}, {0x28c6, 0x2, {0x2, 0x3}}, {0xb, 0x6, {0x2, 0x1}}, {0x3cc4, 0x1ff}, {0x9, 0xcfe, {0x2, 0xfffffff8}}, {0x2, 0x2, {0x0, 0x2}}, {0x1, 0x4, {0x0, 0x2}}, {0x1, 0xb, {0x3, 0x401}}, {0xfff8, 0x9, {0x1, 0x5}}, {0x6, 0x1, {0x1, 0x4}}, {0x1, 0x0, {0x0, 0x3}}, {0x8, 0x8, {0x2, 0xfffffffe}}, {0xfff8, 0x1, {0x2, 0xffff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) 2.680289738s ago: executing program 6 (id=4247): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09f00008174488248989ea"}]}}}], 0x20}, 0x20002880) 2.628262339s ago: executing program 6 (id=4249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x5e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="8d9c2c0239", 0x5}], 0x1}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) ioctl$TUNGETVNETLE(r4, 0x800454dd, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pS \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x1a, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_val={0x18, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x81, 0x7, &(0x7f0000000c40)=""/7, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x0, 0x2, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff, r2, r5, r6, 0x1], 0x0, 0x10, 0x80000001}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r7, &(0x7f0000000a00)={&(0x7f0000000800)={0xa, 0x4e21, 0x1c, @empty, 0xfff}, 0x1c, 0x0}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x64, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x610}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x2000800) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, &(0x7f0000000040), 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="2401000010000100feffffff0001000020010000000000000000000000000000fc010000000000000000000000000001000107144e230005000020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/time\x00') 1.142504069s ago: executing program 7 (id=4307): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x14) 1.142242279s ago: executing program 0 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x84a00, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_INTERVAL={0x4, 0x3, 0x6}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2c87}]}}]}, 0x4c}}, 0x4000010) 1.142167819s ago: executing program 7 (id=4309): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3b}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.130412819s ago: executing program 7 (id=4310): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.12115408s ago: executing program 0 (id=4311): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7499, 0x8014, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1488, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000f4ff0095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.046378271s ago: executing program 7 (id=4312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) close(0xffffffffffffffff) socket$kcm(0x11, 0xa, 0x300) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x3b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe1) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20, 0x408000, 0x10, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, r2, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffffa}]}}]}, 0x40}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x17, &(0x7f0000000340)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x7, '\x00', r4, 0x25, r7, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{0x4, 0x3, 0x9, 0x9}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0x11, 0x3, 0x100, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000cc0)={0x70, 0x1, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xe}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x0, 0x32}, @in6=@private0, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7b}, {0x0, 0xfffffffffffeffff, 0x4}, {0xf6, 0x4, 0x95a}, 0x0, 0x34ff, 0x2, 0x1, 0xbe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "7919d8c1a084855c13090000f13fdf4bc5cca49df310a74f10e954"}}]}, 0x158}}, 0x804) 1.039659271s ago: executing program 0 (id=4313): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000800) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0xc0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x37, 0xb3f, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20004000) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x2, 0x1, 0x2042, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xf}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f0000000180)="faab70e959031981197dbb685802da7e6b4ee9d944c96c54a4ffa9f753350f47e52d847111a39866a51aee9fca8613d44241f541d2952dadd3dd4f36733774d73f963d3aa65fdb5c215469f787bec5981f570de3ac72b2d2f8ccc8f680591cf1e7127b28131b", &(0x7f0000000200)=""/13}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc5080001400000068708000140000000040800034000000c1a080003400000000908000240000014ce3c00108008000340000000030800014000000002080001400000003e080001400000000e08000340e2ffffff080002"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 992.141023ms ago: executing program 0 (id=4314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 977.055364ms ago: executing program 7 (id=4315): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0xffffffff}, 0x28) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xe, &(0x7f0000000100), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, 0x0, 0x8001) 922.447565ms ago: executing program 0 (id=4316): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x80000001}, 0x202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff000000"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x120, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x1, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 580.378364ms ago: executing program 8 (id=4320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x84a00, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_INTERVAL={0x4, 0x3, 0x6}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2c87}]}}]}, 0x4c}}, 0x4000010) 376.71838ms ago: executing program 8 (id=4323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000011000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 240.745223ms ago: executing program 9 (id=4325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 189.955605ms ago: executing program 8 (id=4326): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5411, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r2], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004000050bd25a809d9c63940d0324fc60040035400c00f378faeb343e000200c8c50208002037153e370c044f001a0000003bf325fa", 0x39}, {&(0x7f0000000a40)="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", 0x3fc}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1ff) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000114010026bd7000fbdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0xd8}, 0x40090) r4 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x100000000000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000300)="c0b2", 0x2}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5411, 0x0) 189.798934ms ago: executing program 9 (id=4327): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 138.533066ms ago: executing program 9 (id=4328): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8008743f, 0xf0ff1f00000000) 138.414216ms ago: executing program 9 (id=4329): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 138.222076ms ago: executing program 8 (id=4330): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004080) 129.031596ms ago: executing program 9 (id=4331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x0) 115.858836ms ago: executing program 7 (id=4332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100208, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r2) socket$kcm(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x9) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x10000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x55) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x7, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) 88.627047ms ago: executing program 9 (id=4333): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x840000000002, 0x3, 0xff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) socketpair(0x23, 0x3, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x4000) 14.486599ms ago: executing program 0 (id=4334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000000206010300000000000000000200000014000780080008000000000008000640002201250500010006000003050005000200000005000400020000000900"], 0x7c}}, 0x0) 14.290539ms ago: executing program 8 (id=4335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xa8}}, 0x0) 0s ago: executing program 8 (id=4336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3b}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): xattr block 33: invalid header [ 216.792387][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.793140][ T7935] hierarchical_memory_limit 314572800 [ 216.801168][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.827889][ T8003] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 216.833620][ T7935] hierarchical_memsw_limit 9223372036854771712 [ 216.864786][ T7935] total_cache 143360 [ 216.875059][ T7935] total_rss 8192 [ 216.887502][ T7935] total_shmem 0 [ 216.894790][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.907733][ T7935] total_mapped_file 4096 [ 216.917065][ T7935] total_dirty 4096 [ 216.921093][ T7935] total_writeback 0 [ 216.924926][ T7935] total_workingset_refault_anon 230 [ 216.930176][ T7935] total_workingset_refault_file 1731 [ 216.949567][ T7935] total_swap 1462272 [ 216.959030][ T8008] loop6: detected capacity change from 0 to 512 [ 216.969256][ T7935] total_swapcached 29081600 [ 216.980187][ T7935] total_pgpgin 186208 [ 216.986660][ T8008] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.001315][ T7935] total_pgpgout 186171 [ 217.006788][ T7935] total_pgfault 204919 [ 217.011927][ T7935] total_pgmajfault 153 [ 217.016220][ T7935] total_inactive_anon 8192 [ 217.022613][ T7935] total_active_anon 0 [ 217.043474][ T7935] total_inactive_file 143360 [ 217.048109][ T7935] total_active_file 0 [ 217.052430][ T7935] total_unevictable 0 [ 217.063003][ T7935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.529,pid=5497,uid=0 [ 217.103757][ T7935] Memory cgroup out of memory: Killed process 5497 (syz.0.529) total-vm:94036kB, anon-rss:1240kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 217.132471][ T8020] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1183'. [ 217.182738][ T3300] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 217.223623][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 217.223653][ T3300] Tainted: [W]=WARN [ 217.223702][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.223745][ T3300] Call Trace: [ 217.223752][ T3300] [ 217.223759][ T3300] __dump_stack+0x1d/0x30 [ 217.223782][ T3300] dump_stack_lvl+0x95/0xd0 [ 217.223801][ T3300] dump_stack+0x15/0x1b [ 217.223873][ T3300] dump_header+0x80/0x240 [ 217.223893][ T3300] oom_kill_process+0x295/0x350 [ 217.223921][ T3300] out_of_memory+0x97d/0xb80 [ 217.224004][ T3300] try_charge_memcg+0x62f/0xa10 [ 217.224024][ T3300] ? radix_tree_lookup+0xfa/0x140 [ 217.224055][ T3300] charge_memcg+0x6d/0x120 [ 217.224112][ T3300] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 217.224137][ T3300] __swap_cache_prepare_and_add+0x69/0x4a0 [ 217.224304][ T3300] ? alloc_pages_mpol+0x217/0x260 [ 217.224327][ T3300] swap_cache_alloc_folio+0xa2/0x120 [ 217.224346][ T3300] swap_cluster_readahead+0x25f/0x3c0 [ 217.224453][ T3300] swapin_readahead+0xde/0x840 [ 217.224469][ T3300] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 217.224490][ T3300] ? irqentry_exit+0x527/0x5b0 [ 217.224504][ T3300] ? __rcu_read_unlock+0x4e/0x70 [ 217.224554][ T3300] ? swap_cache_get_folio+0x1e0/0x1f0 [ 217.224573][ T3300] do_swap_page+0x31e/0x2180 [ 217.224615][ T3300] ? __rcu_read_lock+0x36/0x50 [ 217.224634][ T3300] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 217.224712][ T3300] handle_mm_fault+0xb2e/0x2e70 [ 217.224731][ T3300] ? vma_start_read+0x1c7/0x2c0 [ 217.224762][ T3300] do_user_addr_fault+0x62f/0x1050 [ 217.224820][ T3300] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 217.224840][ T3300] ? trace_page_fault_user+0x1f/0xa0 [ 217.224865][ T3300] exc_page_fault+0x62/0xa0 [ 217.224906][ T3300] asm_exc_page_fault+0x26/0x30 [ 217.224925][ T3300] RIP: 0033:0x7f453564adf7 [ 217.224938][ T3300] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 39 7c 24 [ 217.224951][ T3300] RSP: 002b:00007fff99a42100 EFLAGS: 00010206 [ 217.224965][ T3300] RAX: 0000001b32424000 RBX: 00000000000002fa RCX: 0000000000034bc0 [ 217.224976][ T3300] RDX: 00000000039b396c RSI: 00007fff99a42190 RDI: 000000000000000e [ 217.225034][ T3300] RBP: 00007fff99a4213c R08: 000000000dc1d23d R09: 3fffffffffffffff [ 217.225045][ T3300] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 217.225055][ T3300] R13: 00000000000927c0 R14: 0000000000033e36 R15: 00007fff99a42190 [ 217.225069][ T3300] [ 217.226651][ T3300] memory: usage 307200kB, limit 307200kB, failcnt 3954 [ 217.293461][ T8028] pim6reg: entered allmulticast mode [ 217.311177][ T3300] memory+swap: usage 308464kB, limit 9007199254740988kB, failcnt 0 [ 217.507976][ T3300] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 217.521513][ T3300] Memory cgroup stats for /syz0: [ 217.521707][ T3300] cache 0 [ 217.529688][ T3300] rss 4096 [ 217.532815][ T3300] shmem 0 [ 217.535870][ T3300] mapped_file 0 [ 217.539382][ T3300] dirty 0 [ 217.542369][ T3300] writeback 0 [ 217.545682][ T3300] workingset_refault_anon 246 [ 217.557804][ T3300] workingset_refault_file 2187 [ 217.569576][ T3300] swap 1286144 [ 217.573055][ T3300] swapcached 29147136 [ 217.577069][ T3300] pgpgin 186680 [ 217.580612][ T3300] pgpgout 186678 [ 217.584175][ T3300] pgfault 204950 [ 217.587712][ T3300] pgmajfault 179 [ 217.591357][ T3300] inactive_anon 0 [ 217.595184][ T3300] active_anon 8192 [ 217.598931][ T3300] inactive_file 0 [ 217.604547][ T3300] active_file 0 [ 217.608048][ T3300] unevictable 0 [ 217.611731][ T3300] hierarchical_memory_limit 314572800 [ 217.617151][ T3300] hierarchical_memsw_limit 9223372036854771712 [ 217.630737][ T3300] total_cache 0 [ 217.640525][ T3300] total_rss 4096 [ 217.644449][ T28] audit: type=1400 audit(1777678668.923:1570): avc: denied { read write } for pid=8035 comm="syz.7.1188" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.668097][ T3300] total_shmem 0 [ 217.672901][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.682212][ T3300] total_mapped_file 0 [ 217.686347][ T3300] total_dirty 0 [ 217.689945][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1188'. [ 217.701891][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.714630][ T3300] total_writeback 0 [ 217.722579][ T3300] total_workingset_refault_anon 246 [ 217.728039][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.732291][ T28] audit: type=1400 audit(1777678668.943:1571): avc: denied { open } for pid=8035 comm="syz.7.1188" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.736132][ T3300] total_workingset_refault_file 2187 [ 217.766361][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.776343][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.786800][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.795967][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.816183][ T3300] total_swap 1286144 [ 217.825729][ T3300] total_swapcached 29147136 [ 217.837932][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.850942][ T3300] total_pgpgin 186680 [ 217.862384][ T3300] total_pgpgout 186678 [ 217.868686][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 217.879839][ T3300] total_pgfault 204950 [ 218.695432][ T3300] total_pgmajfault 179 [ 218.699903][ T3300] total_inactive_anon 0 [ 218.711635][ T3300] total_active_anon 8192 [ 218.718023][ T3300] total_inactive_file 0 [ 218.722611][ T3300] total_active_file 0 [ 218.726813][ T3300] total_unevictable 0 [ 218.734038][ T3300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1161,pid=7934,uid=0 [ 218.792468][ T3300] Memory cgroup out of memory: Killed process 7934 (syz.0.1161) total-vm:94168kB, anon-rss:1240kB, file-rss:22472kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 218.843734][ T3374] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 218.868223][ T3374] hid-generic 0000:0000:000E.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 218.877955][ T8040] loop6: detected capacity change from 0 to 512 [ 219.075316][ T8040] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 219.130288][ T8040] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 219.187108][ T8040] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1190: Corrupt directory, running e2fsck is recommended [ 219.206923][ T8040] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 219.235296][ T8040] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1190: corrupted in-inode xattr: e_name out of bounds [ 219.276063][ T8040] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.290587][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 219.306185][ C1] EXT4-fs (loop6): initial error at time 1777678670: ext4_iget_extra_inode:5128: inode 15 [ 219.316124][ C1] EXT4-fs (loop6): last error at time 1777678670: ext4_iget_extra_inode:5128: inode 15 [ 219.329860][ T8040] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1190: couldn't read orphan inode 15 (err -117) [ 219.342649][ T8040] loop6: lost filesystem error report for type 5 error -117 [ 219.343251][ T8040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.538943][ T8066] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 219.548897][ T8066] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 219.560589][ T8066] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 219.569670][ T8066] team0: Device ipvlan0 failed to register rx_handler [ 219.655888][ T8069] tipc: Can't bind to reserved service type 2 [ 219.776730][ T8071] bond0: (slave team0): Releasing backup interface [ 219.814014][ T8071] bridge_slave_0: left allmulticast mode [ 219.820463][ T8071] bridge_slave_0: left promiscuous mode [ 219.830118][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.843782][ T8071] bridge_slave_1: left allmulticast mode [ 219.850254][ T8071] bridge_slave_1: left promiscuous mode [ 219.857647][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.872893][ T8071] bond0: (slave bond_slave_0): Releasing backup interface [ 219.899104][ T8071] bond0: (slave bond_slave_1): Releasing backup interface [ 219.952099][ T8071] team0: Port device team_slave_0 removed [ 220.007407][ T8071] team0: Port device team_slave_1 removed [ 220.028318][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.040131][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.062365][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.104419][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.125146][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.136583][ T8071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.168104][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 220.177582][ T8080] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1200'. [ 220.187006][ T8085] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 220.203030][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.240944][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.254153][ T8088] loop6: detected capacity change from 0 to 512 [ 220.285319][ T8088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.303359][ T8091] pim6reg: entered allmulticast mode [ 220.324161][ T8088] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.365990][ T8088] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1205: corrupted xattr block 33: invalid header [ 220.404093][ T8088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 220.413270][ T8088] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1205: corrupted xattr block 33: invalid header [ 220.426902][ T8088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 220.438370][ T8088] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1205: corrupted xattr block 33: invalid header [ 220.475319][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.498048][ T8090] loop2: detected capacity change from 0 to 512 [ 220.515125][ T8090] EXT4-fs: Ignoring removed bh option [ 220.529699][ T8102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1210'. [ 220.551933][ T8090] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.559066][ T8102] veth1_to_bridge: entered allmulticast mode [ 220.566628][ T8090] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 220.577272][ T8102] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 220.585458][ T8102] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1210'. [ 220.595200][ T8090] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 220.615195][ T8090] EXT4-fs (loop2): orphan cleanup on readonly fs [ 220.623571][ T8090] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 220.633585][ T8090] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 220.671481][ T8090] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1206: Failed to acquire dquot type 1 [ 220.683523][ T8090] loop2: lost filesystem error report for type 5 error -5 [ 220.690595][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 220.704175][ C1] EXT4-fs (loop2): last error at time 1777678671: ext4_acquire_dquot:7034 [ 220.719077][ T8115] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 220.728941][ T8115] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 220.742560][ T8115] netlink: 'syz.6.1212': attribute type 10 has an invalid length. [ 220.752067][ T8115] team0: Device ipvlan0 failed to register rx_handler [ 220.811663][ T8090] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1206: Invalid block bitmap block 0 in block_group 0 [ 220.836996][ T8090] loop2: lost filesystem error report for type 5 error -117 [ 220.838770][ T8090] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1206: Invalid block bitmap block 0 in block_group 0 [ 220.907626][ T8090] loop2: lost filesystem error report for type 5 error -117 [ 220.908407][ T8090] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1206: Invalid block bitmap block 0 in block_group 0 [ 220.986172][ T8090] loop2: lost filesystem error report for type 5 error -117 [ 220.986752][ T8090] Quota error (device loop2): write_blk: dquota write failed [ 221.022686][ T8090] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 221.046516][ T8090] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1206: Failed to acquire dquot type 1 [ 221.069006][ T8090] loop2: lost filesystem error report for type 5 error -28 [ 221.085534][ T8090] Quota error (device loop2): write_blk: dquota write failed [ 221.100605][ T8090] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 221.123199][ T8090] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1206: Failed to acquire dquot type 1 [ 221.135131][ T8090] loop2: lost filesystem error report for type 5 error -28 [ 221.135451][ T8090] EXT4-fs (loop2): 1 orphan inode deleted [ 221.174506][ T8090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.195380][ T8121] loop1: detected capacity change from 0 to 512 [ 221.199831][ T8090] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.1206: deleted inode referenced: 12 [ 221.296794][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.425381][ T8127] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.457562][ T8137] loop6: detected capacity change from 0 to 512 [ 221.468097][ T8140] loop2: detected capacity change from 0 to 256 [ 221.475498][ T8140] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.513239][ T8140] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.582235][ T28] audit: type=1400 audit(1777678672.853:1572): avc: denied { read } for pid=8128 comm="syz.1.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 221.614811][ T8137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.672105][ T8137] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.688877][ T8127] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.811959][ T8137] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1221: corrupted xattr block 33: invalid header [ 221.899268][ T8137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 222.025135][ T8146] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1221: corrupted xattr block 33: invalid header [ 222.046490][ T8137] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1221: corrupted xattr block 33: invalid header [ 222.091536][ T8127] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.291835][ T8146] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 222.307206][ T8137] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 222.352293][ T8146] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1221: corrupted xattr block 33: invalid header [ 222.391926][ T8146] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 222.415407][ T8127] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.453872][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.531055][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.548980][ T8163] loop6: detected capacity change from 0 to 512 [ 222.584033][ T8165] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1230'. [ 222.594007][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.619071][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.627552][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.850617][ T28] audit: type=1400 audit(1777678674.123:1573): avc: denied { getopt } for pid=8164 comm="syz.7.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.010606][ T8173] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 223.020460][ T8173] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 223.031893][ T8173] netlink: 'syz.6.1232': attribute type 10 has an invalid length. [ 223.041273][ T8173] team0: Device ipvlan0 failed to register rx_handler [ 223.257604][ T28] audit: type=1400 audit(1777678674.533:1574): avc: denied { ioctl } for pid=8176 comm="syz.2.1233" path="socket:[21955]" dev="sockfs" ino=21955 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.511406][ T8186] loop2: detected capacity change from 0 to 1024 [ 223.536492][ T8192] tmpfs: Bad value for 'mpol' [ 223.541659][ T8186] EXT4-fs: test_dummy_encryption option not supported [ 223.586462][ T28] audit: type=1400 audit(1777678674.863:1575): avc: denied { read } for pid=8195 comm="syz.6.1242" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 223.624678][ T8192] loop1: detected capacity change from 0 to 4096 [ 223.689732][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1242'. [ 223.726472][ T28] audit: type=1400 audit(1777678674.863:1576): avc: denied { open } for pid=8195 comm="syz.6.1242" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 223.752280][ T28] audit: type=1400 audit(1777678674.893:1577): avc: denied { ioctl } for pid=8195 comm="syz.6.1242" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 223.797855][ T8192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.819172][ T8212] tmpfs: Bad value for 'mpol' [ 223.933478][ T8213] loop2: detected capacity change from 0 to 512 [ 224.090466][ T8213] EXT4-fs (loop2): 1 orphan inode deleted [ 224.101457][ T8213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.116840][ T8213] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.266354][ T8212] loop6: detected capacity change from 0 to 4096 [ 224.326388][ T8212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.380138][ T8218] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1247'. [ 224.550197][ T8230] Cannot find set identified by id 0 to match [ 224.777737][ T4119] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 224.788811][ T4119] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 224.801324][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.811316][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.914088][ T8238] wireguard0: entered promiscuous mode [ 224.919586][ T8238] wireguard0: entered allmulticast mode [ 225.243524][ T8243] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 225.253533][ T8243] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 225.265097][ T8243] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 225.274067][ T8243] team0: Device ipvlan0 failed to register rx_handler [ 225.299066][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.633754][ T8249] netlink: 'syz.6.1257': attribute type 10 has an invalid length. [ 225.655223][ T8249] team0: Device ipvlan0 failed to register rx_handler [ 226.264292][ T8273] loop1: detected capacity change from 0 to 1024 [ 226.271166][ T8273] EXT4-fs: test_dummy_encryption option not supported [ 228.462448][ T8280] loop1: detected capacity change from 0 to 512 [ 229.118617][ T49] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.212145][ T49] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.322281][ T49] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.382356][ T49] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.844997][ T8280] EXT4-fs (loop1): 1 orphan inode deleted [ 229.853520][ T8280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.868337][ T8280] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.964648][ T49] bridge_slave_1: left allmulticast mode [ 229.987386][ T49] bridge_slave_1: left promiscuous mode [ 230.006060][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.047147][ T49] bridge_slave_0: left allmulticast mode [ 230.057597][ T49] bridge_slave_0: left promiscuous mode [ 230.070052][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.103352][ T4119] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 230.133635][ T4119] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 230.154829][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.369411][ T8303] loop1: detected capacity change from 0 to 512 [ 232.350500][ T8303] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 232.365555][ T8321] netlink: 'syz.2.1271': attribute type 10 has an invalid length. [ 232.415430][ T8303] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 232.432558][ T8303] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1268: Corrupt directory, running e2fsck is recommended [ 232.488862][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.491815][ T8324] loop7: detected capacity change from 0 to 512 [ 232.515693][ T8303] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 232.517834][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.526615][ T8303] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1268: corrupted in-inode xattr: e_name out of bounds [ 232.564384][ T8303] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.565410][ T49] bond0 (unregistering): Released all slaves [ 232.566442][ T8303] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1268: couldn't read orphan inode 15 (err -117) [ 232.574932][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 232.575293][ C1] EXT4-fs (loop1): initial error at time 1777678683: ext4_iget_extra_inode:5128: inode 15 [ 232.575482][ C1] EXT4-fs (loop1): last error at time 1777678683: ext4_iget_extra_inode:5128: inode 15 [ 232.592143][ T49] bond1 (unregistering): Released all slaves [ 232.603501][ T8303] loop1: lost filesystem error report for type 5 error -117 [ 232.637993][ T49] bond2 (unregistering): Released all slaves [ 232.640837][ T8303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.670438][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 232.683284][ T8319] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 232.693155][ T8319] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.705285][ T8321] team0: Device ipvlan0 failed to register rx_handler [ 232.758864][ T8334] loop2: detected capacity change from 0 to 256 [ 232.766009][ T8334] vfat: Deprecated parameter 'posix' [ 232.771599][ T8334] FAT-fs: "posix" option is obsolete, not supported now [ 232.782553][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.815355][ T8334] FAT-fs (loop2): codepage cp775 not found [ 232.842185][ T49] hsr_slave_0: left promiscuous mode [ 232.866210][ T49] hsr_slave_1: left promiscuous mode [ 232.891857][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.904653][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.939497][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.954085][ T8354] loop2: detected capacity change from 0 to 128 [ 232.956263][ T8351] loop6: detected capacity change from 0 to 512 [ 232.974172][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.022257][ T8351] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 233.036111][ T49] veth1_macvtap: left promiscuous mode [ 233.046597][ T49] veth0_macvtap: left promiscuous mode [ 233.047899][ T28] audit: type=1400 audit(1777678684.323:1578): avc: denied { create } for pid=8342 comm="syz.7.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 233.054701][ T49] veth1_vlan: left promiscuous mode [ 233.077893][ T49] veth0_vlan: left promiscuous mode [ 233.088401][ T8351] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1281: Invalid block bitmap block 0 in block_group 0 [ 233.109438][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.110684][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 233.124738][ C1] EXT4-fs (loop6): initial error at time 1777678684: ext4_read_block_bitmap_nowait:483 [ 233.134698][ C1] EXT4-fs (loop6): last error at time 1777678684: ext4_read_block_bitmap_nowait:483 [ 233.138020][ T8351] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 233.153437][ T49] pim6reg2 (unregistering): left allmulticast mode [ 233.162252][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.163426][ T8351] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.1281: attempt to clear invalid blocks 983261 len 1 [ 233.185062][ T8367] loop7: detected capacity change from 0 to 512 [ 233.188854][ T8351] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.191846][ T8351] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.1281: Invalid inode table block 0 in block_group 0 [ 233.213894][ T8367] ext4: Unknown parameter 'euid' [ 233.214422][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.220480][ T8351] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 233.237448][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.238973][ T8351] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 233.271040][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.271303][ T8351] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.1281: Invalid inode table block 0 in block_group 0 [ 233.291363][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.291427][ T49] team0 (unregistering): Port device team_slave_1 removed [ 233.306823][ T49] team0 (unregistering): Port device team_slave_0 removed [ 233.306868][ T8351] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 233.333610][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.355640][ T8351] EXT4-fs error (device loop6): ext4_truncate:4690: inode #11: comm syz.6.1281: mark_inode_dirty error [ 233.374254][ T8351] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.374414][ T8351] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 233.442594][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.442810][ T8351] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.1281: Invalid inode table block 0 in block_group 0 [ 233.463353][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 233.463538][ T8351] EXT4-fs (loop6): 1 truncate cleaned up [ 233.477011][ T8351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.361520][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 234.409206][ T8378] loop2: detected capacity change from 0 to 512 [ 234.476809][ T8378] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.689893][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.699797][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 234.828353][ T8398] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 234.954377][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 235.136912][ T8432] loop1: detected capacity change from 0 to 1764 [ 235.155789][ T8432] wireguard0: entered promiscuous mode [ 235.173657][ T8432] wireguard0: entered allmulticast mode [ 235.277986][ T8440] loop7: detected capacity change from 0 to 512 [ 235.327505][ T8440] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.355272][ T49] IPVS: stop unused estimator thread 0... [ 235.499588][ T8451] loop6: detected capacity change from 0 to 512 [ 235.543586][ T8451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.566168][ T8451] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.593403][ T8451] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1300: corrupted xattr block 33: invalid header [ 235.693769][ T8451] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 235.712006][ T8451] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.1300: corrupted xattr block 33: invalid header [ 235.759476][ T8451] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 235.929281][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.064973][ T8469] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 236.092854][ T8469] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 236.110784][ T8469] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1306: Corrupt directory, running e2fsck is recommended [ 236.140506][ T8469] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 236.151845][ T8469] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.1306: corrupted in-inode xattr: e_name out of bounds [ 236.167380][ T8469] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 236.168777][ T8469] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1306: couldn't read orphan inode 15 (err -117) [ 236.178414][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 236.178569][ C0] EXT4-fs (loop7): initial error at time 1777678687: ext4_iget_extra_inode:5128: inode 15 [ 236.179168][ C0] EXT4-fs (loop7): last error at time 1777678687: ext4_iget_extra_inode:5128: inode 15 [ 236.202736][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1305'. [ 236.229792][ T8469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.320543][ T6847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.353171][ T8474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.371416][ T8474] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 236.399354][ T8476] syz_tun: entered promiscuous mode [ 236.407515][ T8483] set_capacity_and_notify: 3 callbacks suppressed [ 236.407530][ T8483] loop7: detected capacity change from 0 to 512 [ 236.429497][ T8483] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.478028][ T8474] loop2: detected capacity change from 0 to 512 [ 236.509066][ T8474] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.566810][ T8474] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1307: bad orphan inode 131083 [ 236.620857][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1315'. [ 236.623150][ T8474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.708807][ T8507] netlink: 'syz.7.1314': attribute type 10 has an invalid length. [ 236.717756][ T8507] team0: Device ipvlan0 failed to register rx_handler [ 236.830111][ T8510] loop1: detected capacity change from 0 to 512 [ 236.994071][ T8510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.064850][ T8510] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.160838][ T8510] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1317: corrupted xattr block 33: invalid header [ 237.178454][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.183241][ T8510] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 237.194614][ T8520] netlink: 'syz.6.1320': attribute type 1 has an invalid length. [ 237.196785][ T28] audit: type=1400 audit(1777678688.463:1579): avc: denied { connect } for pid=8519 comm="syz.6.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.210220][ T8520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.231144][ T8510] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1317: corrupted xattr block 33: invalid header [ 237.244350][ T8520] bond1: (slave geneve2): making interface the new active one [ 237.252103][ T8520] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 237.279058][ T30] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 237.293313][ T30] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 237.304764][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'. [ 237.315343][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.321032][ T30] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 237.349802][ T30] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 237.363204][ T28] audit: type=1400 audit(1777678688.643:1580): avc: denied { bind } for pid=8519 comm="syz.6.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.384438][ T28] audit: type=1400 audit(1777678688.663:1581): avc: denied { write } for pid=8519 comm="syz.6.1320" path="socket:[23754]" dev="sockfs" ino=23754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.594704][ T8538] loop1: detected capacity change from 0 to 512 [ 237.751408][ T8538] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.980258][ T8549] loop1: detected capacity change from 0 to 1024 [ 237.993604][ T8549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.054604][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1330'. [ 238.075529][ T8549] netlink: 'syz.1.1329': attribute type 13 has an invalid length. [ 238.099313][ T8549] gretap0: refused to change device tx_queue_len [ 238.119509][ T8549] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 238.358704][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.478542][ T8568] FAULT_INJECTION: forcing a failure. [ 238.478542][ T8568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.494063][ T8568] CPU: 1 UID: 0 PID: 8568 Comm: syz.1.1335 Tainted: G W syzkaller #0 PREEMPT(full) [ 238.494095][ T8568] Tainted: [W]=WARN [ 238.494102][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.494114][ T8568] Call Trace: [ 238.494122][ T8568] [ 238.494130][ T8568] __dump_stack+0x1d/0x30 [ 238.494204][ T8568] dump_stack_lvl+0x95/0xd0 [ 238.494223][ T8568] dump_stack+0x15/0x1b [ 238.494241][ T8568] should_fail_ex+0x263/0x280 [ 238.494267][ T8568] should_fail+0xb/0x20 [ 238.494345][ T8568] should_fail_usercopy+0x1a/0x20 [ 238.494366][ T8568] _copy_from_iter+0xcf/0xea0 [ 238.494412][ T8568] ? alloc_pages_mpol+0x217/0x260 [ 238.494456][ T8568] copy_page_from_iter+0x161/0x1f0 [ 238.494477][ T8568] tun_get_user+0xbe3/0x27e0 [ 238.494524][ T8568] ? ref_tracker_alloc+0x1eb/0x2f0 [ 238.494547][ T8568] tun_chr_write_iter+0x15e/0x210 [ 238.494570][ T8568] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 238.494657][ T8568] vfs_write+0x5a6/0x9f0 [ 238.494762][ T8568] ksys_write+0xdc/0x1a0 [ 238.494786][ T8568] __x64_sys_write+0x40/0x50 [ 238.494811][ T8568] x64_sys_call+0x27e1/0x3020 [ 238.494859][ T8568] do_syscall_64+0x12c/0x3b0 [ 238.494882][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.494902][ T8568] RIP: 0033:0x7f6d1d25d60e [ 238.494962][ T8568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.495020][ T8568] RSP: 002b:00007f6d1bcf6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.495040][ T8568] RAX: ffffffffffffffda RBX: 00007f6d1bcf76c0 RCX: 00007f6d1d25d60e [ 238.495054][ T8568] RDX: 0000000000000042 RSI: 0000200000000040 RDI: 00000000000000c8 [ 238.495067][ T8568] RBP: 00007f6d1bcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.495152][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.495200][ T8568] R13: 00007f6d1d516038 R14: 00007f6d1d515fa0 R15: 00007ffca6da1938 [ 238.495215][ T8568] [ 238.713299][ T8569] xt_hashlimit: max too large, truncated to 1048576 [ 238.879404][ T28] audit: type=1400 audit(1777678690.153:1582): avc: denied { cpu } for pid=8573 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.944329][ T8578] tmpfs: Bad value for 'mpol' [ 239.022577][ T8578] loop6: detected capacity change from 0 to 4096 [ 239.036653][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'. [ 239.090926][ T8578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.153273][ T6664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.178647][ T8587] IPVS: Error connecting to the multicast addr [ 239.525508][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 239.534486][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 240.069825][ T8607] loop2: detected capacity change from 0 to 512 [ 240.082190][ T8607] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.145473][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1350'. [ 240.732572][ T8621] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 240.741451][ T8621] team0: Device ipvlan0 failed to register rx_handler [ 240.753203][ T8624] netlink: 'syz.2.1352': attribute type 10 has an invalid length. [ 240.762418][ T8624] team0: Device ipvlan0 failed to register rx_handler [ 241.208468][ T28] audit: type=1400 audit(1777678692.483:1583): avc: denied { bind } for pid=8629 comm="syz.7.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 241.257955][ T8647] loop2: detected capacity change from 0 to 512 [ 241.267058][ T8647] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.312397][ T8650] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 241.456282][ T28] audit: type=1400 audit(1777678692.733:1584): avc: denied { create } for pid=8667 comm="syz.7.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.540129][ T28] audit: type=1400 audit(1777678692.803:1585): avc: denied { create } for pid=8670 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.584014][ T8674] netlink: 'syz.7.1366': attribute type 10 has an invalid length. [ 241.594626][ T8674] team0: Device ipvlan0 failed to register rx_handler [ 241.634146][ T28] audit: type=1400 audit(1777678692.883:1586): avc: denied { write } for pid=8667 comm="syz.7.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 242.020962][ T8681] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 242.164213][ T8696] loop1: detected capacity change from 0 to 512 [ 242.174525][ T8696] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.223947][ T8701] Driver unsupported XDP return value 0 on prog (id 395) dev N/A, expect packet loss! [ 242.261667][ T8701] tipc: Enabling of bearer rejected, failed to enable media [ 242.508412][ T28] audit: type=1400 audit(1777678693.783:1587): avc: denied { search } for pid=8705 comm="syz.1.1376" name="/" dev="configfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.566217][ T28] audit: type=1400 audit(1777678693.783:1588): avc: denied { search } for pid=8705 comm="syz.1.1376" name="/" dev="configfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.618748][ T28] audit: type=1400 audit(1777678693.783:1589): avc: denied { read open } for pid=8705 comm="syz.1.1376" path="/" dev="configfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 242.931244][ T8727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8727 comm=syz.0.1382 [ 243.216853][ T28] audit: type=1400 audit(1777678694.493:1590): avc: denied { name_connect } for pid=8743 comm="syz.6.1390" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 243.348207][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1393'. [ 243.357169][ T8751] netem: incorrect gi model size [ 243.362091][ T8751] netem: change failed [ 243.389851][ T28] audit: type=1400 audit(1777678694.663:1591): avc: denied { unmount } for pid=6847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 243.485235][ T28] audit: type=1400 audit(1777678694.763:1592): avc: denied { sys_module } for pid=8752 comm="syz.7.1394" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 243.603152][ T8766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1400'. [ 243.706710][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 243.706737][ T28] audit: type=1400 audit(1777678694.983:1593): avc: denied { write } for pid=8777 comm="syz.0.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.770985][ T8784] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 243.813901][ T8788] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1412'. [ 243.869952][ T8788] netlink: 'syz.0.1412': attribute type 1 has an invalid length. [ 243.944350][ T8797] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1416'. [ 243.992277][ T28] audit: type=1400 audit(1777678695.273:1594): avc: denied { create } for pid=8803 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 244.157738][ T30] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.195873][ T28] audit: type=1400 audit(1777678695.473:1595): avc: denied { setopt } for pid=8836 comm="syz.0.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 244.223262][ T30] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.333086][ T30] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.366872][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.374166][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.381614][ T8792] bridge_slave_0: entered allmulticast mode [ 244.388237][ T8792] bridge_slave_0: entered promiscuous mode [ 244.397309][ T30] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.408882][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.416335][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.423940][ T28] audit: type=1400 audit(1777678695.703:1596): avc: denied { write } for pid=8870 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.428073][ T8792] bridge_slave_1: entered allmulticast mode [ 244.448141][ T8872] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1439'. [ 244.451769][ T8792] bridge_slave_1: entered promiscuous mode [ 244.475455][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.485811][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.532939][ T8792] team0: Port device team_slave_0 added [ 244.539454][ T30] bridge_slave_1: left allmulticast mode [ 244.545340][ T30] bridge_slave_1: left promiscuous mode [ 244.551201][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.569233][ T30] bridge_slave_0: left allmulticast mode [ 244.575267][ T30] bridge_slave_0: left promiscuous mode [ 244.581827][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.102660][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.112585][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.121997][ T30] bond0 (unregistering): Released all slaves [ 245.129655][ T8792] team0: Port device team_slave_1 added [ 245.142769][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1451'. [ 245.151963][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1451'. [ 245.178930][ T30] hsr_slave_0: left promiscuous mode [ 245.190320][ T30] hsr_slave_1: left promiscuous mode [ 245.205882][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.218112][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.227411][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.236087][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.296688][ T30] veth1_macvtap: left promiscuous mode [ 245.302390][ T30] veth0_macvtap: left promiscuous mode [ 245.308038][ T30] veth1_vlan: left promiscuous mode [ 245.313347][ T30] veth0_vlan: left promiscuous mode [ 245.339655][ T30] pim6reg2 (unregistering): left allmulticast mode [ 245.347345][ T30] pim6reg (unregistering): left allmulticast mode [ 245.385055][ T30] team0 (unregistering): Port device team_slave_1 removed [ 245.395516][ T30] team0 (unregistering): Port device team_slave_0 removed [ 245.425527][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.432627][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.459038][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.475679][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 245.484112][ T8926] netlink: 'syz.2.1459': attribute type 10 has an invalid length. [ 245.493040][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.500031][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.526333][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.545509][ T8926] team0: Port device veth0_to_hsr added [ 245.593876][ T8792] hsr_slave_0: entered promiscuous mode [ 245.601981][ T8792] hsr_slave_1: entered promiscuous mode [ 245.614211][ T8792] debugfs: 'hsr0' already exists in 'hsr' [ 245.623497][ T8792] Cannot create hsr debugfs directory [ 245.648401][ T8940] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1462'. [ 245.740114][ T30] IPVS: stop unused estimator thread 0... [ 245.746988][ T8955] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1465'. [ 245.804591][ T8792] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 245.819603][ T8792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.837635][ T8792] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 245.852527][ T8792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.875832][ T8792] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 245.902620][ T8792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.925705][ T8792] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 245.946215][ T8792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.964381][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 246.011976][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.032596][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.044144][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.051244][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.080383][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.087491][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.116602][ T8792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.258559][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 246.396189][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.684777][ T8792] veth0_vlan: entered promiscuous mode [ 246.711314][ T8792] veth1_vlan: entered promiscuous mode [ 246.728028][ T8792] veth0_macvtap: entered promiscuous mode [ 246.754653][ T8792] veth1_macvtap: entered promiscuous mode [ 246.795368][ T9092] netlink: 'syz.2.1487': attribute type 12 has an invalid length. [ 246.805378][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.836453][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.866613][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 246.877181][ T200] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.887663][ T200] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.897439][ T200] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.906915][ T200] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.439249][ T9128] netlink: 'syz.8.1500': attribute type 1 has an invalid length. [ 247.461990][ T9128] netlink: 'syz.8.1500': attribute type 2 has an invalid length. [ 247.699689][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 247.699702][ T28] audit: type=1400 audit(1777678698.973:1598): avc: denied { name_bind } for pid=9177 comm="syz.6.1514" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 247.778796][ T9193] openvswitch: netlink: Flow key attr not present in new flow. [ 247.923502][ T9216] sit0: entered allmulticast mode [ 247.943446][ T28] audit: type=1400 audit(1777678699.223:1599): avc: denied { setopt } for pid=9217 comm="syz.6.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.958146][ T9222] netlink: 'syz.0.1530': attribute type 2 has an invalid length. [ 247.971517][ T9216] sit0: entered promiscuous mode [ 247.978148][ T28] audit: type=1400 audit(1777678699.223:1600): avc: denied { write } for pid=9217 comm="syz.6.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.615395][ T9298] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 248.757593][ T9310] netlink: 'syz.8.1570': attribute type 2 has an invalid length. [ 248.766627][ T9310] __nla_validate_parse: 10 callbacks suppressed [ 248.766649][ T9310] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1570'. [ 248.783854][ T28] audit: type=1400 audit(1777678700.063:1601): avc: denied { setopt } for pid=9309 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.895743][ T28] audit: type=1400 audit(1777678700.173:1602): avc: denied { nlmsg_read } for pid=9321 comm="syz.6.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 249.000043][ T28] audit: type=1400 audit(1777678700.273:1603): avc: denied { read } for pid=9329 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.001203][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1579'. [ 249.123586][ T9330] netlink: 'syz.6.1579': attribute type 39 has an invalid length. [ 249.516455][ T9406] sit0: entered promiscuous mode [ 249.525505][ T9406] sit0: entered allmulticast mode [ 249.585462][ T9418] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.1619'. [ 249.857399][ T28] audit: type=1400 audit(1777678701.133:1604): avc: denied { read } for pid=9467 comm="syz.7.1644" laddr=172.20.20.10 lport=49111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.930182][ T9479] netlink: 'syz.0.1649': attribute type 6 has an invalid length. [ 249.945551][ T28] audit: type=1400 audit(1777678701.223:1605): avc: denied { create } for pid=9472 comm="syz.7.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 250.103277][ T28] audit: type=1400 audit(1777678701.383:1606): avc: denied { setopt } for pid=9500 comm="syz.6.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.122973][ T28] audit: type=1400 audit(1777678701.383:1607): avc: denied { read } for pid=9500 comm="syz.6.1659" lport=18438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.171427][ T9506] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1661'. [ 250.247395][ T9516] netlink: 'syz.7.1666': attribute type 1 has an invalid length. [ 250.379013][ T9533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1675'. [ 250.389206][ T9533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1675'. [ 250.506875][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1683'. [ 250.516903][ T9551] netem: incorrect gi model size [ 250.522198][ T9551] netem: change failed [ 250.557491][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1687'. [ 250.624488][ T9567] netlink: 822 bytes leftover after parsing attributes in process `syz.2.1691'. [ 250.816695][ T9596] sit0: left promiscuous mode [ 250.836288][ T9596] sit0: entered promiscuous mode [ 251.046502][ T9615] syzkaller0: entered promiscuous mode [ 251.055252][ T9615] syzkaller0: entered allmulticast mode [ 251.210332][ T9612] syz.2.1713 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 251.229758][ T9612] CPU: 1 UID: 0 PID: 9612 Comm: syz.2.1713 Tainted: G W syzkaller #0 PREEMPT(full) [ 251.229839][ T9612] Tainted: [W]=WARN [ 251.229844][ T9612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.229862][ T9612] Call Trace: [ 251.229873][ T9612] [ 251.229880][ T9612] __dump_stack+0x1d/0x30 [ 251.229900][ T9612] dump_stack_lvl+0x95/0xd0 [ 251.229915][ T9612] dump_stack+0x15/0x1b [ 251.229945][ T9612] dump_header+0x80/0x240 [ 251.229962][ T9612] oom_kill_process+0x295/0x350 [ 251.229987][ T9612] out_of_memory+0x97d/0xb80 [ 251.230010][ T9612] try_charge_memcg+0x62f/0xa10 [ 251.230114][ T9612] ? radix_tree_lookup+0xfa/0x140 [ 251.230146][ T9612] charge_memcg+0x6d/0x120 [ 251.230167][ T9612] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 251.230220][ T9612] __swap_cache_prepare_and_add+0x69/0x4a0 [ 251.230296][ T9612] ? alloc_pages_mpol+0x217/0x260 [ 251.230318][ T9612] swap_cache_alloc_folio+0xa2/0x120 [ 251.230332][ T9612] swap_cluster_readahead+0x25f/0x3c0 [ 251.230401][ T9612] swapin_readahead+0xde/0x840 [ 251.230413][ T9612] ? _raw_spin_unlock+0x9/0x30 [ 251.230431][ T9612] ? swap_put_entries_cluster+0x46c/0x490 [ 251.230512][ T9612] ? __rcu_read_unlock+0x4e/0x70 [ 251.230524][ T9612] ? swap_cache_get_folio+0x1e0/0x1f0 [ 251.230536][ T9612] do_swap_page+0x31e/0x2180 [ 251.230618][ T9612] ? css_rstat_updated+0xbb/0x280 [ 251.230638][ T9612] ? __rcu_read_lock+0x36/0x50 [ 251.230654][ T9612] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 251.230674][ T9612] handle_mm_fault+0xb2e/0x2e70 [ 251.230724][ T9612] ? vma_start_read+0x1c7/0x2c0 [ 251.230795][ T9612] do_user_addr_fault+0x62f/0x1050 [ 251.230859][ T9612] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 251.230881][ T9612] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 251.230895][ T9612] ? trace_page_fault_user+0x1f/0xa0 [ 251.230982][ T9612] exc_page_fault+0x62/0xa0 [ 251.231031][ T9612] asm_exc_page_fault+0x26/0x30 [ 251.231042][ T9612] RIP: 0033:0x7f11e1b97f38 [ 251.231088][ T9612] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 251.231098][ T9612] RSP: 002b:00007ffc61da4370 EFLAGS: 00010246 [ 251.231158][ T9612] RAX: 0000000000000000 RBX: 0000555576a6a500 RCX: 00007f11e1b9d60e [ 251.231166][ T9612] RDX: 00007ffc61da43c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.231172][ T9612] RBP: 00007f11e1e57da0 R08: 0000000000000000 R09: 0000000000000000 [ 251.231259][ T9612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003d778 [ 251.231266][ T9612] R13: 00007f11e1e5609c R14: 000000000003d49d R15: 00007f11e1e56090 [ 251.231277][ T9612] [ 251.490400][ T9612] memory: usage 298100kB, limit 307200kB, failcnt 902 [ 251.497867][ T9612] memory+swap: usage 288524kB, limit 9007199254740988kB, failcnt 0 [ 251.506536][ T9612] kmem: usage 275076kB, limit 9007199254740988kB, failcnt 0 [ 251.514084][ T9612] Memory cgroup stats for /syz2: [ 251.514312][ T9612] cache 0 [ 251.522378][ T9612] rss 24576 [ 251.525518][ T9612] shmem 0 [ 251.528550][ T9612] mapped_file 0 [ 251.534430][ T9612] dirty 0 [ 251.537401][ T9612] writeback 0 [ 251.540992][ T9612] workingset_refault_anon 13 [ 251.545706][ T9612] workingset_refault_file 42 [ 251.550322][ T9612] swap 1110016 [ 251.553743][ T9612] swapcached 1212416 [ 251.557723][ T9612] pgpgin 156463 [ 251.561245][ T9612] pgpgout 156456 [ 251.564810][ T9612] pgfault 212522 [ 251.568467][ T9612] pgmajfault 14 [ 251.571974][ T9612] inactive_anon 0 [ 251.575662][ T9612] active_anon 24576 [ 251.579622][ T9612] inactive_file 0 [ 251.583734][ T9612] active_file 0 [ 251.587321][ T9612] unevictable 0 [ 251.591008][ T9612] hierarchical_memory_limit 314572800 [ 251.596456][ T9612] hierarchical_memsw_limit 9223372036854771712 [ 251.602798][ T9612] total_cache 0 [ 251.606291][ T9612] total_rss 24576 [ 251.609943][ T9612] total_shmem 0 [ 251.615885][ T9612] total_mapped_file 0 [ 251.619980][ T9612] total_dirty 0 [ 251.623966][ T9612] total_writeback 0 [ 251.630768][ T9612] total_workingset_refault_anon 13 [ 251.636137][ T9612] total_workingset_refault_file 42 [ 251.643262][ T9612] total_swap 1110016 [ 251.647345][ T9612] total_swapcached 1212416 [ 251.652139][ T9612] total_pgpgin 156463 [ 251.656195][ T9612] total_pgpgout 156456 [ 251.660374][ T9612] total_pgfault 212522 [ 251.665225][ T9612] total_pgmajfault 14 [ 251.669408][ T9612] total_inactive_anon 0 [ 251.673845][ T9612] total_active_anon 24576 [ 251.678221][ T9612] total_inactive_file 0 [ 251.682632][ T9612] total_active_file 0 [ 251.686718][ T9612] total_unevictable 0 [ 251.691166][ T9612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1713,pid=9612,uid=0 [ 251.706462][ T9612] Memory cgroup out of memory: Killed process 9612 (syz.2.1713) total-vm:94168kB, anon-rss:1256kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 251.919693][ T9673] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 251.930817][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1739'. [ 251.942656][ T9673] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 251.950737][ T9673] netlink: 'syz.0.1739': attribute type 2 has an invalid length. [ 252.092424][ T9705] sit0: entered allmulticast mode [ 252.121381][ T9705] sit0: entered promiscuous mode [ 252.871627][ T9771] netlink: 'syz.7.1785': attribute type 21 has an invalid length. [ 253.619360][ T9905] netlink: 'syz.2.1839': attribute type 2 has an invalid length. [ 253.784576][ T9926] __nla_validate_parse: 12 callbacks suppressed [ 253.784594][ T9926] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1860'. [ 254.075244][ T9959] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1876'. [ 254.186250][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1883'. [ 254.251273][ T9982] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1885'. [ 254.311961][ T9985] netlink: 'syz.6.1886': attribute type 7 has an invalid length. [ 254.498252][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1897'. [ 254.767989][ T28] audit: type=1400 audit(1777678706.043:1608): avc: denied { read } for pid=10031 comm="syz.8.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.891308][T10022] syz.2.1903 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 254.912494][T10042] netlink: 'syz.6.1911': attribute type 1 has an invalid length. [ 254.930541][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.2.1903 Tainted: G W syzkaller #0 PREEMPT(full) [ 254.930571][T10022] Tainted: [W]=WARN [ 254.930640][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.930651][T10022] Call Trace: [ 254.930658][T10022] [ 254.930666][T10022] __dump_stack+0x1d/0x30 [ 254.930687][T10022] dump_stack_lvl+0x95/0xd0 [ 254.930704][T10022] dump_stack+0x15/0x1b [ 254.930720][T10022] dump_header+0x80/0x240 [ 254.930741][T10022] oom_kill_process+0x295/0x350 [ 254.930763][T10022] out_of_memory+0x97d/0xb80 [ 254.930792][T10022] try_charge_memcg+0x62f/0xa10 [ 254.930890][T10022] ? radix_tree_lookup+0xfa/0x140 [ 254.930920][T10022] charge_memcg+0x6d/0x120 [ 254.930970][T10022] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 254.931064][T10022] __swap_cache_prepare_and_add+0x69/0x4a0 [ 254.931088][T10022] ? alloc_pages_mpol+0x217/0x260 [ 254.931108][T10022] swap_cache_alloc_folio+0xa2/0x120 [ 254.931186][T10022] swap_cluster_readahead+0x25f/0x3c0 [ 254.931243][T10022] swapin_readahead+0xde/0x840 [ 254.931260][T10022] ? _raw_spin_unlock+0x9/0x30 [ 254.931279][T10022] ? swap_put_entries_cluster+0x46c/0x490 [ 254.931298][T10022] ? __entry_text_end+0x1d548/0x102179 [ 254.931329][T10022] ? __rcu_read_unlock+0x4e/0x70 [ 254.931348][T10022] ? swap_cache_get_folio+0x1e0/0x1f0 [ 254.931396][T10022] do_swap_page+0x31e/0x2180 [ 254.931492][T10022] ? css_rstat_updated+0xbb/0x280 [ 254.931510][T10022] ? __rcu_read_lock+0x36/0x50 [ 254.931525][T10022] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 254.931542][T10022] handle_mm_fault+0xb2e/0x2e70 [ 254.931571][T10022] ? vma_start_read+0x1c7/0x2c0 [ 254.931618][T10022] do_user_addr_fault+0x62f/0x1050 [ 254.931643][T10022] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 254.931662][T10022] ? trace_page_fault_user+0x1f/0xa0 [ 254.931739][T10022] exc_page_fault+0x62/0xa0 [ 254.931758][T10022] asm_exc_page_fault+0x26/0x30 [ 254.931782][T10022] RIP: 0033:0x7f11e1aaa750 [ 254.931798][T10022] Code: c4 4c 0f 42 e0 83 3d 7a d6 3a 00 00 0f 8e d9 fd ff ff e8 f3 7d fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 3e af ed 00 e8 03 00 00 48 8d 1d 3f b8 3a 00 e8 8a 31 13 00 [ 254.931840][T10022] RSP: 002b:00007ffc61da43f0 EFLAGS: 00010216 [ 254.931855][T10022] RAX: 000000000003e37e RBX: 00007f11e1e57da0 RCX: 000000000003e030 [ 254.931866][T10022] RDX: 000000000000034e RSI: 00007ffc61da43d0 RDI: 0000000000000001 [ 254.931876][T10022] RBP: 00007f11e1e57da0 R08: 0000000032713679 R09: 3fffffffffffffff [ 254.931888][T10022] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000003e5b1 [ 254.931901][T10022] R13: 00007f11e1e5609c R14: 000000000003e2d6 R15: 00007f11e1e56090 [ 254.931950][T10022] [ 254.960698][T10042] netlink: 'syz.6.1911': attribute type 2 has an invalid length. [ 255.001034][T10022] memory: usage 245844kB, limit 307200kB, failcnt 1234 [ 255.206717][T10022] memory+swap: usage 246908kB, limit 9007199254740988kB, failcnt 0 [ 255.263758][T10022] kmem: usage 185844kB, limit 9007199254740988kB, failcnt 0 [ 255.291783][T10022] Memory cgroup stats for /syz2: [ 255.292767][T10022] cache 4096 [ 255.318045][T10022] rss 28672 [ 255.329274][T10022] shmem 0 [ 255.356010][T10022] mapped_file 4096 [ 255.369808][T10022] dirty 0 [ 255.381209][T10022] writeback 8192 [ 255.398414][T10022] workingset_refault_anon 54 [ 255.419244][T10022] workingset_refault_file 202 [ 255.444880][T10022] swap 1089536 [ 255.456982][T10022] swapcached 1486848 [ 255.479237][T10022] pgpgin 157583 [ 255.492222][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1924'. [ 255.505287][T10022] pgpgout 157570 [ 255.517879][T10022] pgfault 214937 [ 255.528793][T10077] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1927'. [ 255.539428][T10022] pgmajfault 38 [ 255.549212][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1924'. [ 255.561364][T10022] inactive_anon 8192 [ 255.569713][T10022] active_anon 40960 [ 255.574267][T10079] sit0: left promiscuous mode [ 255.580986][T10022] inactive_file 0 [ 255.597935][T10022] active_file 4096 [ 255.608513][T10022] unevictable 0 [ 255.619717][T10022] hierarchical_memory_limit 314572800 [ 255.643663][T10022] hierarchical_memsw_limit 9223372036854771712 [ 255.662112][T10022] total_cache 4096 [ 255.674639][T10022] total_rss 28672 [ 255.693563][T10022] total_shmem 0 [ 255.705745][T10022] total_mapped_file 4096 [ 255.710040][T10088] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 255.727625][T10022] total_dirty 0 [ 255.736655][T10022] total_writeback 8192 [ 255.745365][T10022] total_workingset_refault_anon 54 [ 255.757885][T10022] total_workingset_refault_file 202 [ 255.773634][T10022] total_swap 1089536 [ 255.803041][T10022] total_swapcached 1486848 [ 255.826551][T10022] total_pgpgin 157583 [ 255.847584][T10022] total_pgpgout 157570 [ 255.871360][T10022] total_pgfault 214937 [ 255.890169][T10022] total_pgmajfault 38 [ 255.903300][T10022] total_inactive_anon 8192 [ 255.911080][T10022] total_active_anon 40960 [ 255.915630][T10022] total_inactive_file 0 [ 255.919819][T10022] total_active_file 4096 [ 255.932583][T10022] total_unevictable 0 [ 255.937465][T10022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1903,pid=10022,uid=0 [ 255.957359][T10022] Memory cgroup out of memory: Killed process 10022 (syz.2.1903) total-vm:94168kB, anon-rss:1256kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 256.416028][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 256.433899][T10146] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1960'. [ 257.124198][T10201] sit0: entered promiscuous mode [ 257.467419][T10245] netlink: 'syz.7.2002': attribute type 10 has an invalid length. [ 257.561507][T10245] team0: Device wg2 is of different type [ 257.870744][T10294] netlink: 'syz.2.2022': attribute type 2 has an invalid length. [ 257.946045][T10275] syz.0.2015 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 257.970507][T10275] CPU: 0 UID: 0 PID: 10275 Comm: syz.0.2015 Tainted: G W syzkaller #0 PREEMPT(full) [ 257.970533][T10275] Tainted: [W]=WARN [ 257.970603][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.970614][T10275] Call Trace: [ 257.970626][T10275] [ 257.970632][T10275] __dump_stack+0x1d/0x30 [ 257.970655][T10275] dump_stack_lvl+0x95/0xd0 [ 257.970674][T10275] dump_stack+0x15/0x1b [ 257.970715][T10275] dump_header+0x80/0x240 [ 257.970734][T10275] oom_kill_process+0x295/0x350 [ 257.970825][T10275] out_of_memory+0x97d/0xb80 [ 257.970850][T10275] try_charge_memcg+0x62f/0xa10 [ 257.970930][T10275] ? radix_tree_lookup+0xfa/0x140 [ 257.970964][T10275] charge_memcg+0x6d/0x120 [ 257.970984][T10275] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 257.971067][T10275] __swap_cache_prepare_and_add+0x69/0x4a0 [ 257.971089][T10275] ? alloc_pages_mpol+0x217/0x260 [ 257.971116][T10275] swap_cache_alloc_folio+0xa2/0x120 [ 257.971211][T10275] swap_cluster_readahead+0x25f/0x3c0 [ 257.971280][T10275] swapin_readahead+0xde/0x840 [ 257.971296][T10275] ? _raw_spin_unlock+0x9/0x30 [ 257.971317][T10275] ? swap_put_entries_cluster+0x46c/0x490 [ 257.971378][T10275] ? __rcu_read_unlock+0x4e/0x70 [ 257.971395][T10275] ? swap_cache_get_folio+0x1e0/0x1f0 [ 257.971445][T10275] do_swap_page+0x31e/0x2180 [ 257.971467][T10275] ? css_rstat_updated+0xbb/0x280 [ 257.971554][T10275] ? __rcu_read_lock+0x36/0x50 [ 257.971571][T10275] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 257.971669][T10275] handle_mm_fault+0xb2e/0x2e70 [ 257.971693][T10275] ? vma_start_read+0x1c7/0x2c0 [ 257.971724][T10275] do_user_addr_fault+0x62f/0x1050 [ 257.971797][T10275] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 257.971824][T10275] ? trace_page_fault_user+0x1f/0xa0 [ 257.971900][T10275] exc_page_fault+0x62/0xa0 [ 257.971919][T10275] asm_exc_page_fault+0x26/0x30 [ 257.971962][T10275] RIP: 0033:0x7f453564a78c [ 257.971975][T10275] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 257.971989][T10275] RSP: 002b:00007fff99a41f00 EFLAGS: 00010202 [ 257.972004][T10275] RAX: 0000000000000000 RBX: 00007f45359f5fa0 RCX: 000055557f2bc808 [ 257.972031][T10275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.972043][T10275] RBP: 00007f45359f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 257.972094][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003f1f4 [ 257.972106][T10275] R13: 00007f45359f609c R14: 000000000003ef18 R15: 00007f45359f6090 [ 257.972124][T10275] [ 257.972263][T10275] memory: usage 307200kB, limit 307200kB, failcnt 4733 [ 258.235921][T10275] memory+swap: usage 107072kB, limit 9007199254740988kB, failcnt 0 [ 258.244370][T10275] kmem: usage 99500kB, limit 9007199254740988kB, failcnt 0 [ 258.251683][T10275] Memory cgroup stats for /syz0: [ 258.269946][T10275] cache 0 [ 258.281871][T10275] rss 24576 [ 258.285088][T10275] shmem 0 [ 258.288092][T10275] mapped_file 0 [ 258.292077][T10275] dirty 0 [ 258.295221][T10275] writeback 4096 [ 258.298947][T10275] workingset_refault_anon 620 [ 258.306678][T10275] workingset_refault_file 2315 [ 258.311806][T10275] swap 1409024 [ 258.319300][T10320] netlink: 'syz.2.2033': attribute type 2 has an invalid length. [ 258.330042][T10320] netlink: 'syz.2.2033': attribute type 8 has an invalid length. [ 258.351407][T10275] swapcached 30978048 [ 258.362408][T10275] pgpgin 217518 [ 258.373955][T10275] pgpgout 217504 [ 258.384976][T10275] pgfault 250432 [ 258.395648][T10275] pgmajfault 531 [ 258.408225][T10275] inactive_anon 8192 [ 258.423819][T10275] active_anon 49152 [ 258.433736][T10275] inactive_file 0 [ 258.440674][T10275] active_file 0 [ 258.453658][T10275] unevictable 0 [ 258.462520][T10275] hierarchical_memory_limit 314572800 [ 258.479163][T10275] hierarchical_memsw_limit 9223372036854771712 [ 258.502848][T10275] total_cache 0 [ 258.510521][T10275] total_rss 24576 [ 258.520352][T10275] total_shmem 0 [ 258.526535][T10275] total_mapped_file 0 [ 258.536063][T10275] total_dirty 0 [ 258.545930][T10275] total_writeback 4096 [ 258.554277][T10275] total_workingset_refault_anon 620 [ 258.560289][T10275] total_workingset_refault_file 2315 [ 258.565638][T10275] total_swap 1409024 [ 258.569595][T10275] total_swapcached 30978048 [ 258.574160][T10275] total_pgpgin 217518 [ 258.578192][T10275] total_pgpgout 217504 [ 258.582299][T10275] total_pgfault 250432 [ 258.586398][T10275] total_pgmajfault 531 [ 258.590470][T10275] total_inactive_anon 8192 [ 258.595088][T10275] total_active_anon 49152 [ 258.599520][T10275] total_inactive_file 0 [ 258.603913][T10275] total_active_file 0 [ 258.607911][T10275] total_unevictable 0 [ 258.612141][T10275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2015,pid=10275,uid=0 [ 258.626989][T10275] Memory cgroup out of memory: Killed process 10275 (syz.0.2015) total-vm:94168kB, anon-rss:1256kB, file-rss:21648kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 259.632058][T10423] __nla_validate_parse: 5 callbacks suppressed [ 259.632075][T10423] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2065'. [ 260.263012][T10490] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2093'. [ 262.084103][T10634] syzkaller0: entered promiscuous mode [ 262.098121][T10634] syzkaller0: entered allmulticast mode [ 262.155620][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2168'. [ 262.255929][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'. [ 262.500960][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2188'. [ 263.565421][T10740] netlink: 2164 bytes leftover after parsing attributes in process `syz.8.2208'. [ 263.752518][ T28] audit: type=1400 audit(1777678715.023:1609): avc: denied { ioctl } for pid=10773 comm="syz.8.2224" path="socket:[31254]" dev="sockfs" ino=31254 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.785219][ T28] audit: type=1400 audit(1777678715.063:1610): avc: denied { create } for pid=10773 comm="syz.8.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 263.810690][T10775] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2224'. [ 264.011891][T10812] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2239'. [ 264.281914][T10863] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 264.715110][T10925] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2293'. [ 264.726098][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2292'. [ 264.920936][T10955] netlink: 822 bytes leftover after parsing attributes in process `syz.0.2308'. [ 265.250345][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2327'. [ 265.647321][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2350'. [ 265.931505][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2365'. [ 266.015959][T11083] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 266.549663][T11143] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 266.568326][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2396'. [ 266.581407][T11143] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2393'. [ 268.508490][T11273] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2457'. [ 268.528530][T11268] netlink: 'syz.7.2455': attribute type 1 has an invalid length. [ 268.558351][T11273] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2457'. [ 270.002806][ T28] audit: type=1400 audit(1777678721.283:1611): avc: denied { unmount } for pid=6847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 270.142783][T11408] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 270.221123][T11412] __nla_validate_parse: 3 callbacks suppressed [ 270.221138][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2523'. [ 270.294621][T11418] Set syz1 is full, maxelem 65536 reached [ 270.656398][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.677869][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.685347][T11424] bridge_slave_0: entered allmulticast mode [ 270.708566][T11424] bridge_slave_0: entered promiscuous mode [ 270.729190][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.737407][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.744725][T11424] bridge_slave_1: entered allmulticast mode [ 270.751445][T11424] bridge_slave_1: entered promiscuous mode [ 270.791530][T11424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.803400][T11424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.824523][T11424] team0: Port device team_slave_0 added [ 270.832313][T11424] team0: Port device team_slave_1 added [ 270.848590][T11424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.855662][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.882025][T11424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.894157][T11424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.901333][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.927473][T11424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.957612][T11424] hsr_slave_0: entered promiscuous mode [ 270.964036][T11424] hsr_slave_1: entered promiscuous mode [ 270.969997][T11424] debugfs: 'hsr0' already exists in 'hsr' [ 270.976063][T11424] Cannot create hsr debugfs directory [ 271.924651][T11424] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.983018][T11424] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.057253][T11424] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.196505][T11424] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.287164][T11424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.303476][T11424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.311332][T11424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.322940][T11424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.332997][T11424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.347624][T11424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.356185][T11424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.371449][T11424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.419832][T11424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.435948][T11424] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.446561][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.453717][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.471745][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.478906][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.507102][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2570'. [ 272.602398][T11424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.684225][T11424] veth0_vlan: entered promiscuous mode [ 272.693452][T11424] veth1_vlan: entered promiscuous mode [ 272.709490][T11424] veth0_macvtap: entered promiscuous mode [ 272.716874][T11424] veth1_macvtap: entered promiscuous mode [ 272.728350][T11424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.738301][T11424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.755970][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.764818][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.774371][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.783293][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.830802][T11568] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2528'. [ 272.880171][T11576] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2581'. [ 272.998266][T11590] netlink: 'syz.2.2587': attribute type 1 has an invalid length. [ 273.006292][T11590] netlink: 'syz.2.2587': attribute type 2 has an invalid length. [ 273.040315][T11593] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2588'. [ 273.120152][T11604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2593'. [ 273.268845][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2605'. [ 273.276876][ T28] audit: type=1400 audit(1777678724.543:1612): avc: denied { ioctl } for pid=11630 comm="syz.8.2607" path="socket:[34609]" dev="sockfs" ino=34609 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 273.312648][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2605'. [ 273.313215][T11632] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2606'. [ 273.352173][ T28] audit: type=1400 audit(1777678724.633:1613): avc: denied { create } for pid=11636 comm="syz.8.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 273.381623][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2605'. [ 274.280892][T11745] netlink: 'syz.7.2653': attribute type 1 has an invalid length. [ 274.311781][T11745] netlink: 'syz.7.2653': attribute type 2 has an invalid length. [ 275.616411][T11764] __nla_validate_parse: 6 callbacks suppressed [ 275.616424][T11764] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2661'. [ 275.834212][T11764] netlink: 'syz.0.2661': attribute type 10 has an invalid length. [ 275.849935][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2669'. [ 275.908607][T11764] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.763751][T11834] netlink: 'syz.2.2684': attribute type 11 has an invalid length. [ 278.879088][T11860] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2692'. [ 279.107456][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 279.209431][T11906] netlink: 352 bytes leftover after parsing attributes in process `syz.6.2710'. [ 280.097823][T11950] netlink: 'syz.2.2731': attribute type 7 has an invalid length. [ 280.468871][T11998] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2753'. [ 280.664491][T12027] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2767'. [ 281.609333][ T28] audit: type=1400 audit(1777678732.883:1614): avc: denied { create } for pid=12062 comm="syz.8.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 282.037339][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2826'. [ 282.381041][T12195] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2846'. [ 282.414581][T12199] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2849'. [ 282.424161][T12199] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2849'. [ 282.584443][T12224] netlink: 'syz.6.2861': attribute type 10 has an invalid length. [ 282.608396][T12224] team0: Port device vlan1 added [ 282.652758][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2865'. [ 283.099971][ T28] audit: type=1400 audit(1777678734.373:1615): avc: denied { write } for pid=12307 comm="syz.0.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 283.419324][ T28] audit: type=1400 audit(1777678734.693:1616): avc: denied { ioctl } for pid=12347 comm="syz.6.2919" path="socket:[37172]" dev="sockfs" ino=37172 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 283.467005][ T6847] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 283.478109][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 283.478141][ T6847] Tainted: [W]=WARN [ 283.478148][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.478160][ T6847] Call Trace: [ 283.478167][ T6847] [ 283.478175][ T6847] __dump_stack+0x1d/0x30 [ 283.478197][ T6847] dump_stack_lvl+0x95/0xd0 [ 283.478265][ T6847] dump_stack+0x15/0x1b [ 283.478283][ T6847] dump_header+0x80/0x240 [ 283.478350][ T6847] oom_kill_process+0x295/0x350 [ 283.478378][ T6847] out_of_memory+0x97d/0xb80 [ 283.478453][ T6847] try_charge_memcg+0x62f/0xa10 [ 283.478480][ T6847] charge_memcg+0x6d/0x120 [ 283.478575][ T6847] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 283.478596][ T6847] __swap_cache_prepare_and_add+0x69/0x4a0 [ 283.478616][ T6847] ? alloc_pages_mpol+0x217/0x260 [ 283.478666][ T6847] swap_cache_alloc_folio+0xa2/0x120 [ 283.478689][ T6847] swap_cluster_readahead+0x25f/0x3c0 [ 283.478720][ T6847] swapin_readahead+0xde/0x840 [ 283.478741][ T6847] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 283.478807][ T6847] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 283.478829][ T6847] ? __rcu_read_unlock+0x4e/0x70 [ 283.478867][ T6847] ? swap_cache_get_folio+0x1e0/0x1f0 [ 283.478905][ T6847] do_swap_page+0x31e/0x2180 [ 283.478927][ T6847] ? __schedule+0x936/0xd20 [ 283.478950][ T6847] ? __rcu_read_lock+0x36/0x50 [ 283.478966][ T6847] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 283.478990][ T6847] handle_mm_fault+0xb2e/0x2e70 [ 283.479014][ T6847] ? vma_start_read+0x1c7/0x2c0 [ 283.479127][ T6847] do_user_addr_fault+0x62f/0x1050 [ 283.479151][ T6847] ? trace_page_fault_user+0x1f/0xa0 [ 283.479177][ T6847] exc_page_fault+0x62/0xa0 [ 283.479195][ T6847] asm_exc_page_fault+0x26/0x30 [ 283.479228][ T6847] RIP: 0033:0x7fad09c57f57 [ 283.479242][ T6847] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 283.479257][ T6847] RSP: 002b:00007fffb91dc1d0 EFLAGS: 00010202 [ 283.479270][ T6847] RAX: 0000000000000000 RBX: 00005555660be500 RCX: 00007fad09c57f57 [ 283.479342][ T6847] RDX: 00007fffb91dc210 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.479354][ T6847] RBP: 00007fffb91dc27c R08: 0000000000000000 R09: 0000000000000000 [ 283.479366][ T6847] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 283.479379][ T6847] R13: 00000000000927c0 R14: 0000000000045207 R15: 00007fffb91dc2d0 [ 283.479397][ T6847] [ 283.479452][ T6847] memory: usage 307200kB, limit 307200kB, failcnt 2491 [ 283.733387][ T6847] memory+swap: usage 46208kB, limit 9007199254740988kB, failcnt 0 [ 283.741406][ T6847] kmem: usage 45084kB, limit 9007199254740988kB, failcnt 0 [ 283.771106][ T6847] Memory cgroup stats for /syz7: [ 283.771418][ T6847] cache 0 [ 283.780216][ T6847] rss 24576 [ 283.783572][ T6847] shmem 0 [ 283.786643][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2923'. [ 283.795715][ T6847] mapped_file 0 [ 283.799354][ T6847] dirty 0 [ 283.802936][ T6847] writeback 0 [ 283.806276][ T6847] workingset_refault_anon 76 [ 283.810911][ T6847] workingset_refault_file 0 [ 283.815522][ T6847] swap 847872 [ 283.818870][ T6847] swapcached 1212416 [ 283.822844][ T6847] pgpgin 175268 [ 283.826369][ T6847] pgpgout 175261 [ 283.829964][ T6847] pgfault 115498 [ 283.833706][ T6847] pgmajfault 58 [ 283.837605][ T6847] inactive_anon 0 [ 283.841903][ T6847] active_anon 28672 [ 283.848117][ T6847] inactive_file 0 [ 283.852103][ T6847] active_file 0 [ 283.855594][ T6847] unevictable 0 [ 283.859137][ T6847] hierarchical_memory_limit 314572800 [ 283.864680][ T6847] hierarchical_memsw_limit 9223372036854771712 [ 283.870873][ T6847] total_cache 0 [ 283.874337][ T6847] total_rss 24576 [ 283.877977][ T6847] total_shmem 0 [ 283.881527][ T6847] total_mapped_file 0 [ 283.885531][ T6847] total_dirty 0 [ 283.889031][ T6847] total_writeback 0 [ 283.893362][ T6847] total_workingset_refault_anon 76 [ 283.898540][ T6847] total_workingset_refault_file 0 [ 283.905209][ T6847] total_swap 847872 [ 283.909109][ T6847] total_swapcached 1212416 [ 283.913816][ T6847] total_pgpgin 175268 [ 283.917952][ T6847] total_pgpgout 175261 [ 283.922351][ T6847] total_pgfault 115498 [ 283.926575][ T6847] total_pgmajfault 58 [ 283.931306][ T6847] total_inactive_anon 0 [ 283.937659][ T6847] total_active_anon 28672 [ 283.944471][ T6847] total_inactive_file 0 [ 283.950072][ T6847] total_active_file 0 [ 283.954339][ T6847] total_unevictable 0 [ 283.958480][ T6847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2905,pid=12318,uid=0 [ 283.974318][ T6847] Memory cgroup out of memory: Killed process 12318 (syz.7.2905) total-vm:96084kB, anon-rss:1260kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 284.225547][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'. [ 284.631435][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2940'. [ 284.694075][T12406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2943'. [ 284.788387][T12420] netlink: 'syz.2.2947': attribute type 27 has an invalid length. [ 285.638715][T12547] netlink: 'syz.0.3008': attribute type 12 has an invalid length. [ 285.851341][T12582] __nla_validate_parse: 4 callbacks suppressed [ 285.851354][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3026'. [ 286.118094][T12605] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3035'. [ 287.768306][T12753] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3107'. [ 287.799948][T12755] tap0: tun_chr_ioctl cmd 1074025677 [ 287.805919][T12755] tap0: linktype set to 6 [ 287.855768][T12759] netlink: 6068 bytes leftover after parsing attributes in process `syz.6.3110'. [ 287.956021][T12777] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3119'. [ 291.805601][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 292.313518][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3220'. [ 292.630893][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3233'. [ 292.733557][T13063] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3236'. [ 292.971871][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3242'. [ 293.156883][T13095] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3250'. [ 293.205346][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3251'. [ 293.234935][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 293.268842][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 293.306497][T13097] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3251'. [ 296.502660][T13393] netem: change failed [ 296.816764][T13430] __nla_validate_parse: 12 callbacks suppressed [ 296.816780][T13430] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3405'. [ 296.962667][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3415'. [ 296.979533][T13452] netlink: 'syz.6.3416': attribute type 1 has an invalid length. [ 296.988199][T13452] netlink: 'syz.6.3416': attribute type 2 has an invalid length. [ 297.004048][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3417'. [ 297.034441][T13458] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3418'. [ 297.076447][T13468] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3420'. [ 297.181705][T13485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3427'. [ 297.207873][T13489] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3429'. [ 297.260999][T13497] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3433'. [ 297.476508][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3446'. [ 297.913378][ T3436] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.982287][ T3436] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.013119][ T3436] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.062662][ T3436] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.383167][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3461'. [ 298.806972][ T3436] bond0 (unregistering): Released all slaves [ 298.818740][ T3436] bond1 (unregistering): Released all slaves [ 298.846216][T13540] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.853391][T13540] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.863578][T13540] bridge_slave_0: entered allmulticast mode [ 298.870124][T13540] bridge_slave_0: entered promiscuous mode [ 298.883650][ T3436] hsr_slave_0: left promiscuous mode [ 298.892589][ T3436] hsr_slave_1: left promiscuous mode [ 298.913180][ T3436] veth1_macvtap: left promiscuous mode [ 298.920199][ T3436] veth0_macvtap: left promiscuous mode [ 298.925842][ T3436] veth1_vlan: left promiscuous mode [ 299.078746][ T3436] pim6reg (unregistering): left allmulticast mode [ 299.095586][ T3436] pim6reg2 (unregistering): left allmulticast mode [ 299.157796][ T3436] team0 (unregistering): Port device veth0_to_hsr removed [ 299.200554][T13540] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.207749][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.214957][T13540] bridge_slave_1: entered allmulticast mode [ 299.222620][T13540] bridge_slave_1: entered promiscuous mode [ 299.242168][T13540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.252649][T13540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.274027][T13540] team0: Port device team_slave_0 added [ 299.280801][T13540] team0: Port device team_slave_1 added [ 299.296079][T13540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.303318][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.335288][T13540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.348038][T13540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.355635][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.418628][T13540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.504746][T13540] hsr_slave_0: entered promiscuous mode [ 299.514008][T13540] hsr_slave_1: entered promiscuous mode [ 299.529855][T13540] debugfs: 'hsr0' already exists in 'hsr' [ 299.537143][T13540] Cannot create hsr debugfs directory [ 299.546000][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 299.576992][ T3436] IPVS: stop unused estimator thread 0... [ 299.757098][T13540] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 299.769125][T13540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.785295][T13540] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 299.804355][T13540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.832644][T13540] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 299.843966][T13540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.852283][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 299.861117][T13540] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 299.873176][T13540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.964118][T13540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.983891][T13540] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.998217][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.005319][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.026564][T13540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.037111][T13540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.049828][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.057003][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.149180][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 300.196893][T13687] infiniband syz1: set active [ 300.202413][T13687] infiniband syz1: added bond_slave_1 [ 300.235698][T13687] RDS/IB: syz1: added [ 300.240161][T13687] smc: adding ib device syz1 with port count 1 [ 300.246838][T13687] smc: ib device syz1 port 1 has no pnetid [ 300.256582][T13540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.365739][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 300.445790][T13540] veth0_vlan: entered promiscuous mode [ 300.458575][T13540] veth1_vlan: entered promiscuous mode [ 300.488561][T13540] veth0_macvtap: entered promiscuous mode [ 300.496929][T13540] veth1_macvtap: entered promiscuous mode [ 300.517323][T13540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.530052][T13540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.544006][ T200] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.573974][ T200] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.614055][ T200] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.634061][ T200] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.707988][T13762] netlink: 'syz.7.3500': attribute type 1 has an invalid length. [ 300.717279][T13762] netlink: 'syz.7.3500': attribute type 2 has an invalid length. [ 302.351759][T13941] __nla_validate_parse: 7 callbacks suppressed [ 302.351841][T13941] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3542'. [ 302.398522][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3540'. [ 302.415458][T13936] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3541'. [ 302.449164][T13936] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3541'. [ 302.818260][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3556'. [ 303.200609][T14029] netlink: 'syz.9.3571': attribute type 1 has an invalid length. [ 303.419550][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3585'. [ 303.603649][T14084] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3594'. [ 303.831843][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3608'. [ 304.010866][T14138] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3619'. [ 304.253985][T14161] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3631'. [ 304.282514][T14163] pim6reg1: entered allmulticast mode [ 304.663061][T14238] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 304.866674][ T28] audit: type=1400 audit(1777678756.143:1617): avc: denied { setopt } for pid=14276 comm="syz.0.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 304.927989][T14288] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 305.729364][T14396] netlink: 'syz.7.3691': attribute type 3 has an invalid length. [ 306.250674][T14457] netlink: 'syz.8.3720': attribute type 3 has an invalid length. [ 307.058727][T14527] syz1: rxe_newlink: already configured on bond_slave_1 [ 307.463397][T14569] __nla_validate_parse: 13 callbacks suppressed [ 307.463413][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3771'. [ 308.332130][T14593] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.349427][T14593] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.369740][T14593] bridge_slave_0: entered allmulticast mode [ 308.376326][T14593] bridge_slave_0: entered promiscuous mode [ 308.389219][T14593] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.406448][T14593] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.422090][T14593] bridge_slave_1: entered allmulticast mode [ 308.444904][T14593] bridge_slave_1: entered promiscuous mode [ 308.471576][T14655] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3803'. [ 308.513999][T14593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.548176][T14593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.618294][T14593] team0: Port device team_slave_0 added [ 308.638161][T14593] team0: Port device team_slave_1 added [ 308.702589][T14593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.717898][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.772915][T14593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.817824][T14593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.848360][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.915394][T14593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.014311][T14593] hsr_slave_0: entered promiscuous mode [ 309.031330][T14593] hsr_slave_1: entered promiscuous mode [ 309.049474][T14593] debugfs: 'hsr0' already exists in 'hsr' [ 309.073298][T14593] Cannot create hsr debugfs directory [ 309.120136][T14683] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 309.281613][T14593] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.544318][T14593] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.599359][T14593] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.683842][T14593] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.763895][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3834'. [ 309.801117][T14593] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 309.830881][T14593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.842987][T14735] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 309.850491][T14593] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.880507][T14593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.888510][T14737] netlink: 'syz.6.3837': attribute type 10 has an invalid length. [ 309.897442][T14593] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 309.924295][T14593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.958726][T14593] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 309.993895][T14593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.069462][T14593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.081779][T14593] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.096122][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.103216][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.142493][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.149582][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.351706][T14593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.546789][T14593] veth0_vlan: entered promiscuous mode [ 310.559285][T14593] veth1_vlan: entered promiscuous mode [ 310.577442][T14593] veth0_macvtap: entered promiscuous mode [ 310.585556][T14593] veth1_macvtap: entered promiscuous mode [ 310.596690][T14593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.608209][T14593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.623188][T14344] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.635642][T14344] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.651317][T14344] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.669349][T14344] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.899655][T14860] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3880'. [ 310.911636][T14860] netlink: 'syz.9.3880': attribute type 39 has an invalid length. [ 312.181249][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3894'. [ 312.378978][T14916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14916 comm=syz.8.3906 [ 312.406350][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3906'. [ 312.505253][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 312.639181][T14960] netlink: 'syz.7.3927': attribute type 3 has an invalid length. [ 313.207876][T14990] netlink: 'syz.9.3942': attribute type 3 has an invalid length. [ 313.391710][T15012] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3953'. [ 313.400944][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3953'. [ 313.661156][T15061] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 313.661156][T15061] Please contact the netfilter-devel mailing list or update your nftables rules. [ 314.238559][T15063] netlink: 'syz.6.3969': attribute type 3 has an invalid length. [ 314.324248][T15067] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 314.422342][T15083] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3980'. [ 314.567676][T15106] syz1: rxe_newlink: already configured on bond_slave_1 [ 314.725296][T15138] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.4000'. [ 314.938339][T15174] pimreg: tun_chr_ioctl cmd 1074025694 [ 314.964387][T15180] netlink: 'syz.9.4013': attribute type 29 has an invalid length. [ 314.973736][T15180] netlink: 'syz.9.4013': attribute type 29 has an invalid length. [ 315.102611][T15201] netlink: 'syz.6.4020': attribute type 3 has an invalid length. [ 315.164427][T15211] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4023'. [ 315.174831][T15211] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4023'. [ 315.358391][T15237] netlink: 'syz.6.4031': attribute type 13 has an invalid length. [ 315.372832][T15237] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4031'. [ 315.382719][T15237] syz_tun: refused to change device tx_queue_len [ 315.826973][T15322] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4060'. [ 315.839650][T15322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4060'. [ 316.126752][T15364] netlink: 'syz.7.4078': attribute type 3 has an invalid length. [ 317.195834][T15490] netlink: 'syz.0.4136': attribute type 3 has an invalid length. [ 317.337548][T15510] netlink: 'syz.7.4147': attribute type 3 has an invalid length. [ 317.427338][T15524] netlink: 'syz.7.4153': attribute type 21 has an invalid length. [ 318.002952][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.012116][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.021275][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.030360][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.039547][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.048650][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.057768][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.066886][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.076057][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.085164][T15575] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 318.572649][T15606] netlink: 'syz.0.4192': attribute type 3 has an invalid length. [ 319.534204][T15636] netlink: 'syz.7.4205': attribute type 3 has an invalid length. [ 319.838593][T15624] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.852409][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.865870][T15624] bridge_slave_0: entered allmulticast mode [ 319.874244][T15624] bridge_slave_0: entered promiscuous mode [ 319.881631][T15624] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.888728][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.899297][T15624] bridge_slave_1: entered allmulticast mode [ 319.920327][T15624] bridge_slave_1: entered promiscuous mode [ 319.944487][T15624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.959180][T15624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.981987][T15624] team0: Port device team_slave_0 added [ 319.988739][T15624] team0: Port device team_slave_1 added [ 320.005586][T15624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.012689][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.039520][T15624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.051589][T15624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.058557][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.085688][T15624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.114435][T15624] hsr_slave_0: entered promiscuous mode [ 320.120526][T15624] hsr_slave_1: entered promiscuous mode [ 320.126809][T15624] debugfs: 'hsr0' already exists in 'hsr' [ 320.132695][T15624] Cannot create hsr debugfs directory [ 320.598281][T15624] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.943686][T15624] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.986326][T15707] __nla_validate_parse: 10 callbacks suppressed [ 320.986340][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4230'. [ 321.008000][T15624] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.057915][T15624] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.143074][T15624] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 321.151670][T15624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.159290][T15624] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 321.171022][T15624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.191493][T15624] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 321.210329][T15624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.220968][T15624] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 321.238153][T15624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.350090][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4240'. [ 321.363914][T15624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.398895][T15624] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.409039][T14344] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.416132][T14344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.443400][T14344] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.450475][T14344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.649487][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4250'. [ 321.679938][T15624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.752752][T15779] lo speed is unknown, defaulting to 1000 [ 321.775599][T15779] lo speed is unknown, defaulting to 1000 [ 321.781726][T15779] lo speed is unknown, defaulting to 1000 [ 321.841064][T15790] validate_nla: 1 callbacks suppressed [ 321.841090][T15790] netlink: 'syz.0.4258': attribute type 3 has an invalid length. [ 321.849348][T15779] infiniband sz1: set active [ 321.859423][ T9] lo speed is unknown, defaulting to 1000 [ 321.873042][T15779] infiniband sz1: added lo [ 321.888595][T15779] RDS/IB: sz1: added [ 321.892931][T15779] smc: adding ib device sz1 with port count 1 [ 321.905022][T15779] smc: ib device sz1 port 1 has no pnetid [ 321.913284][ T9] lo speed is unknown, defaulting to 1000 [ 321.913635][T15624] veth0_vlan: entered promiscuous mode [ 321.925117][T15779] lo speed is unknown, defaulting to 1000 [ 321.936828][T15624] veth1_vlan: entered promiscuous mode [ 321.963086][T15624] veth0_macvtap: entered promiscuous mode [ 321.982091][T15624] veth1_macvtap: entered promiscuous mode [ 321.990781][T15779] lo speed is unknown, defaulting to 1000 [ 322.005944][T15624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.021540][T15624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.036311][T14344] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.054152][T14344] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.065453][T14344] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.078217][T15779] lo speed is unknown, defaulting to 1000 [ 322.084128][T14344] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.156142][T15779] lo speed is unknown, defaulting to 1000 [ 322.226536][T15779] lo speed is unknown, defaulting to 1000 [ 322.305984][T15779] lo speed is unknown, defaulting to 1000 [ 322.388941][T15779] lo speed is unknown, defaulting to 1000 [ 322.472174][T15779] lo speed is unknown, defaulting to 1000 [ 322.527995][T15779] lo speed is unknown, defaulting to 1000 [ 322.848287][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.859165][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 322.875077][T15854] lo speed is unknown, defaulting to 1000 [ 322.971296][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.986246][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 323.044225][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.066613][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 323.111669][T15906] netlink: 'syz.0.4308': attribute type 3 has an invalid length. [ 323.203506][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.215419][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 323.240254][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 323.249747][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 323.315470][T15854] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.323761][T15854] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.331005][T15854] bridge_slave_0: entered allmulticast mode [ 323.337527][T15854] bridge_slave_0: entered promiscuous mode [ 323.346766][T15854] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.353952][T15854] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.361171][T15854] bridge_slave_1: entered allmulticast mode [ 323.367622][T15854] bridge_slave_1: entered promiscuous mode [ 323.392826][T15854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.403283][T15854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.433253][T15854] team0: Port device team_slave_0 added [ 323.439514][ T39] bridge_slave_1: left allmulticast mode [ 323.445311][ T39] bridge_slave_1: left promiscuous mode [ 323.451244][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.459101][ T39] bridge_slave_0: left allmulticast mode [ 323.465355][ T39] bridge_slave_0: left promiscuous mode [ 323.471102][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.529238][ T39] bond1 (unregistering): (slave geneve2): Releasing active interface [ 323.812887][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.822963][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.833038][ T39] bond0 (unregistering): Released all slaves [ 323.841558][ T39] bond1 (unregistering): Released all slaves [ 323.852106][T15854] team0: Port device team_slave_1 added [ 323.860789][T15943] netlink: 'syz.8.4320': attribute type 3 has an invalid length. [ 323.891766][T15854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.901323][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.928132][T15854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.938996][T15948] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4324'. [ 323.942293][T15854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.955186][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.956267][ T28] audit: type=1400 audit(1777678775.223:1618): avc: denied { recv } for pid=3019 comm="dhcpcd" saddr=10.128.0.163 src=48218 daddr=10.128.1.89 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.010005][T15854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.025055][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4325'. [ 324.049398][ T39] hsr_slave_0: left promiscuous mode [ 324.056023][ T39] hsr_slave_1: left promiscuous mode [ 324.062321][T15952] netlink: 15743 bytes leftover after parsing attributes in process `syz.8.4326'. [ 324.073192][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.085374][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.096512][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.108866][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.137652][ T39] veth1_macvtap: left promiscuous mode [ 324.150113][ T39] veth0_macvtap: left promiscuous mode [ 324.157027][ T39] veth1_vlan: left promiscuous mode [ 324.163983][ T39] veth0_vlan: left promiscuous mode [ 324.217666][T15969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4334'. [ 324.218547][ T39] pim6reg (unregistering): left allmulticast mode [ 324.229984][ T39] pim6reg2 (unregistering): left allmulticast mode [ 324.262995][T15624] ================================================================== [ 324.271115][T15624] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 324.279971][T15624] [ 324.282294][T15624] write to 0xffff8881043ee774 of 4 bytes by task 3287 on cpu 1: [ 324.289916][T15624] fsnotify_detach_mark+0xb9/0x160 [ 324.295021][T15624] fsnotify_destroy_mark+0x6f/0x150 [ 324.300219][T15624] __se_sys_inotify_rm_watch+0xe8/0x170 [ 324.305756][T15624] __x64_sys_inotify_rm_watch+0x31/0x40 [ 324.311289][T15624] x64_sys_call+0xc88/0x3020 [ 324.315866][T15624] do_syscall_64+0x12c/0x3b0 [ 324.320441][T15624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.326420][T15624] [ 324.328780][T15624] read to 0xffff8881043ee774 of 4 bytes by task 15624 on cpu 0: [ 324.336398][T15624] fsnotify_handle_inode_event+0x125/0x220 [ 324.342205][T15624] fsnotify+0x15d0/0x1730 [ 324.346528][T15624] __fsnotify_parent+0x2f8/0x3a0 [ 324.351456][T15624] __fput+0x1de/0x630 [ 324.355421][T15624] fput_close_sync+0xad/0x190 [ 324.360088][T15624] __x64_sys_close+0x55/0xf0 [ 324.364666][T15624] x64_sys_call+0x275d/0x3020 [ 324.369340][T15624] do_syscall_64+0x12c/0x3b0 [ 324.373925][T15624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.379805][T15624] [ 324.382121][T15624] value changed: 0x00000003 -> 0x00000000 [ 324.387823][T15624] [ 324.390137][T15624] Reported by Kernel Concurrency Sanitizer on: [ 324.396274][T15624] CPU: 0 UID: 0 PID: 15624 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 324.407381][T15624] Tainted: [W]=WARN [ 324.411167][T15624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.421209][T15624] ================================================================== [ 324.444604][ T39] team0 (unregistering): Port device vlan1 removed [ 324.483723][ T39] team0 (unregistering): Port device team_slave_1 removed [ 324.493639][ T39] team0 (unregistering): Port device team_slave_0 removed [ 324.547223][T15854] hsr_slave_0: entered promiscuous mode [ 324.553640][T15854] hsr_slave_1: entered promiscuous mode [ 324.559837][T15854] debugfs: 'hsr0' already exists in 'hsr' [ 324.565926][T15854] Cannot create hsr debugfs directory [ 324.661962][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 324.750951][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 324.828836][ T39] IPVS: stop unused estimator thread 0... [ 324.881571][T15854] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.890654][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.898737][T15854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.907632][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.915515][T15854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.924474][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.932444][T15854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.941693][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.977100][T15854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.988763][T15854] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.998540][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.005698][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.015882][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.022968][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.113870][T15854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.201500][T15854] veth0_vlan: entered promiscuous mode [ 325.209341][T15854] veth1_vlan: entered promiscuous mode [ 325.224680][T15854] veth0_macvtap: entered promiscuous mode [ 325.232610][T15854] veth1_macvtap: entered promiscuous mode [ 325.243607][T15854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.254567][T15854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.266423][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.275715][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.284603][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.293711][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0