last executing test programs: 6m24.000377832s ago: executing program 1 (id=494): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) 6m23.878094416s ago: executing program 1 (id=495): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x28}}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m23.596634335s ago: executing program 1 (id=497): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000004c0)={r3, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132bb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc58041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e725d000000000000007b2858f76d3c773b57e42e583f"}, &(0x7f0000000040)=0x90) 6m23.543373086s ago: executing program 1 (id=498): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x21) r0 = syz_io_uring_setup(0x6368, &(0x7f00000008c0)={0x0, 0x0, 0x10000, 0x0, 0x2}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) r1 = eventfd2(0xbfb, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000240)=r1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) io_uring_enter(r0, 0x3, 0x10a5, 0x3, 0x0, 0x0) 6m22.671989123s ago: executing program 1 (id=506): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x140020, 0x0) 6m22.257244646s ago: executing program 1 (id=511): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'gretap0\x00'}}, 0x1e) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000001040)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x383c, 0x4, 0x6, 0x8001, 0x5fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 6m6.926328862s ago: executing program 32 (id=511): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'gretap0\x00'}}, 0x1e) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000001040)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x383c, 0x4, 0x6, 0x8001, 0x5fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 5m23.025929373s ago: executing program 2 (id=1256): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r1, 0xa1) close(0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 5m22.689631543s ago: executing program 2 (id=1258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5m22.563663137s ago: executing program 2 (id=1264): syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1000, 0xa, 0x20002f7}) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00'}) socket(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 5m22.563143577s ago: executing program 2 (id=1265): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x800000, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x172, &(0x7f00000001c0)="$eJzs27GKE1EUBuAzZjZGLUwtFgM2VkF9AmVZQRxQlCm0Uog2u7LgNqNVHsUXFGSr7a5kZkl2lwQMJI7ufF+TE37u5Z5mDjdkPtz/cjg9Pvl8/Po0RlkW+dMo4iyLcdyIQUyriIhZAADXyVlK8SullPKI+BEppa5PBADs2mL+35zFLfMfAHrB/AeA/jH/AaB/3r57//JZWR68KYpRxM9ZXdVV87nf5s9flAePisZ4ueq0rqvBIn/c5sXlfC9un+dPmvTivwjn+TAePmjzebr/qryy/k5Md949AAAA9MOkWFh5v59M1uVtdeH3gfn9/e4yz+Ne3nwZ/8V2AIA/cPLt++HHo6NPX//zYnDez6bLRxHR+eEVmxTZv3GMrothbHXDvYjLG3b8YAJ2bvkY6PokAAAAAAAAAAAAAADAOlt9LWm4esOuewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICrfgcAAP//TMFI9w==") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x800, 0x10a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20401, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m22.342339054s ago: executing program 2 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x50}}, 0x20040040) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) 5m22.076533802s ago: executing program 2 (id=1277): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x23}, 0x28) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x403, 0x303, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7f}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}}, 0x8000) 5m22.036442874s ago: executing program 33 (id=1277): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x23}, 0x28) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0x403, 0x303, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7f}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}}, 0x8000) 4m29.747269865s ago: executing program 5 (id=1937): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x8, @local}}, 0x0, 0x0, 0x2c, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09340005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0x7) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x4) 4m29.678462017s ago: executing program 5 (id=1938): sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 4m29.501820123s ago: executing program 5 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 4m28.62784755s ago: executing program 5 (id=1946): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x2000000, 0x10000) 4m28.368075458s ago: executing program 5 (id=1947): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/196, 0xc4}], 0x1}, 0x40002000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c\"', 0x2}], 0x1}, 0x11) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 4m28.161160854s ago: executing program 5 (id=1951): eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m28.135420155s ago: executing program 34 (id=1951): eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m13.591617106s ago: executing program 7 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m12.685508184s ago: executing program 7 (id=2141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4m12.653369925s ago: executing program 7 (id=2144): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 4m12.592373907s ago: executing program 7 (id=2148): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$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") r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000700)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10) ptrace$cont(0x21, r1, 0x80000001, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noblock_validity}, {@delalloc}, {@quota}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") 4m11.926760238s ago: executing program 7 (id=2151): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m10.663654457s ago: executing program 7 (id=2165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r1, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030003000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfafb70ee09c", 0x14}], 0x2}, 0x4000000) 4m10.663394617s ago: executing program 35 (id=2165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) listen(r1, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030003000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfafb70ee09c", 0x14}], 0x2}, 0x4000000) 10.476889305s ago: executing program 4 (id=4380): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 10.349749479s ago: executing program 4 (id=4382): futex(&(0x7f000000cffc)=0x2, 0x9, 0x2, 0x0, 0x0, 0x2) capset(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x8d350, 0xfff, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x200000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 8.511767016s ago: executing program 4 (id=4395): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syz_tun\x00', 0x8000}) perf_event_open(&(0x7f00000012c0)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mq_unlink(&(0x7f0000000000)='&@!),-\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x28}, 0x1, 0xffffffff00000003}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) syz_create_resource$binfmt(&(0x7f0000000100)='./bus\x00') listen(r2, 0x2b4b) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r2, 0x0, 0x0, 0x800) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) 7.883725376s ago: executing program 4 (id=4402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) 6.951867464s ago: executing program 4 (id=4405): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x113042, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xe3c, 0x4}, 0x4, 0x0, 0x6, 0x0, 0x2, 0x82000001, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0xb842) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = mq_open(0x0, 0x1, 0x130, &(0x7f0000000080)={0xc, 0x5, 0x1, 0x3}) mq_notify(r1, 0x0) madvise(&(0x7f000061c000/0x1000)=nil, 0x1000, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) r2 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x80, @empty=0xcf050000}}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 5.950421875s ago: executing program 0 (id=4413): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x6, 0x800, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x1086e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xdc, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc8, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xdc}}, 0x0) socket(0x2, 0x80805, 0x0) 4.614667057s ago: executing program 4 (id=4417): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) fallocate(r0, 0x0, 0xbf5, 0x2000402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x103) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 2.305952688s ago: executing program 3 (id=4425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x917, 0x40, 0x4, 0x4, 0x400}, 0x2, 0x5, [{0xa, 0x6, 0x10000, 0xfffffffb, 0x2, 0x7}]}, [{0x6, 0x2000000, 0xda86, 0xeed, 0x7f48dd5f, 0x3}, {0x6, 0x9e8e, 0x1, 0xaed, 0x40, 0x340}, {0x156, 0x3e7, 0x8, 0x84d, 0x5, 0x4}, {0x7fff, 0x80000000, 0x2, 0x8433, 0x0, 0x2}, {0x6, 0x1d, 0xff, 0x3, 0x8b, 0xfffffff9}, {0x4, 0x9, 0xe, 0x1, 0x16e0, 0x6}, {0x4c65, 0x3, 0xe91, 0xfffffffb, 0x7f, 0xf}, {0x8, 0xfffffff2, 0x4, 0x10, 0x8027, 0x7}, {0x4, 0xd9, 0xe, 0x9, 0x4}, {0x5, 0x7, 0x10002000, 0x2, 0x1a2e, 0x7fff}, {0x6, 0x401, 0x81, 0x5, 0x2b3, 0x3a2}, {0x1, 0xfffffffc, 0x100, 0x7, 0x1, 0xffffff7a}, {0xa, 0xfff, 0x2, 0x8, 0xf84, 0x7a90}, {0xffff, 0x5, 0x4, 0xffff6083, 0x1, 0x3}, {0x101, 0x4, 0x7, 0xffff, 0x5, 0x7d14}, {0x15e9dff4, 0x6, 0x1, 0x5, 0x7, 0x5}, {0x1cd000, 0x4334, 0x3, 0x10, 0xa4, 0x3ff}, {0xfff, 0x1, 0x6, 0x8, 0x8, 0xb}, {0x2a, 0x8, 0xffffff80, 0x1, 0x8, 0x4}, {0x3191, 0xffff, 0x3, 0x1, 0xfffff001, 0x5}, {0x0, 0x7, 0x3, 0x8, 0xcbe, 0x7}, {0x0, 0x7, 0x2, 0xd, 0x1020000, 0x7}, {0x9, 0x0, 0xb, 0x8c57, 0xffffffff, 0xe}, {0x3, 0xfd8, 0x80000000, 0xffffffff, 0x8, 0x3}, {0x9188, 0x4, 0x3, 0xffff2ae7, 0x3, 0x100}, {0x8000, 0x4, 0x9, 0x98, 0xfffffffc, 0x10000}, {0x8, 0x5, 0x8, 0x10, 0x8, 0x8}, {0x2, 0x80000000, 0xc96e, 0x10001, 0x9, 0x4}, {0x3, 0x0, 0x8, 0xe, 0x3, 0x1e}, {0x8, 0x8, 0x2, 0x8, 0xd, 0x3}, {0x45, 0xffffffff, 0x1000, 0x8, 0x6, 0xfffffff1}, {0xd0b4, 0x3ff, 0x9, 0x5, 0x1, 0x3}, {0x10000, 0x1ff, 0x8, 0x8000, 0x7, 0x7}, {0x81, 0xffffffff, 0x2, 0x5, 0x6, 0x1ff}, {0x3, 0x2, 0x8, 0x6, 0xfffffe00, 0x3ff}, {0x1, 0x2, 0xfffffffe, 0x3, 0x3, 0x3}, {0xfffffff7, 0x1, 0x5, 0xffff, 0x8, 0x9}, {0x6, 0x5b6b, 0x80000001, 0x2, 0x695, 0x3}, {0x1, 0x0, 0x2ad, 0xe, 0x8, 0x85}, {0x5a, 0x5, 0x6, 0x3, 0x4, 0x2}, {0x5, 0xfffffff9, 0x3, 0x8, 0x2, 0x8}, {0x4, 0x10001, 0x5, 0x3, 0x4, 0xf106}, {0x6351, 0x5, 0x500000, 0x2, 0x2563, 0x80000000}, {0x4, 0x8, 0x400, 0x4, 0x3fcc, 0x8000}, {0x7b, 0x0, 0x9, 0x3, 0x7, 0x400}, {0x7fff, 0xfff, 0x1, 0x0, 0x49, 0x1ff}, {0x10000, 0x4, 0x4, 0xb, 0x400, 0xfffffffe}, {0xff, 0x7f, 0xf, 0x1, 0x6000, 0x6}, {0x10, 0xfffffffa, 0x7, 0x1, 0x1, 0x7f}, {0x7, 0x1, 0xcd, 0xb03, 0x2363, 0xfffffff7}, {0x5, 0x7f, 0x1a00000, 0x6, 0x5, 0x4}, {0x7, 0x7, 0x6, 0x60000000, 0xc, 0x4}, {0x7, 0x7, 0x5, 0x3, 0x0, 0x248}, {0x40, 0x0, 0x0, 0x2, 0x2, 0x9}, {0x1, 0x1, 0xffffffff, 0x3, 0x81, 0x8}, {0x9, 0x1ff, 0x9, 0x0, 0x3, 0x6}, {0x8, 0x0, 0x7c72146e, 0x7fffffff, 0xc, 0xfffffffd}, {0x6, 0x8, 0x1, 0x5, 0x6, 0x4}, {0x5, 0x6, 0xb53, 0x3, 0x10001, 0x10001}, {0x47e, 0x92e, 0xc, 0x2, 0xd, 0x8}, {0xfffffff0, 0x878, 0x9, 0x0, 0x3, 0x5}, {0x401, 0x80000000, 0x0, 0x10001, 0xfff, 0x4d113a9f}, {0x8, 0x3c, 0xa903, 0x80000001, 0x80000001, 0x80000000}, {0x3, 0x73, 0x0, 0x83, 0x1, 0x4f0042c2}, {0x6, 0xa, 0x7, 0x29ce8000, 0x2, 0x61bd}, {0x7, 0x7, 0xffffffff, 0x7, 0x10, 0x13b9601d}, {0x81, 0x6, 0x2, 0x9fa1, 0x3, 0x7}, {0x2, 0xf, 0x9ab, 0x5, 0x4d3e, 0x1}, {0x8, 0x0, 0x7, 0xffffffff, 0x401, 0xd6}, {0x9, 0x1404, 0xff, 0x10001, 0x63ec0673, 0x81}, {0x5, 0x9, 0x0, 0x401, 0x3, 0x4}, {0x10000, 0x6, 0x2874, 0xfffffbff, 0xf, 0x1ff}, {0xc, 0xefb, 0x9, 0x3, 0x9, 0x6}, {0x0, 0x8, 0x564d, 0xffffffff, 0x3, 0x6}, {0xa0, 0x6, 0x4, 0xae, 0x7, 0x7ff}, {0xb, 0x3, 0x14000000, 0xb0, 0x9, 0xe}, {0xe0, 0x7, 0x1f3, 0x9, 0x7, 0x80}, {0x7ff, 0x7fff, 0x200, 0x2, 0xd, 0x6000000}, {0x7, 0x7, 0xfff, 0x8, 0x8, 0x7}, {0x100, 0xb, 0x8, 0x0, 0x6, 0x70b}, {0x4000, 0x6, 0x1000, 0x4, 0x2, 0x5}, {0xebf, 0x0, 0x9, 0x5, 0x0, 0x1}, {0x80000000, 0x5, 0x80000000, 0x3, 0x7, 0xc37}, {0x9263, 0x6, 0x61, 0x9, 0x10e, 0x3383}, {0x8, 0x84, 0x6, 0x4, 0x80000001, 0x7}, {0x0, 0x3, 0x5, 0x0, 0x4, 0xbd30}, {0x36e4, 0x240, 0x7ff, 0x7, 0x5, 0x1bc7}, {0x2, 0xd9f, 0x6040, 0x6, 0x100, 0x10}, {0x2, 0x3, 0x3, 0x100, 0x6c, 0x4}, {0x4, 0x403, 0x5951, 0x8, 0x40, 0x2}, {0x9, 0x69, 0x1b08cfd, 0x4, 0x5, 0x9}, {0x1, 0x7fffffff, 0x0, 0x80000000, 0x8, 0xf}, {0x6, 0xa63, 0xeb9, 0xfa07, 0x6, 0x2}, {0x9, 0x800, 0x6, 0x7, 0x8, 0x7fffffff}, {0x401, 0x7, 0x7, 0x9, 0x6, 0x4}, {0x9, 0x7, 0x8, 0x8, 0x10001, 0x7f}, {0x3, 0x8842925, 0x7fff, 0x401, 0x5, 0xfffffffd}, {0x1, 0x76c, 0x2, 0xbf90, 0x9, 0x4}, {0x1002, 0x1e99, 0x1, 0x6, 0x4, 0x5}, {0x0, 0x9, 0xa, 0x1, 0x200, 0x7}, {0x400, 0x5, 0x1, 0x8, 0x1, 0x1}, {0x3, 0x0, 0x4, 0x4, 0x0, 0xff}, {0x1, 0x9, 0xb, 0x1ff, 0x9, 0x5}, {0x4, 0x7f, 0x0, 0x80, 0x100, 0xe}, {0x43, 0xb, 0x26dc, 0x6, 0xb1, 0xfc3}, {0x4, 0xfffffffe, 0x6, 0x6, 0x50f, 0x6}, {0x0, 0x27360000, 0x2, 0x2e57, 0xf, 0x4}, {0x1, 0x4, 0x4, 0x5, 0xc25, 0x1}, {0x8, 0x7fffffff, 0x4, 0x7fff, 0x4}, {0x5, 0xbae, 0x4, 0x7fff, 0x2, 0x3}, {0x4, 0x9, 0x7ff, 0x10000, 0x7fff, 0x4a2}, {0x3, 0xfffffffc, 0x1, 0x8, 0xffff, 0x9763}, {0x0, 0x338, 0x7, 0xfffffff8, 0x392, 0x6}, {0x0, 0xff, 0x7, 0xffff, 0xe, 0x2}, {0x0, 0xfffffffa, 0x3, 0x0, 0x52, 0x8000}, {0xff, 0x8, 0xf, 0x4, 0xb, 0x1ff}, {0xffffffff, 0x2, 0x7, 0x5, 0x7ff, 0x6}, {0x10000, 0x1, 0xa5, 0x9, 0xc82, 0x2778}, {0x8000, 0x6, 0x5, 0x0, 0xa, 0x5}, {0x10001, 0xd8dc, 0x101, 0x2, 0x8, 0x401}, {0x4, 0x84, 0x7, 0x80, 0x7, 0x4}, {0x0, 0x39, 0x3, 0x6, 0x1, 0x1ff}, {0x8, 0x452, 0x10, 0x8, 0xfff, 0x70000}, {0x3, 0x0, 0x0, 0x59c1, 0x8001, 0xd}, {0x7fff, 0xfff, 0x57e, 0x5, 0x5, 0x2da}, {0x1, 0x80000001, 0x7, 0x25, 0x38, 0x1}, {0xffff, 0x2b96, 0x80000001, 0x1000, 0x6, 0x5d9}, {0x10, 0x8, 0x7, 0xb, 0x6, 0x3}], [{0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x644ab9e83ae062f}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x6}, {}, {0x3, 0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0xa6667bfd5860125f}, {0x1}, {0xb, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x2}, {0x4}, {0x1}, {0x3}, {0x2}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28, 0x4000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 2.300831149s ago: executing program 8 (id=4434): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x20) write$cgroup_subtree(r4, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.877139731s ago: executing program 3 (id=4426): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001100)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x0, 0x0, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x6, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x2000c000) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) syz_clone(0x11, 0x0, 0xfffffd2f, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.809410824s ago: executing program 3 (id=4427): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x1843, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fsmount(0xffffffffffffffff, 0x0, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r3, 0x0, 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1.684941497s ago: executing program 0 (id=4429): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0102000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c00078008000500020000ddacfa6c"], 0x38}}, 0xc000) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) r4 = openat(r2, &(0x7f0000000240)='./file1\x00', 0x42, 0x146) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000080)) fallocate(r3, 0x3, 0x800000, 0x8000c62) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x9, 0x1, 0x0, 0x0, 0xce, 0x8002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6738, 0x100}, 0x110010, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0xfffe}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 1.659402538s ago: executing program 8 (id=4430): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) 1.658781958s ago: executing program 6 (id=4431): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000180)="469e814b201ca23708c4d250a7d324042ef38c43631f4bb400ff5fc931439cfb825f94f17e31cb", 0x27) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x6f49, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xa}, 0x10) sendmsg$nl_route_sched(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) 1.553797662s ago: executing program 8 (id=4432): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xfffffffffffffc04, 0x1}, 0x8201, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f0000"], 0x50) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000580)) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7001fedbdf2530000000180001801400020076657468315f746f5f626f6e64000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r3, @ANYBLOB="d77d0a1921941cebb6752d2db4aaab990df48308fa85f8c7e75a0b689890801cc4a57488b8cb2fa43820906f437b4a9e92", @ANYRES16=r6, @ANYRESHEX=r3, @ANYRESDEC=r3], 0xd4}}, 0x40000) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 1.532052232s ago: executing program 6 (id=4433): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100019002cbd7000fadb5f", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.379090617s ago: executing program 6 (id=4435): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syz_tun\x00', 0x8000}) perf_event_open(&(0x7f00000012c0)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mq_unlink(&(0x7f0000000000)='&@!),-\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x28}, 0x1, 0xffffffff00000003}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) syz_create_resource$binfmt(&(0x7f0000000100)='./bus\x00') listen(r2, 0x2b4b) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r2, 0x0, 0x0, 0x800) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) 1.136173964s ago: executing program 8 (id=4436): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102270, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x1294, 0x4) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x739da133b426e85c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40804) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x82) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) 1.135903904s ago: executing program 6 (id=4437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x10002, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x3, 0x3, 0x2, 0x1}}, 0x80) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1.135636424s ago: executing program 3 (id=4438): sendmsg(0xffffffffffffffff, 0x0, 0x4884) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() futex_waitv(&(0x7f0000001480)=[{0x9, &(0x7f0000001440)=0x9, 0x2}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60a41, 0x0) write$tun(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 796.068745ms ago: executing program 8 (id=4439): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x8006, 0x0, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000600), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140db2affff0c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 765.275346ms ago: executing program 0 (id=4440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000014000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x200000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x4a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat(r3, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000280)=ANY=[], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0x7, &(0x7f0000000100)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x9, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x6, 0x46}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a80), 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 587.604351ms ago: executing program 0 (id=4441): unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$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") sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040090) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890446000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x2a, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'wg0\x00', 0x0}) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x7, 0x9, 0x4}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x200, 0x6, 0x1b7b55b3dd94ef34}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 498.971074ms ago: executing program 8 (id=4442): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x10}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@dioread_lock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40482, 0x0) pwritev(r0, &(0x7f0000000040), 0x0, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) write$binfmt_misc(r1, &(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000007e80)={@local, @loopback}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r2, 0x0, 0x0, 0x8000) 277.877831ms ago: executing program 6 (id=4443): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) 187.829384ms ago: executing program 3 (id=4444): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdec, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 157.178625ms ago: executing program 0 (id=4445): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100019002cbd7000fadb5f", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 80.507997ms ago: executing program 6 (id=4446): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x40}}, 0x44000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x4400c800) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002d40)={&(0x7f00000000c0)="f847c92f0c06353706", &(0x7f0000001c40)=""/4096, &(0x7f0000002c40)="c0543bd9073d69d7499789d2fa5172fc2c6bcb715b9368197cee9d71c12f0b1fa11077480511edaf46e1e88242b58256855be05353d24881baa9f9597d38d1637838226ef6613b6779ca144149277acb4b", &(0x7f0000002cc0)="fea02ab09357024f9a59cd5923167f2634e440e9346c1ba9ddddb14981bb700345e692a3d319bb5fdd85c811ab2ce8b60095dd4cd00666561f8e9881a95cdcfc50fb98432cf17a1e4d5c9e06f101da4797b1f2", 0xffff7209}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x8000) r2 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c) getsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f00000001c0)=""/26, &(0x7f00000003c0)=0x1a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000a40)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.18272ms ago: executing program 3 (id=4447): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x44000160) dup(r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x2d, 0x30, 0x65, 0x0, 0x6, 0x1, 0x0, @remote, @multicast1}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x2, 0x21, 0x5, 0x65, 0x7, 0x40, 0x84, 0x63a, @local, @remote}}}}}}, 0x0) r2 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000001000/0x2000)=nil, 0x2000) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0xfffffffffffffffe, 0x10}, 0x1}}, @TCA_IFE_METALST={0x6a, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) ioctl(0xffffffffffffffff, 0x5451, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000080)={0xa, 0x7, 0x3, 0x0, 0xf3cf, 0x0, 0x4}) socket$pppoe(0x18, 0x1, 0x0) close(r0) 0s ago: executing program 0 (id=4457): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100019002cbd7000fadb5f", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.3.3472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 328.583981][ T28] audit: type=1326 audit(2000000004.220:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.3.3472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 328.657385][ T28] audit: type=1326 audit(2000000004.220:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.3.3472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 328.683985][ T28] audit: type=1326 audit(2000000004.240:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.3.3472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 329.363996][T13671] loop8: detected capacity change from 0 to 512 [ 329.411391][T13671] EXT4-fs: Ignoring removed bh option [ 329.588710][T13671] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 329.610640][T13671] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3480: corrupted in-inode xattr: e_value size too large [ 329.625260][T13671] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 329.625501][T13671] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3480: couldn't read orphan inode 15 (err -117) [ 329.634696][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 329.634720][ C1] EXT4-fs (loop8): initial error at time 2000000005: ext4_iget_extra_inode:5128: inode 15 [ 329.634833][ C1] EXT4-fs (loop8): last error at time 2000000005: ext4_iget_extra_inode:5128: inode 15 [ 329.673363][T13671] loop8: lost filesystem error report for type 5 error -117 [ 329.673917][T13671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.711209][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.816593][T13690] loop8: detected capacity change from 0 to 128 [ 329.853789][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3488'. [ 329.874665][T13690] FAT-fs (loop8): bogus number of FAT structure [ 329.889306][T13690] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 329.903595][T13690] FAT-fs (loop8): Can't find a valid FAT filesystem [ 329.935538][T13690] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3484'. [ 330.205981][T13708] loop8: detected capacity change from 0 to 4096 [ 330.547349][T13708] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.834079][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.356584][T13749] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3506'. [ 332.255137][T13777] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3515'. [ 332.392822][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 332.441202][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 332.464814][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 332.477445][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 332.842910][T13811] loop8: detected capacity change from 0 to 164 [ 332.890310][T13811] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 333.439752][T13824] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3532'. [ 333.952273][T13842] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3541'. [ 334.170256][T13854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13854 comm=syz.8.3545 [ 334.287352][T13858] syzkaller0: entered promiscuous mode [ 334.292983][T13858] syzkaller0: entered allmulticast mode [ 336.383638][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 336.556162][T13904] syzkaller0: entered promiscuous mode [ 336.573151][T13904] syzkaller0: entered allmulticast mode [ 336.581178][T13909] netlink: 'syz.6.3564': attribute type 1 has an invalid length. [ 336.607268][T13909] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.640908][T13909] vlan0: entered promiscuous mode [ 336.657418][T13909] bond5: entered promiscuous mode [ 336.662720][T13909] vlan0: entered allmulticast mode [ 336.687506][T13909] bond5: entered allmulticast mode [ 336.720841][T13915] bond5: (slave bridge2): making interface the new active one [ 336.770570][T13917] loop8: detected capacity change from 0 to 128 [ 336.779241][T13915] bridge2: entered promiscuous mode [ 336.791002][T13915] bridge2: entered allmulticast mode [ 336.805859][T13915] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 337.498015][T13948] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3562'. [ 337.970498][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 337.970514][ T28] audit: type=1326 audit(2000000013.770:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.009592][ T28] audit: type=1326 audit(2000000013.770:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.063017][T13966] netlink: 'syz.3.3579': attribute type 1 has an invalid length. [ 338.071349][ T28] audit: type=1326 audit(2000000013.770:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.100169][T13966] netlink: 'syz.3.3579': attribute type 2 has an invalid length. [ 338.196017][ T28] audit: type=1326 audit(2000000013.770:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.244538][T13974] sit0: entered allmulticast mode [ 338.254595][ T28] audit: type=1326 audit(2000000013.810:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.254628][ T28] audit: type=1326 audit(2000000013.810:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.254659][ T28] audit: type=1326 audit(2000000013.810:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.254700][ T28] audit: type=1326 audit(2000000013.810:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.254729][ T28] audit: type=1326 audit(2000000013.810:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 338.254755][ T28] audit: type=1326 audit(2000000013.810:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13958 comm="syz.6.3577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a7f7fd68e code=0x7ffc0000 [ 338.273271][T13974] sit0: entered promiscuous mode [ 338.545974][T13986] netlink: 'syz.0.3585': attribute type 1 has an invalid length. [ 338.571441][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 338.595923][T13986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.612854][T13982] loop8: detected capacity change from 0 to 8192 [ 338.699730][T13986] bond0: (slave ip6gretap0): making interface the new active one [ 338.754327][T13986] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 338.917469][T13999] __vm_enough_memory: pid: 13999, comm: syz.0.3590, bytes: 11727601549312 not enough memory for the allocation [ 339.159601][T13982] syz.8.3584: attempt to access beyond end of device [ 339.159601][T13982] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 339.205249][T13982] Buffer I/O error on dev loop8, logical block 57847, async page read [ 339.225739][T13982] syz.8.3584: attempt to access beyond end of device [ 339.225739][T13982] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 339.265582][T13982] Buffer I/O error on dev loop8, logical block 57847, async page read [ 339.291046][T13982] syz.8.3584: attempt to access beyond end of device [ 339.291046][T13982] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 339.347538][T13982] Buffer I/O error on dev loop8, logical block 57847, async page read [ 339.454811][T14020] 0ªî{X¹¦: left allmulticast mode [ 341.074911][T14076] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 341.144101][T14078] netlink: 'syz.8.3617': attribute type 1 has an invalid length. [ 341.194542][T14078] bond4: entered promiscuous mode [ 341.227040][T14078] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.253684][T14078] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.266096][T14078] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 341.309288][T14078] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 341.330647][T14078] bond4: (slave gre2): making interface the new active one [ 341.345168][T14078] gre2: entered promiscuous mode [ 341.352517][T14078] bond4: (slave gre2): Enslaving as an active interface with an up link [ 341.509534][T14090] loop8: detected capacity change from 0 to 512 [ 341.554779][T14090] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 341.568174][T14090] EXT4-fs (loop8): orphan cleanup on readonly fs [ 341.592409][T14090] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3620: Failed to acquire dquot type 1 [ 341.620101][T14090] loop8: lost filesystem error report for type 5 error -5 [ 341.622040][T14090] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3620: bg 0: block 40: padding at end of block bitmap is not set [ 341.629242][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 341.629264][ C1] EXT4-fs (loop8): initial error at time 2000000017: ext4_acquire_dquot:7034 [ 341.629284][ C1] EXT4-fs (loop8): last error at time 2000000017: ext4_acquire_dquot:7034 [ 341.745502][T14090] loop8: lost filesystem error report for type 5 error -117 [ 341.745709][T14090] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 341.795229][T14090] loop8: lost filesystem error report for type 5 error -117 [ 341.795434][T14090] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #16: comm syz.8.3620: data will be lost [ 341.845192][T14090] EXT4-fs (loop8): 1 truncate cleaned up [ 341.857795][T14090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.951763][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.752632][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3642'. [ 344.774567][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 344.774582][ T28] audit: type=1400 audit(2000000020.570:4328): avc: denied { accept } for pid=14159 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.924780][T14167] loop8: detected capacity change from 0 to 512 [ 344.957846][ T28] audit: type=1400 audit(2000000020.750:4329): avc: denied { relabelfrom } for pid=14162 comm="syz.0.3644" name="NETLINK" dev="sockfs" ino=40376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.995129][T14167] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 345.007653][ T28] audit: type=1400 audit(2000000020.750:4330): avc: denied { relabelto } for pid=14162 comm="syz.0.3644" name="NETLINK" dev="sockfs" ino=40376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 345.109784][T14175] ip6erspan0: entered allmulticast mode [ 345.331346][T14179] loop8: detected capacity change from 0 to 1024 [ 345.579028][T14181] netlink: 'syz.6.3651': attribute type 1 has an invalid length. [ 345.705525][T14181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.795583][T14182] macvlan4: entered promiscuous mode [ 345.892807][T14182] macvlan4: entered allmulticast mode [ 346.111942][T14182] bond6: entered allmulticast mode [ 346.143449][T14182] bond6: entered promiscuous mode [ 346.158677][T14182] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 346.175101][T14182] team0: Port device macvlan4 added [ 346.202466][T14184] bond6: (slave ip6gretap1): making interface the new active one [ 346.226804][T14184] ip6gretap1: entered promiscuous mode [ 346.254152][T14184] ip6gretap1: entered allmulticast mode [ 346.268894][T14184] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 346.303322][T14186] tipc: Enabling of bearer rejected, failed to enable media [ 346.359936][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3654'. [ 346.433865][T14198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14198 comm=syz.6.3654 [ 346.498404][T14195] veth13: entered allmulticast mode [ 346.510021][T14195] bond7: (slave veth13): Enslaving as an active interface with an up link [ 346.775369][T14214] xt_hashlimit: size too large, truncated to 1048576 [ 347.854684][T14231] tipc: Enabling of bearer rejected, failed to enable media [ 347.952163][T14235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3664'. [ 348.081060][T14240] netlink: 'syz.0.3665': attribute type 1 has an invalid length. [ 348.164249][T14240] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.269153][T14242] veth9: entered allmulticast mode [ 348.301487][T14242] bond4: (slave veth9): Enslaving as an active interface with a down link [ 348.355997][T14245] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 348.377352][T14240] macvlan0: entered promiscuous mode [ 348.507490][T14240] macvlan0: entered allmulticast mode [ 348.534410][T14240] bond4: entered promiscuous mode [ 348.544489][T14253] 9p: Bad value for 'rfdno' [ 348.556364][T14240] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 348.602749][T14240] bond4: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 348.622048][T14240] bond4: left promiscuous mode [ 350.176810][T14289] loop8: detected capacity change from 0 to 512 [ 350.196515][T14289] EXT4-fs error (device loop8): ext4_free_inode:354: comm syz.8.3677: bit already cleared for inode 11 [ 350.273268][T14289] loop8: lost filesystem error report for type 5 error -117 [ 350.275653][T14289] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 350.283077][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 350.283102][ C0] EXT4-fs (loop8): initial error at time 2000000026: ext4_free_inode:354 [ 350.283124][ C0] EXT4-fs (loop8): last error at time 2000000026: ext4_free_inode:354 [ 350.367636][T14289] loop8: lost filesystem error report for type 5 error -117 [ 350.368563][T14289] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 350.402032][T14289] loop8: lost filesystem error report for type 5 error -117 [ 350.403143][T14289] EXT4-fs (loop8): 1 orphan inode deleted [ 350.434661][T14289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.483047][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.536590][ T28] audit: type=1326 audit(2000000026.330:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 350.639883][ T28] audit: type=1326 audit(2000000026.330:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 350.665932][ T28] audit: type=1326 audit(2000000026.330:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 350.717779][ T28] audit: type=1326 audit(2000000026.330:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 350.825526][ T28] audit: type=1326 audit(2000000026.330:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 350.923491][ T28] audit: type=1326 audit(2000000026.330:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 350.997748][ T28] audit: type=1326 audit(2000000026.330:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 351.005368][T14307] loop8: detected capacity change from 0 to 512 [ 351.050461][ T28] audit: type=1326 audit(2000000026.330:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 351.082853][ T28] audit: type=1326 audit(2000000026.330:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 351.134238][T14307] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3681: bg 0: block 104: invalid block bitmap [ 351.153252][T14307] loop8: lost filesystem error report for type 5 error -117 [ 351.153969][T14307] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 351.161550][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 351.161628][ C0] EXT4-fs (loop8): initial error at time 2000000026: ext4_validate_block_bitmap:432 [ 351.161829][ C0] EXT4-fs (loop8): last error at time 2000000026: ext4_validate_block_bitmap:432 [ 351.214051][ T28] audit: type=1326 audit(2000000026.330:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.4.3683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 351.238097][T14307] loop8: lost filesystem error report for type 5 error -117 [ 351.240771][T14307] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3681: invalid indirect mapped block 1 (level 1) [ 351.271238][T14307] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 351.273221][T14307] EXT4-fs (loop8): 1 truncate cleaned up [ 351.317903][T14307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.596320][ T3296] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 351.611210][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 351.611306][ T3296] Tainted: [W]=WARN [ 351.611313][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.611326][ T3296] Call Trace: [ 351.611334][ T3296] [ 351.611343][ T3296] __dump_stack+0x1d/0x30 [ 351.611371][ T3296] dump_stack_lvl+0x95/0xd0 [ 351.611443][ T3296] dump_stack+0x15/0x1b [ 351.611465][ T3296] dump_header+0x80/0x240 [ 351.611491][ T3296] oom_kill_process+0x295/0x350 [ 351.611554][ T3296] out_of_memory+0x97d/0xb80 [ 351.611653][ T3296] try_charge_memcg+0x62f/0xa10 [ 351.611691][ T3296] charge_memcg+0x6d/0x120 [ 351.611721][ T3296] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 351.611752][ T3296] __swap_cache_prepare_and_add+0x69/0x4a0 [ 351.611791][ T3296] ? alloc_pages_mpol+0x217/0x260 [ 351.611820][ T3296] swap_cache_alloc_folio+0xa2/0x120 [ 351.611861][ T3296] swap_cluster_readahead+0x35c/0x3c0 [ 351.611899][ T3296] swapin_readahead+0xde/0x840 [ 351.611925][ T3296] ? tick_program_event+0x79/0xc0 [ 351.611953][ T3296] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 351.611990][ T3296] ? __rcu_read_unlock+0x4e/0x70 [ 351.612010][ T3296] ? swap_cache_get_folio+0x1e0/0x1f0 [ 351.612037][ T3296] do_swap_page+0x31e/0x2180 [ 351.612114][ T3296] ? __schedule+0x951/0xd40 [ 351.612139][ T3296] ? __rcu_read_lock+0x36/0x50 [ 351.612161][ T3296] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 351.612186][ T3296] handle_mm_fault+0xb30/0x2e70 [ 351.612211][ T3296] ? vma_start_read+0x1c7/0x2c0 [ 351.612305][ T3296] do_user_addr_fault+0x62f/0x1050 [ 351.612358][ T3296] ? trace_page_fault_user+0x1f/0xa0 [ 351.612390][ T3296] exc_page_fault+0x62/0xa0 [ 351.612413][ T3296] asm_exc_page_fault+0x26/0x30 [ 351.612432][ T3296] RIP: 0033:0x7fd608f77fd7 [ 351.612475][ T3296] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 351.612496][ T3296] RSP: 002b:00007ffdcba6ae00 EFLAGS: 00010202 [ 351.612515][ T3296] RAX: 0000000000000000 RBX: 0000555574a52500 RCX: 00007fd608f77fd7 [ 351.612530][ T3296] RDX: 00007ffdcba6ae40 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.612545][ T3296] RBP: 00007ffdcba6aeac R08: 0000000000000000 R09: 0000000000000000 [ 351.612559][ T3296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 351.612653][ T3296] R13: 00000000000927c0 R14: 0000000000055e9a R15: 00007ffdcba6af00 [ 351.612674][ T3296] [ 351.614147][ T3296] memory: usage 302760kB, limit 307200kB, failcnt 210 [ 351.987657][ T3296] memory+swap: usage 137996kB, limit 9007199254740988kB, failcnt 0 [ 352.013205][ T3296] kmem: usage 97300kB, limit 9007199254740988kB, failcnt 0 [ 352.025724][ T3296] Memory cgroup stats for /syz3: [ 352.025982][ T3296] cache 0 [ 352.052776][ T3296] rss 0 [ 352.062523][ T3296] shmem 0 [ 352.068880][ T3296] mapped_file 0 [ 352.078985][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.081335][ T3296] dirty 0 [ 352.113755][T14304] syz.3.3682 (14304) used greatest stack depth: 8640 bytes left [ 352.142925][ T3296] writeback 0 [ 352.171074][ T3296] workingset_refault_anon 1273 [ 352.199170][ T3296] workingset_refault_file 617 [ 352.215360][ T3296] swap 3604480 [ 352.219515][ T3296] swapcached 8830976 [ 352.223999][ T3296] pgpgin 330375 [ 352.227670][ T3296] pgpgout 330372 [ 352.236566][ T3296] pgfault 364728 [ 352.245379][ T3296] pgmajfault 175 [ 352.254870][ T3296] inactive_anon 0 [ 352.273455][ T3296] active_anon 12288 [ 352.281622][ T3296] inactive_file 0 [ 352.290181][ T3296] active_file 0 [ 352.394746][ T3296] unevictable 0 [ 352.398515][ T3296] hierarchical_memory_limit 314572800 [ 352.403897][ T3296] hierarchical_memsw_limit 9223372036854771712 [ 352.410129][ T3296] total_cache 0 [ 352.413595][ T3296] total_rss 0 [ 352.417559][ T3296] total_shmem 0 [ 352.421024][ T3296] total_mapped_file 0 [ 352.425005][ T3296] total_dirty 0 [ 352.428552][ T3296] total_writeback 0 [ 352.433061][ T3296] total_workingset_refault_anon 1273 [ 352.442816][ T3296] total_workingset_refault_file 617 [ 352.452341][ T3296] total_swap 3604480 [ 352.456287][ T3296] total_swapcached 8830976 [ 352.460960][ T3296] total_pgpgin 330375 [ 352.464958][ T3296] total_pgpgout 330372 [ 352.469319][ T3296] total_pgfault 364728 [ 352.473477][ T3296] total_pgmajfault 175 [ 352.478350][ T3296] total_inactive_anon 0 [ 352.579976][ T3296] total_active_anon 12288 [ 352.584411][ T3296] total_inactive_file 0 [ 352.589234][ T3296] total_active_file 0 [ 352.593268][ T3296] total_unevictable 0 [ 352.597879][ T3296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3682,pid=14303,uid=0 [ 352.614599][ T3296] Memory cgroup out of memory: OOM victim 14303 (syz.3.3682) is already exiting. Skip killing the task [ 352.939312][T14356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3696'. [ 352.951144][T14356] veth0_macvtap: Caught tx_queue_len zero misconfig [ 352.961816][T14356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3696'. [ 352.971423][T14356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3696'. [ 353.799792][T14376] loop8: detected capacity change from 0 to 1024 [ 353.828496][T14376] EXT4-fs: Ignoring removed orlov option [ 353.846402][T14376] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 353.874733][T14376] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 353.894820][T14376] EXT4-fs (loop8): orphan cleanup on readonly fs [ 353.912373][T14376] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz.8.3706: Invalid inode table block 0 in block_group 0 [ 353.937996][T14376] loop8: lost filesystem error report for type 5 error -117 [ 353.942852][T14376] EXT4-fs (loop8): Remounting filesystem read-only [ 353.950339][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 353.950377][ C0] EXT4-fs (loop8): initial error at time 2000000029: __ext4_get_inode_loc:4885 [ 353.950419][ C0] EXT4-fs (loop8): last error at time 2000000029: __ext4_get_inode_loc:4885 [ 353.983557][T14376] EXT4-fs (loop8): 1 truncate cleaned up [ 353.996791][T14376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.068128][T14376] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.154704][T14388] hub 8-0:1.0: USB hub found [ 354.159644][T14388] hub 8-0:1.0: 8 ports detected [ 354.173284][T14390] xt_hashlimit: size too large, truncated to 1048576 [ 354.268450][T14399] loop8: detected capacity change from 0 to 512 [ 354.302533][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.319110][T14399] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 354.323409][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.337310][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.383754][T14408] netlink: 'syz.0.3719': attribute type 13 has an invalid length. [ 354.409853][T14405] infiniband syz1: set down [ 354.424318][ T7638] gre0 speed is unknown, defaulting to 1000 [ 354.434506][T14405] infiniband syz1: added gre0 [ 354.449114][T14405] RDS/IB: syz1: added [ 354.455249][T14405] smc: adding ib device syz1 with port count 1 [ 354.461922][T14405] smc: ib device syz1 port 1 has no pnetid [ 354.468650][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.476337][ T1039] gre0 speed is unknown, defaulting to 1000 [ 354.512645][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.548197][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.629409][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.693066][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.712424][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 354.733615][T14405] gre0 speed is unknown, defaulting to 1000 [ 354.774190][T14405] gre0 speed is unknown, defaulting to 1000 [ 355.033257][T14441] ip6erspan0: entered allmulticast mode [ 355.084619][T14446] netlink: 'syz.8.3731': attribute type 2 has an invalid length. [ 355.567537][T14465] netlink: 'syz.6.3738': attribute type 10 has an invalid length. [ 355.575927][T14465] ipvlan1: entered allmulticast mode [ 355.581527][T14465] veth0_vlan: entered allmulticast mode [ 355.591947][T14465] team0: Device ipvlan1 failed to register rx_handler [ 356.131612][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3740'. [ 356.144486][T14475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3740'. [ 356.290638][T14475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3740'. [ 356.964555][T14501] batman_adv: batadv0: Adding interface: dummy0 [ 356.981018][T14501] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 357.150652][T14501] batman_adv: batadv0: Interface activated: dummy0 [ 357.491519][T14509] loop8: detected capacity change from 0 to 512 [ 357.645242][T14508] gre0 speed is unknown, defaulting to 1000 [ 357.691285][T14509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.890253][T14509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.914004][T14509] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.001685][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 358.001700][ T28] audit: type=1400 audit(2000000289.801:4389): avc: denied { write } for pid=14507 comm="syz.8.3751" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.053038][T14509] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters [ 358.075302][ T28] audit: type=1400 audit(2000000289.801:4390): avc: denied { write } for pid=14507 comm="syz.8.3751" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.143509][ T28] audit: type=1400 audit(2000000289.831:4391): avc: denied { rename } for pid=14507 comm="syz.8.3751" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.167253][ T28] audit: type=1400 audit(2000000289.831:4392): avc: denied { unlink } for pid=14507 comm="syz.8.3751" name="file3" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 358.252902][T14542] netlink: 'syz.6.3767': attribute type 1 has an invalid length. [ 358.270072][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.282402][T14542] 8021q: adding VLAN 0 to HW filter on device bond8 [ 358.343114][T14542] veth15: entered allmulticast mode [ 358.351852][T14542] bond8: (slave veth15): Enslaving as an active interface with a down link [ 358.370862][T14542] bond8: entered promiscuous mode [ 358.376043][T14542] bond8: entered allmulticast mode [ 358.391585][T14546] SELinux: Context ›Y7»ôj is not valid (left unmapped). [ 358.394483][T14542] macvlan5: entered promiscuous mode [ 358.404396][T14542] macvlan5: entered allmulticast mode [ 358.411495][T14542] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 358.759345][T14573] hub 8-0:1.0: USB hub found [ 358.764283][T14573] hub 8-0:1.0: 8 ports detected [ 359.840077][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3772'. [ 360.055314][T14596] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.072790][T14596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.129843][T14596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.148461][T14596] veth0_virt_wifi: left promiscuous mode [ 360.166179][T14596] veth1_vlan: left promiscuous mode [ 360.184885][T14596] veth0_vlan: left promiscuous mode [ 360.204582][T14596] veth0_vlan: entered promiscuous mode [ 360.234024][T14596] veth1_vlan: entered promiscuous mode [ 360.255088][T14596] veth1_macvtap: left promiscuous mode [ 360.271719][T14596] veth0_macvtap: left promiscuous mode [ 360.284052][T14596] veth0_macvtap: entered promiscuous mode [ 360.299067][T14596] veth1_macvtap: entered promiscuous mode [ 360.309821][T14617] loop8: detected capacity change from 0 to 512 [ 360.316475][T14596] veth1_macvtap: entered allmulticast mode [ 360.324623][T14596] macsec0: left promiscuous mode [ 360.345568][T14617] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 360.362470][T14617] EXT4-fs (loop8): orphan cleanup on readonly fs [ 360.364046][T14596] veth0_to_team: entered promiscuous mode [ 360.397206][T14596] bond1: left promiscuous mode [ 360.403088][T14617] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 360.408082][T14596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.431363][T14617] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 360.443507][T14617] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #16: comm syz.8.3784: corrupted xattr block 31: invalid header [ 360.446056][T14596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.457314][T14617] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.466896][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 360.482509][ C1] EXT4-fs (loop8): initial error at time 2000000292: ext4_xattr_delete_inode:2972: inode 16 [ 360.492634][ C1] EXT4-fs (loop8): last error at time 2000000292: ext4_xattr_delete_inode:2972: inode 16 [ 360.503390][T14596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.505566][T14617] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 360.525394][T14596] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 360.530929][T14617] EXT4-fs (loop8): 1 orphan inode deleted [ 360.539453][T14617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.549002][T14596] vlan4: left promiscuous mode [ 360.571398][T14596] bridge1: left promiscuous mode [ 360.579563][T14596] 8021q: adding VLAN 0 to HW filter on device eth0 [ 360.589943][T14596] 8021q: adding VLAN 0 to HW filter on device eth1 [ 360.599440][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.609612][T14596] 8021q: adding VLAN 0 to HW filter on device eth2 [ 360.620121][T14596] 8021q: adding VLAN 0 to HW filter on device eth3 [ 360.633154][T14596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.634364][ T361] bond0: (slave ip6gretap0): link status down again after 0 ms [ 360.650007][T14596] vlan0: left promiscuous mode [ 360.655555][T14596] bond5: left promiscuous mode [ 360.668411][T14596] bridge2: left promiscuous mode [ 360.675552][T14596] macvlan4: left promiscuous mode [ 360.683815][T14596] bond6: left promiscuous mode [ 360.692061][T14596] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.702371][T14596] bond8: left promiscuous mode [ 360.707749][T14596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 360.716725][ T8677] gre0 speed is unknown, defaulting to 1000 [ 360.725276][ T8677] syz1: Port: 1 Link ACTIVE [ 360.730034][ T3468] bond4: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 360.747026][ T3468] bond4: (slave veth0_virt_wifi): link status definitely up, 10000 Mbps full duplex [ 361.251079][T14615] batman_adv: batadv0: Interface deactivated: dummy0 [ 361.259263][T14615] batman_adv: batadv0: Removing interface: dummy0 [ 361.268935][T14615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.285706][ T3391] syz2: Port: 1 Link ACTIVE [ 361.287458][T14618] team0: Port device xfrm0 added [ 361.295730][T14619] tipc: Enabled bearer , priority 0 [ 361.307401][ T40] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.326043][ T40] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 361.363058][ T40] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.382052][ T40] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 361.485470][T11269] bond8: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 361.536870][T11269] bond8: (slave veth15): making interface the new active one [ 361.784847][T11269] bond8: active interface up! [ 361.809956][T11269] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 361.936944][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 361.945140][ T3468] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 362.004926][ T8677] gre0 speed is unknown, defaulting to 1000 [ 362.011046][ T40] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.020437][ T40] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 362.029542][ T40] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.037975][ T40] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 362.057077][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.064953][ T3468] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 362.080164][T14649] bridge0: port 3(macsec1) entered blocking state [ 362.086809][T14649] bridge0: port 3(macsec1) entered disabled state [ 362.094226][T14649] macsec1: entered allmulticast mode [ 362.099781][T14649] bridge0: entered allmulticast mode [ 362.107288][T14649] macsec1: left allmulticast mode [ 362.112657][T14649] bridge0: left allmulticast mode [ 362.164743][T14652] futex_wake_op: syz.3.3794 tries to shift op by -1; fix this program [ 362.176912][ T3437] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.184747][ T3437] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 362.244070][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3795'. [ 362.253483][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3795'. [ 362.308134][ T3437] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 362.438717][ T28] audit: type=1400 audit(2000000294.231:4393): avc: denied { getopt } for pid=14665 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 363.532252][T14696] syzkaller0: entered promiscuous mode [ 363.538488][T14696] syzkaller0: entered allmulticast mode [ 363.715557][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3807'. [ 363.872530][T14714] gre0 speed is unknown, defaulting to 1000 [ 364.152469][T14703] loop8: detected capacity change from 0 to 1764 [ 364.208325][T14720] netlink: 'syz.0.3814': attribute type 10 has an invalid length. [ 364.249673][ T28] audit: type=1400 audit(2000000296.041:4394): avc: denied { mounton } for pid=14701 comm="syz.8.3810" path="/304/file0/file0" dev="loop8" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 364.387702][ T28] audit: type=1400 audit(2000000296.181:4395): avc: denied { connect } for pid=14726 comm="syz.0.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 364.400375][T14728] gre0 speed is unknown, defaulting to 1000 [ 365.240112][T14758] team_slave_1: Caught tx_queue_len zero misconfig [ 365.604474][T14767] netlink: 'syz.3.3829': attribute type 1 has an invalid length. [ 365.657620][ T40] net_ratelimit: 69 callbacks suppressed [ 365.657640][ T40] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.673125][T14767] 8021q: adding VLAN 0 to HW filter on device bond7 [ 365.697381][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.713550][T14769] netlink: 'syz.6.3830': attribute type 10 has an invalid length. [ 365.747927][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.757944][T14772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 365.810030][T14772] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 365.836891][ T49] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.856973][ T49] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.866072][T14772] bond7: (slave gre2): Error -95 calling set_mac_address [ 365.896942][ T40] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.906016][T14767] gretap2: entered promiscuous mode [ 365.918147][T14767] bond7: (slave gretap2): making interface the new active one [ 365.918784][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.933740][T14767] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 365.947544][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 365.976602][T14769] team0: Device wg2 is of different type [ 365.994112][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 366.001960][ T3468] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 366.025639][T14777] macvlan0: entered promiscuous mode [ 366.036579][T14777] macvlan0: entered allmulticast mode [ 366.049917][T14777] bond7: entered promiscuous mode [ 366.061780][T14777] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 366.083709][T14777] bond7: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 366.096467][ T28] audit: type=1326 audit(2000000297.891:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14780 comm="syz.6.3833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x0 [ 366.129119][T14777] bond7: left promiscuous mode [ 366.198188][ T28] audit: type=1400 audit(2000000298.001:4397): avc: denied { execute } for pid=14785 comm="syz.8.3834" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 366.611319][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 366.621468][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 366.691123][T14800] futex_wake_op: syz.4.3839 tries to shift op by -1; fix this program [ 368.201718][T14815] sit0: left promiscuous mode [ 368.245542][T14815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.271631][T14815] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.289992][T14815] tipc: Resetting bearer [ 368.305141][T14815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.324430][T14815] veth0_to_team: left promiscuous mode [ 368.338667][T14827] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3847'. [ 368.347886][T14815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.358359][T14815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.371313][T14815] veth1_macvtap: left promiscuous mode [ 368.377774][T14815] veth0_macvtap: left promiscuous mode [ 368.384069][T14815] veth0_macvtap: entered promiscuous mode [ 368.391463][T14815] veth1_macvtap: entered promiscuous mode [ 368.397471][T14815] veth1_macvtap: entered allmulticast mode [ 368.403618][T14815] macsec0: left promiscuous mode [ 368.416089][T14815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.434404][T14815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.444062][T14815] team1: left promiscuous mode [ 368.450886][T14815] 8021q: adding VLAN 0 to HW filter on device team1 [ 368.459520][T14815] team2: left promiscuous mode [ 368.464654][T14815] 8021q: adding VLAN 0 to HW filter on device team2 [ 368.473628][T14815] geneve3: left promiscuous mode [ 368.494141][T14815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.502945][T14815] veth0_to_team: entered promiscuous mode [ 368.511547][T14815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.522801][T14815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 368.532197][T14815] 8021q: adding VLAN 0 to HW filter on device eth0 [ 368.541067][T14815] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.549956][T14815] 8021q: adding VLAN 0 to HW filter on device eth2 [ 368.558605][T14815] 8021q: adding VLAN 0 to HW filter on device eth3 [ 368.566561][T14815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.576149][T14815] 8021q: adding VLAN 0 to HW filter on device bond6 [ 368.585653][T14815] vlan0: left promiscuous mode [ 368.590529][T14815] bond6: left promiscuous mode [ 368.595403][T14815] bridge2: left promiscuous mode [ 368.605150][T14815] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.613534][T14815] gretap2: left promiscuous mode [ 368.654282][T11269] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.662708][T11269] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.671521][T11269] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 368.679801][T11269] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 368.688237][T11269] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.696532][T11269] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.705878][T11269] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 368.714141][T11269] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 368.728617][T11269] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.736948][T11269] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.779393][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3850'. [ 368.781484][T11269] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 368.795131][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3850'. [ 368.803361][T11269] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 368.823155][T11269] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.832182][T11269] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.841152][T11269] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 368.850164][T11269] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 368.854492][T14838] loop8: detected capacity change from 0 to 256 [ 368.871136][ T28] audit: type=1326 audit(2000000300.671:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.3.3854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 368.904470][ T28] audit: type=1326 audit(2000000300.671:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.3.3854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 368.933918][ T28] audit: type=1326 audit(2000000300.671:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.3.3854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 368.961280][ T28] audit: type=1326 audit(2000000300.701:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.3.3854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd608f7d68e code=0x7ffc0000 [ 368.988916][ T28] audit: type=1326 audit(2000000300.701:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.3.3854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd608f7d68e code=0x7ffc0000 [ 369.016111][ T28] audit: type=1326 audit(2000000300.701:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.3.3854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd608fbcbc2 code=0x7ffc0000 [ 369.106971][T14854] syzkaller0: entered promiscuous mode [ 369.113236][T14854] syzkaller0: entered allmulticast mode [ 369.238908][T14862] loop8: detected capacity change from 0 to 736 [ 369.692127][T14874] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3862'. [ 370.356411][T14900] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 370.379495][T14900] xt_socket: unknown flags 0x48 [ 370.620437][T14908] syz_tun: entered allmulticast mode [ 370.627517][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3876'. [ 370.640756][T14907] syz_tun: left allmulticast mode [ 370.667116][ T49] net_ratelimit: 88 callbacks suppressed [ 370.667132][ T49] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.680914][T14921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.689825][T14917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3879'. [ 370.716910][ T49] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.717664][T14921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.735922][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.744573][T11269] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.767085][ T361] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.772974][T14921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.788656][T14921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.800350][T14921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.804394][ T361] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.813133][T14921] veth1_vlan: left promiscuous mode [ 370.847065][ T361] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.847272][T14921] veth0_vlan: left promiscuous mode [ 370.861426][T14921] veth0_vlan: entered promiscuous mode [ 370.868526][ T361] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.870045][T14921] veth1_vlan: entered promiscuous mode [ 370.885842][T14921] veth1_macvtap: left promiscuous mode [ 370.892976][T14921] veth0_macvtap: left promiscuous mode [ 370.898400][ T361] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.899815][T14921] veth0_macvtap: entered promiscuous mode [ 370.913088][T14921] veth1_macvtap: entered promiscuous mode [ 370.917247][ T361] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 370.923611][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.935311][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.943772][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.953206][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.965771][T14921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.975941][T14921] bond2: left promiscuous mode [ 370.981506][T14921] bridge1: left promiscuous mode [ 370.987420][T14921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.997448][T14921] bond3: left promiscuous mode [ 371.002622][T14921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.011308][T14921] bond4: left promiscuous mode [ 371.016334][T14921] gre2: left promiscuous mode [ 371.025864][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.033033][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.042684][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.049788][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.078859][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.088474][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.111710][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.126778][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.207696][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 371.207713][ T28] audit: type=1400 audit(2000000303.001:4478): avc: denied { kexec_image_load } for pid=14940 comm="syz.8.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 371.389702][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3889'. [ 371.399568][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3889'. [ 371.764421][T14958] loop8: detected capacity change from 0 to 136 [ 371.783472][T14951] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.789210][T14958] Attempt to read inode for relocated directory [ 371.830314][ T28] audit: type=1326 audit(2000000303.631:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 371.860077][ T28] audit: type=1326 audit(2000000303.661:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 371.888985][ T28] audit: type=1326 audit(2000000303.661:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 371.924356][ T28] audit: type=1326 audit(2000000303.691:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 371.971102][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3894'. [ 371.995068][ T28] audit: type=1326 audit(2000000303.691:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 372.028072][ T28] audit: type=1326 audit(2000000303.721:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 372.091212][T14972] netlink: 'syz.3.3899': attribute type 1 has an invalid length. [ 372.110474][T14969] sit0: left promiscuous mode [ 372.116716][ T28] audit: type=1326 audit(2000000303.721:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ffc01cbc2 code=0x7ffc0000 [ 372.126139][T14969] bridge0: port 1(gretap0) entered blocking state [ 372.148659][T14969] bridge0: port 1(gretap0) entered forwarding state [ 372.158391][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3899'. [ 372.169629][ T28] audit: type=1326 audit(2000000303.721:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1ffc01cc57 code=0x7ffc0000 [ 372.172555][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.207971][ T28] audit: type=1326 audit(2000000303.761:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14959 comm="syz.4.3895" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffc01ce59 code=0x7ffc0000 [ 372.236653][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3899'. [ 372.264684][T14969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.278227][T14969] veth1_macvtap: left promiscuous mode [ 372.284685][T14969] veth0_macvtap: left promiscuous mode [ 372.292037][T14969] veth0_macvtap: entered promiscuous mode [ 372.299851][T14969] veth1_macvtap: entered promiscuous mode [ 372.305785][T14969] veth1_macvtap: entered allmulticast mode [ 372.314087][T14969] macsec0: left promiscuous mode [ 372.325467][T14969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.333558][T14969] veth0_to_team: entered promiscuous mode [ 372.341003][T14969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.371221][T14969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.410321][T14969] netdevsim netdevsim0 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.421387][T14969] 8021q: adding VLAN 0 to HW filter on device eth0 [ 372.430113][T14969] netdevsim netdevsim0 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.441244][T14969] 8021q: adding VLAN 0 to HW filter on device eth1 [ 372.449589][T14969] netdevsim netdevsim0 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.459999][T14969] 8021q: adding VLAN 0 to HW filter on device eth2 [ 372.469435][T14969] netdevsim netdevsim0 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.479926][T14969] 8021q: adding VLAN 0 to HW filter on device eth3 [ 372.529876][T14972] 8021q: adding VLAN 0 to HW filter on device bond9 [ 372.576290][T14974] macvlan0: entered promiscuous mode [ 372.581748][T14974] macvlan0: entered allmulticast mode [ 372.599991][T14975] bond9: (slave bridge0): making interface the new active one [ 372.615284][T14975] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 372.636627][T14978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14978 comm=syz.0.3901 [ 372.649714][ T3468] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.682784][ T3468] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.712738][ T3468] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.726944][ T3468] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.742020][T14981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.749273][T14981] IPv6: NLM_F_CREATE should be set when creating new route [ 372.761460][ T3468] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.775317][ T3468] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.795256][ T3468] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.812884][ T3468] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.874752][T14981] tipc: Resetting bearer [ 372.899967][T14981] tipc: Resetting bearer [ 373.046586][T14981] veth1_macvtap: left allmulticast mode [ 373.245296][ T3468] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.254028][ T3468] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.278487][ T3468] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.304002][ T3468] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 373.339521][ T3468] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.375247][ T3468] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.414776][ T3468] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.433283][ T361] tipc: Subscription rejected, illegal request [ 373.458078][ T3468] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 373.492708][ T3468] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.511291][ T3468] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.528654][ T3468] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.556407][ T3468] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 373.576796][T14967] netlink: 'syz.6.3898': attribute type 3 has an invalid length. [ 373.596203][ T3468] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.613101][ T3468] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.616529][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3898'. [ 373.632114][ T3468] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.666202][ T3468] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 373.732343][ T68] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 373.752751][ T68] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 373.784910][ T68] bond4: (slave veth9): making interface the new active one [ 373.797787][ T68] bond4: active interface up! [ 373.803245][T15002] gre0 speed is unknown, defaulting to 1000 [ 373.854185][T15022] batadv0: Caught tx_queue_len zero misconfig [ 375.650755][T15051] loop8: detected capacity change from 0 to 512 [ 375.697767][T14646] net_ratelimit: 135 callbacks suppressed [ 375.697783][T14646] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 375.716338][T15051] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 375.791031][T15051] EXT4-fs (loop8): 1 truncate cleaned up [ 375.820679][T14646] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 375.854001][T15051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.918449][T14646] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 375.967071][T14646] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 376.049984][ T12] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 376.097679][ T12] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 376.137663][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 376.171893][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.287407][ T3468] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 376.309867][ T3468] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 376.439924][ T12] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 376.472363][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3922'. [ 376.510948][T15065] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3921'. [ 376.558294][T15069] loop8: detected capacity change from 0 to 4096 [ 376.573994][T15069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.665375][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3924'. [ 376.679112][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 376.679129][ T28] audit: type=1400 audit(2000000308.481:4585): avc: denied { bind } for pid=15079 comm="syz.4.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.703818][T15071] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3924'. [ 376.718145][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.751381][T15085] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 376.912621][T15099] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3934'. [ 377.140263][T15118] gre0 speed is unknown, defaulting to 1000 [ 377.241788][T15080] IPVS: Unknown mcast interface: syz_tun [ 377.752898][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3946'. [ 377.765196][T15142] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3947'. [ 379.263147][T15165] netlink: 'syz.6.3954': attribute type 49 has an invalid length. [ 379.420041][T15174] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 379.451434][T15177] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 379.534009][T15181] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 380.631324][T15172] gre0 speed is unknown, defaulting to 1000 [ 380.717455][T15214] netlink: 700 bytes leftover after parsing attributes in process `syz.3.3969'. [ 380.808276][ T68] net_ratelimit: 74 callbacks suppressed [ 380.808295][ T68] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 380.834371][ T68] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 380.958611][ T12] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 380.966932][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 381.097513][ T12] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 381.105386][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 381.237741][ T68] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 381.245709][ T68] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 381.430446][T15220] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 381.443447][ T68] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 381.461973][ T68] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 382.403596][T15226] IPVS: Unknown mcast interface: bridge_slave_0 [ 382.414315][T15226] IPVS: Unknown mcast interface: syz_tun [ 382.456041][T15233] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3975'. [ 383.045604][T15257] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 383.077020][T15259] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3983'. [ 383.104612][ T28] audit: type=1400 audit(2000000314.901:4586): avc: denied { listen } for pid=15256 comm="syz.4.3982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 383.139788][ T28] audit: type=1400 audit(2000000314.941:4587): avc: denied { create } for pid=15258 comm="syz.8.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 383.165697][ T28] audit: type=1400 audit(2000000314.961:4588): avc: denied { write } for pid=15258 comm="syz.8.3983" path="socket:[44120]" dev="sockfs" ino=44120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 383.193240][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3982'. [ 383.515274][T15251] bridge0: port 1(gretap0) entered disabled state [ 383.522452][T15251] gretap0: left allmulticast mode [ 383.527722][T15251] gretap0: left promiscuous mode [ 383.532819][T15251] bridge0: port 1(gretap0) entered disabled state [ 383.560604][T15251] tipc: Resetting bearer [ 383.583239][T15251] bond4: (slave veth0_to_bond): Releasing active interface [ 383.590868][T15251] veth9: entered promiscuous mode [ 383.630021][T15257] bond6: entered promiscuous mode [ 383.635121][T15257] bond6: entered allmulticast mode [ 383.641425][T15257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 383.652161][T15264] bond6 (unregistering): Released all slaves [ 383.883666][T15274] tipc: Enabling of bearer rejected, failed to enable media [ 383.954553][T15275] loop8: detected capacity change from 0 to 2368 [ 384.140347][T15285] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3989'. [ 384.293016][T15287] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 384.351106][ T68] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.359752][ T68] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.369362][ T68] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.386729][ T68] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 384.512904][T15298] loop8: detected capacity change from 0 to 128 [ 384.631706][T15298] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.138965][T15298] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.165930][ T28] audit: type=1400 audit(2000000316.961:4589): avc: denied { write } for pid=15297 comm="syz.8.3993" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.468046][ T9630] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.521978][T15308] syzkaller0: entered promiscuous mode [ 385.527637][T15308] syzkaller0: entered allmulticast mode [ 385.613571][T15310] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3997'. [ 385.681457][T15316] ipt_REJECT: TCP_RESET invalid for non-tcp [ 385.695307][T15319] bond0: entered promiscuous mode [ 385.705513][T15319] bond0: entered allmulticast mode [ 385.711993][T15319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.722898][T15322] netlink: 'syz.6.4001': attribute type 9 has an invalid length. [ 385.731074][T15322] netlink: 'syz.6.4001': attribute type 6 has an invalid length. [ 385.740300][T15319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3997'. [ 385.751941][T15319] unsupported nlmsg_type 40 [ 385.786448][T15322] @0Ù: renamed from bond_slave_1 (while UP) [ 385.827139][ T49] net_ratelimit: 114 callbacks suppressed [ 385.827159][ T49] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 385.841827][ T49] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 385.977207][ T310] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 385.985168][ T310] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 386.118288][ T49] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 386.118316][ T49] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 386.215353][T15332] IPVS: nq: FWM 3 0x00000003 - no destination available [ 386.227151][ T310] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 386.227179][ T310] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 386.336916][ T49] bond0: (slave ip6gretap0): link status up, enabling it in 0 ms [ 386.520944][T15349] 9pnet_virtio: no channels available for device 127.0.0.1 [ 386.768296][T15363] hsr0: entered allmulticast mode [ 386.779900][T15363] hsr_slave_0: entered allmulticast mode [ 386.788010][T15365] netlink: 380 bytes leftover after parsing attributes in process `syz.0.4015'. [ 386.859631][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4014'. [ 386.883304][T15363] hsr_slave_0: left promiscuous mode [ 386.936442][T15371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15371 comm=syz.8.4017 [ 386.976242][T15363] hsr0 (unregistering): left allmulticast mode [ 387.111220][T15376] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4019'. [ 387.143917][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4021'. [ 387.162237][T15380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 387.190366][T15380] macvlan1: entered promiscuous mode [ 387.198621][T15380] macvlan1: entered allmulticast mode [ 387.204954][ T28] audit: type=1400 audit(2000000319.001:4590): avc: denied { mounton } for pid=15382 comm="syz.8.4022" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 387.234393][T15380] bond10: (slave macvlan1): Opening slave failed [ 387.244553][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 387.280862][T15384] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 387.304912][T15387] macvlan1: entered promiscuous mode [ 387.312051][T15387] macvlan1: entered allmulticast mode [ 387.322570][T15387] bond10: (slave macvlan1): Error -98 calling set_mac_address [ 387.488141][ T28] audit: type=1400 audit(2000000319.281:4591): avc: denied { setopt } for pid=15392 comm="syz.8.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.628292][T15399] loop8: detected capacity change from 0 to 256 [ 387.643057][T15399] msdos: Unknown parameter 'nodos' [ 387.829852][T15406] loop8: detected capacity change from 0 to 512 [ 388.185308][ T28] audit: type=1326 audit(2000000319.941:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.8.4037" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c8f2ece59 code=0x0 [ 388.316696][ T28] audit: type=1400 audit(2000000320.111:4593): avc: denied { map } for pid=15429 comm="syz.6.4039" path="socket:[44358]" dev="sockfs" ino=44358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.410241][T15432] __nla_validate_parse: 2 callbacks suppressed [ 388.410275][T15432] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4040'. [ 388.557316][T15437] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.577366][T15437] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.661258][T15437] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.681614][T15437] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.774248][T15437] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.785479][T15437] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.853897][T15437] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.866057][T15437] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.943537][ T68] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.970277][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.006566][ T68] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.026464][ T68] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.048290][ T68] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.057626][ T68] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.079762][T15445] syzkaller0: entered promiscuous mode [ 389.086418][T15445] syzkaller0: entered allmulticast mode [ 389.102819][ T68] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.121542][ T68] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.281806][T15452] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4047'. [ 389.394436][T15456] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4048'. [ 389.405867][T15456] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4048'. [ 389.531190][T15459] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4049'. [ 390.086140][T15466] bond4: (slave veth0_virt_wifi): Releasing active interface [ 390.095071][T15466] gretap0: entered promiscuous mode [ 390.244387][T15476] loop8: detected capacity change from 0 to 2048 [ 390.271505][T15466] bond0: (slave ip6gretap0): Releasing active interface [ 390.504459][T15466] bond4: (slave gretap0): Releasing active interface [ 390.539518][T15466] bond4: (slave gretap0): the permanent HWaddr of slave - 2e:47:31:cc:d9:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 390.661281][T15466] gretap0: left promiscuous mode [ 390.680546][T15466] bond4: (slave veth11): making interface the new active one [ 390.724844][T15476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.744141][T15476] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.4055: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 390.767963][T15476] EXT4-fs (loop8): Remounting filesystem read-only [ 390.778242][T15466] bond4: (slave veth11): Releasing active interface [ 390.792490][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.847623][T15466] bond5: (slave bridge2): Releasing active interface [ 390.856304][T15466] bridge2: left allmulticast mode [ 390.878104][T15466] bond6: left allmulticast mode [ 390.893111][T15466] ip6gretap1: left allmulticast mode [ 390.987642][T15466] team0: Port device macvlan4 removed [ 391.024816][T15466] bond6: (slave ip6gretap1): Releasing active interface [ 391.033973][T15466] ip6gretap1: left promiscuous mode [ 391.138818][T15466] bond7: (slave veth13): Releasing backup interface [ 391.164614][T15466] bond8: (slave veth15): Releasing active interface [ 391.238202][T15472] team0: Unable to change to the same mode the team is in [ 391.268468][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4059'. [ 391.284614][T15497] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.297330][T15497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.305288][T15497] team0: Port device macvlan2 added [ 391.313024][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4059'. [ 391.328060][T15497] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 391.337426][ T9] bridge5: entered promiscuous mode [ 391.356062][T15497] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 391.364430][T15497] team0: Port device macvlan3 added [ 391.641815][T15507] gre0 speed is unknown, defaulting to 1000 [ 392.393435][T15518] netlink: 'syz.6.4067': attribute type 1 has an invalid length. [ 392.823100][T15526] loop8: detected capacity change from 0 to 512 [ 393.767256][T15526] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.803191][T15526] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.970275][T15546] tipc: Resetting bearer [ 394.521628][T15546] veth1_macvtap: left allmulticast mode [ 394.647837][ T9] gre0 speed is unknown, defaulting to 1000 [ 394.654771][ T9] syz1: Port: 1 Link DOWN [ 394.665446][T15556] syz2: Port: 1 Link DOWN [ 394.672373][ T12] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.710803][ T12] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 394.719394][ T12] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.728576][ T12] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 394.737766][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.745524][T15569] netlink: 'syz.6.4078': attribute type 1 has an invalid length. [ 394.754684][ T8677] gre0 speed is unknown, defaulting to 1000 [ 394.754792][ T12] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.775287][T15571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.809039][ T12] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 394.817522][ T12] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.825969][ T12] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 394.864673][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4078'. [ 394.880331][T15569] 8021q: adding VLAN 0 to HW filter on device bond9 [ 394.935283][T15572] macvlan5: entered promiscuous mode [ 394.986708][T15572] macvlan5: entered allmulticast mode [ 395.026699][T15572] bond9: entered promiscuous mode [ 395.056937][T15572] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 395.103177][T15572] bond9: left promiscuous mode [ 395.265932][T15578] bond9: (slave bridge3): Enslaving as an active interface with a down link [ 395.368996][T15569] macvlan5: entered promiscuous mode [ 395.401753][T15569] macvlan5: entered allmulticast mode [ 395.429286][T15569] bond9: entered promiscuous mode [ 395.451734][T15569] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 395.507039][T15569] bond9: left promiscuous mode [ 395.766486][T15593] netlink: 'syz.4.4087': attribute type 29 has an invalid length. [ 395.776173][ T68] veth9: left promiscuous mode [ 395.802429][T15594] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4086'. [ 395.936562][T15603] batman_adv: batadv0: Adding interface: dummy0 [ 395.942894][T15603] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.968923][T15603] batman_adv: batadv0: Interface activated: dummy0 [ 395.980411][T15603] net_ratelimit: 104 callbacks suppressed [ 395.980428][T15603] batadv0: mtu less than device minimum [ 395.992335][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.003385][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.014285][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.025339][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.036457][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.047398][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.058330][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.069932][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.080807][T15603] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 396.201339][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4093'. [ 396.211331][T15611] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4093'. [ 396.230884][T15599] gre0 speed is unknown, defaulting to 1000 [ 396.772130][T15620] gre0 speed is unknown, defaulting to 1000 [ 398.167472][T15649] netlink: 'syz.6.4103': attribute type 1 has an invalid length. [ 398.277107][T15649] 8021q: adding VLAN 0 to HW filter on device bond10 [ 398.967474][T15665] loop8: detected capacity change from 0 to 512 [ 399.306410][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4109'. [ 399.332233][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4109'. [ 399.357418][T15674] netlink: 'syz.8.4109': attribute type 4 has an invalid length. [ 399.371386][T15671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.400105][T15671] bond5: (slave bond0): making interface the new active one [ 399.416406][T15671] bond5: (slave bond0): Enslaving as an active interface with an up link [ 399.416678][T15674] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4109'. [ 399.462516][T15674] .`: renamed from bond0 (while UP) [ 399.509574][T15678] netlink: 380 bytes leftover after parsing attributes in process `syz.8.4111'. [ 399.559109][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4112'. [ 399.585105][T15678] loop8: detected capacity change from 0 to 764 [ 399.641999][T15678] Symlink component flag not implemented [ 399.653739][T15678] Symlink component flag not implemented (116) [ 399.750703][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4115'. [ 399.964789][T15704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4116'. [ 400.204620][T15715] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4121'. [ 400.261165][ T3437] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.271176][ T3437] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.281608][ T3437] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.290515][ T3437] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.426598][T15727] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4125'. [ 400.656177][T15738] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4130'. [ 400.665446][T15738] batman_adv: batadv0: Interface deactivated: dummy0 [ 400.693004][T15738] batman_adv: batadv0: Removing interface: dummy0 [ 401.645424][T15773] bridge0: port 3(gretap0) entered blocking state [ 401.664485][T15773] bridge0: port 3(gretap0) entered disabled state [ 401.672400][T15773] gretap0: entered allmulticast mode [ 401.679338][T15773] gretap0: entered promiscuous mode [ 401.687099][T15773] bridge0: port 3(gretap0) entered blocking state [ 401.693949][T15773] bridge0: port 3(gretap0) entered forwarding state [ 401.701375][T15787] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4138'. [ 401.769697][T15793] netlink: 'syz.3.4144': attribute type 1 has an invalid length. [ 401.796439][T15793] 8021q: adding VLAN 0 to HW filter on device bond11 [ 401.817628][T15793] macvlan1: entered promiscuous mode [ 401.823136][T15793] macvlan1: entered allmulticast mode [ 401.830309][T15793] bond11: entered promiscuous mode [ 401.835851][T15793] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 401.854551][T15793] bond11: left promiscuous mode [ 401.864191][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4144'. [ 401.886439][T15791] gre0 speed is unknown, defaulting to 1000 [ 401.915390][T15803] bond11: (slave bridge4): Enslaving as an active interface with a down link [ 401.949988][T15807] macvlan1: entered promiscuous mode [ 401.965870][T15807] macvlan1: entered allmulticast mode [ 401.997664][T15807] bond11: entered promiscuous mode [ 402.019465][T15807] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 402.031319][T15807] bond11: left promiscuous mode [ 402.104382][T15812] syzkaller0: entered promiscuous mode [ 402.110077][T15812] syzkaller0: entered allmulticast mode [ 402.138038][T15770] gre0 speed is unknown, defaulting to 1000 [ 402.199384][ T28] audit: type=1326 audit(2000000333.992:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.278113][ T28] audit: type=1326 audit(2000000334.002:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.379828][T15829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.395475][ T28] audit: type=1326 audit(2000000334.002:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.485865][ T28] audit: type=1326 audit(2000000334.002:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.581419][ T28] audit: type=1326 audit(2000000334.002:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.607874][T15830] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 402.646927][ T28] audit: type=1326 audit(2000000334.002:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.677888][ T28] audit: type=1326 audit(2000000334.002:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.730475][ T28] audit: type=1326 audit(2000000334.002:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.804713][ T28] audit: type=1326 audit(2000000334.002:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.844982][ T28] audit: type=1326 audit(2000000334.002:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.0.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f93c87cce59 code=0x7ffc0000 [ 402.864278][T15852] gre0 speed is unknown, defaulting to 1000 [ 403.101531][T15878] netlink: 'syz.0.4165': attribute type 1 has an invalid length. [ 403.163698][T15866] bond0: entered promiscuous mode [ 403.174843][T15866] batadv0: entered promiscuous mode [ 403.181981][T15866] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 403.193419][T15866] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 403.209936][T15874] netlink: 'syz.4.4161': attribute type 13 has an invalid length. [ 403.218880][T15866] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 403.227154][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4165'. [ 403.252652][T15878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.265143][T15879] macvlan0: entered promiscuous mode [ 403.271110][T15879] macvlan0: entered allmulticast mode [ 403.281661][T15879] bond5: entered promiscuous mode [ 403.287758][T15879] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 403.297103][T15879] bond5: left promiscuous mode [ 403.315659][T15874] gretap0: refused to change device tx_queue_len [ 403.322981][T15874] net_ratelimit: 10 callbacks suppressed [ 403.322998][T15874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 403.357360][T15881] bond5: (slave bridge2): Enslaving as an active interface with a down link [ 403.381422][T15884] macvlan0: entered promiscuous mode [ 403.388859][T15884] macvlan0: entered allmulticast mode [ 403.395019][T15884] bond5: entered promiscuous mode [ 403.400648][T15884] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 403.410748][T15884] bond5: left promiscuous mode [ 403.865196][T15903] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4171'. [ 403.908562][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4173'. [ 403.928545][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4173'. [ 403.963775][T15920] netlink: 'syz.0.4176': attribute type 1 has an invalid length. [ 403.985037][T15920] bond6: entered allmulticast mode [ 404.035371][T15920] bond6: (slave ip6gretap1): making interface the new active one [ 404.074314][T15920] ip6gretap1: entered allmulticast mode [ 404.101452][T15920] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 404.157180][T15926] veth11: entered promiscuous mode [ 404.164200][T15926] bond6: (slave veth11): Enslaving as an active interface with a down link [ 404.182069][T15927] bond6: left allmulticast mode [ 404.187347][T15927] ip6gretap1: left allmulticast mode [ 404.206101][T15927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 404.273070][T15931] netlink: 'syz.0.4180': attribute type 1 has an invalid length. [ 404.290271][T15933] syzkaller0: entered promiscuous mode [ 404.297413][T15933] syzkaller0: entered allmulticast mode [ 404.321694][T15931] 8021q: adding VLAN 0 to HW filter on device bond7 [ 404.359652][T15933] tc action pedit offset 65536 out of bounds [ 404.401223][T15931] bond7: (slave gretap1): making interface the new active one [ 404.444216][T15931] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 404.873778][T15949] loop8: detected capacity change from 0 to 4096 [ 404.900561][T15949] ext4: Unknown parameter 'appraise' [ 404.910168][T15957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.934782][T15954] tipc: Enabling of bearer rejected, failed to enable media [ 405.055368][T15966] __nla_validate_parse: 4 callbacks suppressed [ 405.055393][T15966] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4191'. [ 405.087087][T15962] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4190'. [ 405.444834][T15986] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4199'. [ 406.445044][T15181] IPVS: ip_vs_send_async error -101 [ 407.609176][T16002] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4203'. [ 407.677473][T16006] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4205'. [ 407.732022][T16008] team0: entered promiscuous mode [ 407.737991][T16008] macvlan2: entered promiscuous mode [ 407.743773][T16008] bond6: entered promiscuous mode [ 407.752112][T16008] macvlan3: entered promiscuous mode [ 407.759792][T16008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.997899][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 407.997916][ T28] audit: type=1400 audit(2000000339.744:4635): avc: denied { connect } for pid=16013 comm="syz.8.4209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 408.149020][T16014] loop8: detected capacity change from 0 to 512 [ 408.217259][T16014] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.260806][T16014] ext4 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.447496][T16031] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4212'. [ 408.473929][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.545567][T16041] loop8: detected capacity change from 0 to 2048 [ 408.575366][T16041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.586883][T16035] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4215'. [ 408.672716][T16043] gre0 speed is unknown, defaulting to 1000 [ 408.789286][T16058] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4219'. [ 409.650529][T16065] xt_hashlimit: size too large, truncated to 1048576 [ 410.522165][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.525385][ T28] audit: type=1400 audit(2000000341.924:4636): avc: denied { create } for pid=16062 comm="syz.3.4221" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 410.727937][T16080] loop8: detected capacity change from 0 to 128 [ 410.794059][ T28] audit: type=1400 audit(2000000342.574:4637): avc: denied { accept } for pid=16084 comm="syz.0.4225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 410.863988][T16089] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4226'. [ 411.587779][T16104] loop8: detected capacity change from 0 to 512 [ 411.599856][T16104] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4232: bad orphan inode 15 [ 411.610382][T16104] loop8: lost filesystem error report for type 5 error -117 [ 411.610583][T16104] ext4_test_bit(bit=14, block=18) = 1 [ 411.617894][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 411.617936][ C1] EXT4-fs (loop8): initial error at time 2000000343: ext4_orphan_get:1423 [ 411.617978][ C1] EXT4-fs (loop8): last error at time 2000000343: ext4_orphan_get:1423 [ 411.646930][T16104] is_bad_inode(inode)=0 [ 411.651158][T16104] NEXT_ORPHAN(inode)=1023 [ 411.655547][T16104] max_ino=32 [ 411.658796][T16104] i_nlink=0 [ 411.662419][T16104] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.4232: corrupted xattr block 19: invalid header [ 411.676162][T16104] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 411.676779][T16104] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 411.696333][T16104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 411.710094][T16104] ext4 filesystem being mounted at /392/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 411.872016][ T28] audit: type=1400 audit(2000000343.674:4638): avc: denied { accept } for pid=16109 comm="syz.0.4234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 411.940056][ T28] audit: type=1400 audit(2000000343.734:4639): avc: denied { write } for pid=16103 comm="syz.8.4232" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.965168][T16114] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4232: bg 0: block 449: padding at end of block bitmap is not set [ 411.986069][ T28] audit: type=1400 audit(2000000343.734:4640): avc: denied { create } for pid=16103 comm="syz.8.4232" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 412.730032][T16121] siw: device registration error -23 [ 412.742838][T16119] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 412.779877][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4235'. [ 412.960607][T16128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4238'. [ 413.010359][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4238'. [ 413.032683][T16125] gre0 speed is unknown, defaulting to 1000 [ 413.416196][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 413.462598][T16136] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4240'. [ 413.724987][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 415.835072][T16204] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4252'. [ 417.111548][T16219] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 418.340186][T16248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4264'. [ 419.525530][T16264] netlink: 'syz.3.4271': attribute type 1 has an invalid length. [ 419.987519][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.007052][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4273'. [ 420.008448][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.211833][ T28] audit: type=1400 audit(2000000352.014:4641): avc: denied { lock } for pid=16273 comm="syz.3.4274" path="socket:[49204]" dev="sockfs" ino=49204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 420.276702][ T28] audit: type=1326 audit(2000000352.074:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16285 comm="syz.3.4277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd608fbce59 code=0x0 [ 420.799552][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4281'. [ 421.452754][ T28] audit: type=1400 audit(2000000353.254:4643): avc: denied { ioctl } for pid=16319 comm="syz.3.4287" path="socket:[48457]" dev="sockfs" ino=48457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 421.568854][T16324] ªªªªªª: renamed from vlan0 [ 421.573539][ T28] audit: type=1400 audit(2000000353.374:4644): avc: denied { write } for pid=16319 comm="syz.3.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.268588][ T28] audit: type=1400 audit(2000000356.064:4645): avc: denied { create } for pid=16333 comm="syz.6.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.665219][ T28] audit: type=1400 audit(2000000356.454:4646): avc: denied { accept } for pid=16344 comm="syz.0.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.713628][T16347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4295'. [ 424.856412][T16351] macsec1: entered promiscuous mode [ 424.869866][T16351] batadv0: entered promiscuous mode [ 424.878348][T16351] macsec1: entered allmulticast mode [ 424.908148][T16351] batadv0: entered allmulticast mode [ 424.937167][T16351] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 424.975559][T16351] batadv0: left allmulticast mode [ 424.980953][T16351] batadv0: left promiscuous mode [ 425.248275][T16361] gre0 speed is unknown, defaulting to 1000 [ 425.322292][T16377] loop8: detected capacity change from 0 to 128 [ 425.345252][ T28] audit: type=1400 audit(2000000357.144:4647): avc: denied { read } for pid=16372 comm="syz.0.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.727576][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4309'. [ 426.809635][T16395] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4307'. [ 426.843788][T16390] tipc: Disabling bearer [ 426.854943][T16390] batadv0 (unregistering): left promiscuous mode [ 426.868037][ T28] audit: type=1400 audit(2000000358.664:4648): avc: denied { ioctl } for pid=16393 comm="syz.6.4310" path="socket:[49420]" dev="sockfs" ino=49420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 426.951245][T16398] netlink: 'syz.6.4311': attribute type 6 has an invalid length. [ 426.961533][T16398] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4311'. [ 427.826918][ T28] audit: type=1400 audit(2000000000.380:4649): avc: denied { unmount } for pid=9630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 428.070128][T16415] bond0: Removing last ns target with arp_interval on [ 428.195247][T16420] loop8: detected capacity change from 0 to 1764 [ 428.588865][T16426] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 428.620416][ T28] audit: type=1400 audit(2000000001.160:4650): avc: denied { relabelto } for pid=16421 comm="syz.4.4319" name="852" dev="tmpfs" ino=4440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 428.688013][ T28] audit: type=1400 audit(2000000001.160:4651): avc: denied { associate } for pid=16421 comm="syz.4.4319" name="852" dev="tmpfs" ino=4440 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 429.584301][T16433] 8021q: adding VLAN 0 to HW filter on device .` [ 429.883818][T16433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.947159][T16433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.059644][T16406] syz.0.4315 (16406) used greatest stack depth: 8616 bytes left [ 430.159271][ T28] audit: type=1400 audit(2000000002.720:4652): avc: denied { write } for pid=3303 comm="syz-executor" name="852" dev="tmpfs" ino=4440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 430.221453][ T28] audit: type=1400 audit(2000000002.720:4653): avc: denied { remove_name } for pid=3303 comm="syz-executor" name="binderfs" dev="tmpfs" ino=4444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 430.286878][ T28] audit: type=1400 audit(2000000002.720:4654): avc: denied { write } for pid=3303 comm="syz-executor" name="852" dev="tmpfs" ino=4440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 430.326792][ T40] smc: removing ib device syz2 [ 430.336869][ T28] audit: type=1400 audit(2000000002.720:4655): avc: denied { write } for pid=3303 comm="syz-executor" name="852" dev="tmpfs" ino=4440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 430.394442][ T28] audit: type=1400 audit(2000000002.720:4656): avc: denied { write } for pid=3303 comm="syz-executor" name="852" dev="tmpfs" ino=4440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 430.448300][ T28] audit: type=1400 audit(2000000002.720:4657): avc: denied { rmdir } for pid=3303 comm="syz-executor" name="852" dev="tmpfs" ino=4440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 431.286975][ T28] audit: type=1400 audit(2000000003.840:4658): avc: denied { mount } for pid=16465 comm="syz.6.4331" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 431.657885][T16469] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.791022][T16482] loop8: detected capacity change from 0 to 1024 [ 431.802079][T16482] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 431.848555][T16482] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.4337: lblock 2 mapped to illegal pblock 2 (length 1) [ 431.883206][T16482] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 431.883377][T16482] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 431.892493][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 431.892515][ C1] EXT4-fs (loop8): initial error at time 2000000004: ext4_map_blocks:791: inode 3: block 2 [ 431.892574][ C1] EXT4-fs (loop8): last error at time 2000000004: ext4_map_blocks:791: inode 3: block 2 [ 432.019920][T16482] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.4337: lblock 0 mapped to illegal pblock 48 (length 1) [ 432.021508][T16493] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.4340'. [ 432.065847][T16482] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 432.066085][T16482] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 432.146469][T16482] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4337: Failed to acquire dquot type 0 [ 432.178301][T16482] loop8: lost filesystem error report for type 5 error -117 [ 432.179958][T16482] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 432.238423][T16482] loop8: lost filesystem error report for type 5 error -117 [ 432.238631][T16482] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.4337: mark_inode_dirty error [ 432.260373][T16505] netlink: 'syz.0.4341': attribute type 1 has an invalid length. [ 432.356542][T16488] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4338'. [ 432.367803][T16482] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 432.369148][T16482] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 432.400258][T16497] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4338'. [ 432.415292][T16482] EXT4-fs (loop8): 1 orphan inode deleted [ 432.418140][T16510] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4338'. [ 432.428779][T16482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.834471][T16168] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 432.871277][T16519] xt_connbytes: Forcing CT accounting to be enabled [ 432.891268][T16519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.894705][T16168] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 432.923443][T16168] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:24: Failed to release dquot type 0 [ 432.981614][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.001986][ T9630] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 433.020972][ T9630] loop8: lost filesystem error report for type 5 error -117 [ 433.021077][ T9630] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 433.039325][ T9630] loop8: lost filesystem error report for type 5 error -117 [ 433.039414][ T9630] EXT4-fs error (device loop8): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 433.059874][ T9630] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 433.146002][T16535] loop8: detected capacity change from 0 to 512 [ 433.174688][T16535] EXT4-fs: Ignoring removed i_version option [ 433.181110][T16535] EXT4-fs: Ignoring removed bh option [ 433.199514][T16539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4352'. [ 433.212832][T16537] netlink: 748 bytes leftover after parsing attributes in process `syz.3.4353'. [ 433.228947][T16535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.241814][T16535] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 433.259102][ T28] audit: type=1400 audit(2000000005.820:4659): avc: denied { write } for pid=16534 comm="syz.8.4349" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 433.318730][ T28] audit: type=1400 audit(2000000005.860:4660): avc: denied { append } for pid=16534 comm="syz.8.4349" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 433.344747][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.366814][ T28] audit: type=1326 audit(2000000005.920:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.3.4354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 433.428340][ T28] audit: type=1326 audit(2000000005.920:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16543 comm="syz.3.4354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd608fbce59 code=0x7ffc0000 [ 433.588517][T16557] netlink: 'syz.4.4359': attribute type 2 has an invalid length. [ 433.597122][T16559] loop8: detected capacity change from 0 to 1024 [ 433.630003][T16559] loop8: detected capacity change from 0 to 1024 [ 433.638500][T16559] EXT4-fs: inline encryption not supported [ 433.645516][T16559] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 433.673342][T16559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.705569][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.670395][T16599] loop8: detected capacity change from 0 to 512 [ 434.865092][T16599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.923502][T16599] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.076940][T16542] EXT4-fs error (device loop8): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 437.271014][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.344728][T16627] gre0 speed is unknown, defaulting to 1000 [ 439.241442][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 439.241458][ T28] audit: type=1400 audit(2000000011.800:4751): avc: denied { accept } for pid=16640 comm="syz.6.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 439.459797][T16653] netlink: 'syz.3.4389': attribute type 2 has an invalid length. [ 439.719567][ T28] audit: type=1400 audit(2000000012.280:4752): avc: denied { ioctl } for pid=16656 comm="syz.8.4391" path="socket:[48983]" dev="sockfs" ino=48983 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 439.806111][ T28] audit: type=1400 audit(2000000012.310:4753): avc: denied { accept } for pid=16656 comm="syz.8.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 439.917389][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4393'. [ 440.136424][T16665] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4394'. [ 440.383619][T16667] netlink: 'syz.0.4396': attribute type 1 has an invalid length. [ 440.393961][T16667] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4396'. [ 440.682654][T16649] syz.3.4389 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 440.708739][T16649] CPU: 0 UID: 0 PID: 16649 Comm: syz.3.4389 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 440.708782][T16649] Tainted: [W]=WARN [ 440.708791][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.708806][T16649] Call Trace: [ 440.708814][T16649] [ 440.708829][T16649] __dump_stack+0x1d/0x30 [ 440.708856][T16649] dump_stack_lvl+0x95/0xd0 [ 440.708878][T16649] dump_stack+0x15/0x1b [ 440.708927][T16649] dump_header+0x80/0x240 [ 440.708954][T16649] oom_kill_process+0x295/0x350 [ 440.709045][T16649] out_of_memory+0x97d/0xb80 [ 440.709081][T16649] try_charge_memcg+0x62f/0xa10 [ 440.709182][T16649] charge_memcg+0x6d/0x120 [ 440.709212][T16649] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 440.709246][T16649] __swap_cache_prepare_and_add+0x69/0x4a0 [ 440.709280][T16649] ? alloc_pages_mpol+0x217/0x260 [ 440.709305][T16649] ? xas_load+0x413/0x430 [ 440.709337][T16649] swap_cache_alloc_folio+0xa2/0x120 [ 440.709407][T16649] swap_cluster_readahead+0x35c/0x3c0 [ 440.709441][T16649] swapin_readahead+0xde/0x840 [ 440.709467][T16649] ? __css_rstat_updated+0xbb/0x280 [ 440.709497][T16649] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 440.709593][T16649] ? __rcu_read_unlock+0x4e/0x70 [ 440.709617][T16649] ? swap_cache_get_folio+0x1e0/0x1f0 [ 440.709645][T16649] do_swap_page+0x31e/0x2180 [ 440.709743][T16649] ? __pfx_hrtick+0x10/0x10 [ 440.709800][T16649] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 440.709835][T16649] ? __rcu_read_lock+0x36/0x50 [ 440.709875][T16649] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 440.709903][T16649] handle_mm_fault+0xb30/0x2e70 [ 440.709954][T16649] ? vma_start_read+0x1c7/0x2c0 [ 440.709994][T16649] do_user_addr_fault+0x62f/0x1050 [ 440.710110][T16649] ? arch_exit_work+0x30/0x40 [ 440.710135][T16649] ? irqentry_exit+0x40/0x5d0 [ 440.710154][T16649] ? trace_page_fault_user+0x1f/0xa0 [ 440.710213][T16649] exc_page_fault+0x62/0xa0 [ 440.710228][T16649] asm_exc_page_fault+0x26/0x30 [ 440.710240][T16649] RIP: 0033:0x7fd608e6b040 [ 440.710252][T16649] Code: c3 00 00 00 00 00 00 00 00 00 ff 35 ca bf 39 00 ff 25 cc bf 39 00 0f 1f 40 00 ff 25 ca bf 39 00 68 00 00 00 00 e9 00 00 00 00 25 c2 bf 39 00 68 2a 00 00 00 e9 d0 ff ff ff ff 25 ba bf 39 00 [ 440.710263][T16649] RSP: 002b:00007ffdcba6ab28 EFLAGS: 00010203 [ 440.710305][T16649] RAX: ffffffff812e88f9 RBX: ffffffff812e88bf RCX: 00007fd608615010 [ 440.710314][T16649] RDX: 0000000000000038 RSI: 00007fd608615008 RDI: 00007fd608615010 [ 440.710325][T16649] RBP: 00007fd608615040 R08: 00007fd609220000 R09: 00007fd609236128 [ 440.710334][T16649] R10: 0000000000000007 R11: 0000000000000011 R12: 0000000000000008 [ 440.710342][T16649] R13: 00007fd608615008 R14: 00007fd608615088 R15: 0000000000000007 [ 440.710351][T16649] ? __x64_sys_mmap+0xf/0x70 [ 440.710374][T16649] ? __x64_sys_mmap+0x49/0x70 [ 440.710393][T16649] [ 440.711848][T16649] memory: usage 307200kB, limit 307200kB, failcnt 5562 [ 440.751312][T16679] loop8: detected capacity change from 0 to 1024 [ 440.761149][T16649] memory+swap: usage 319540kB, limit 9007199254740988kB, failcnt 0 [ 440.860571][T16681] openvswitch: netlink: EtherType 0 is less than min 600 [ 440.908765][T16649] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 440.917541][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4401'. [ 440.930703][T16649] Memory cgroup stats for [ 440.944505][T16685] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4401'. [ 440.952470][T16649] /syz3: [ 441.077634][T16649] cache 0 [ 441.083815][T16649] rss 0 [ 441.086660][T16649] shmem 0 [ 441.090298][T16649] mapped_file 0 [ 441.094032][T16649] dirty 0 [ 441.390896][T16679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 441.532110][T16679] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.534558][T16685] netlink: 'syz.6.4401': attribute type 5 has an invalid length. [ 441.558010][T16685] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4401'. [ 441.571315][T16649] writeback 0 [ 441.574631][T16649] workingset_refault_anon 1535 [ 441.580220][T16649] workingset_refault_file 1001 [ 441.611490][T16649] swap 12636160 [ 441.622371][T16649] swapcached 32260096 [ 441.630849][T16649] pgpgin 423581 [ 441.658373][T16649] pgpgout 423578 [ 441.663522][ T28] audit: type=1400 audit(2000000014.220:4754): avc: denied { write } for pid=16678 comm="syz.8.4400" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.685943][T16649] pgfault 474641 [ 441.698317][T16649] pgmajfault 981 [ 441.703293][T16649] inactive_anon 12288 [ 441.718361][T16649] active_anon 0 [ 441.721989][T16649] inactive_file 0 [ 441.725707][T16649] active_file 0 [ 441.729231][T16649] unevictable 0 [ 441.732728][T16649] hierarchical_memory_limit 314572800 [ 441.738930][T16649] hierarchical_memsw_limit 9223372036854771712 [ 441.745484][T16649] total_cache 0 [ 441.749256][T16679] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4400: bg 0: block 112: padding at end of block bitmap is not set [ 441.764581][T16649] total_rss 0 [ 441.769332][T16649] total_shmem 0 [ 441.778234][T16649] total_mapped_file 0 [ 441.782424][T16649] total_dirty 0 [ 441.786309][T16649] total_writeback 0 [ 441.790617][T16649] total_workingset_refault_anon 1535 [ 441.796228][T16649] total_workingset_refault_file 1001 [ 441.806628][T16649] total_swap 12636160 [ 441.813111][T16649] total_swapcached 32260096 [ 441.896894][ T28] audit: type=1326 audit(2000000014.380:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16696 comm="syz.6.4404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 441.917143][T16649] total_pgpgin 423581 [ 441.926368][T16649] total_pgpgout 423578 [ 441.930880][T16649] total_pgfault 474641 [ 441.935053][T16649] total_pgmajfault 981 [ 441.939328][T16649] total_inactive_anon 12288 [ 441.944109][T16649] total_active_anon 0 [ 441.948440][T16649] total_inactive_file 0 [ 441.952620][T16649] total_active_file 0 [ 441.956684][T16649] total_unevictable 0 [ 441.958890][ T28] audit: type=1326 audit(2000000014.380:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16696 comm="syz.6.4404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 441.960963][T16649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 441.988031][ T28] audit: type=1326 audit(2000000014.380:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16696 comm="syz.6.4404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 441.995890][T16649] ,cpuset= [ 442.021441][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 442.038322][ T28] audit: type=1326 audit(2000000014.380:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16696 comm="syz.6.4404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 442.040780][T16649] / [ 442.064729][ T28] audit: type=1326 audit(2000000014.430:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16696 comm="syz.6.4404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 442.066027][T16649] ,mems_allowed=0 [ 442.070494][ T28] audit: type=1326 audit(2000000014.430:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16696 comm="syz.6.4404" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7f83ce59 code=0x7ffc0000 [ 442.132495][T16704] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4409'. [ 442.167558][T16649] ,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4389,pid=16649,uid=0 [ 442.176776][T16649] Memory cgroup out of memory: Killed process 16649 (syz.3.4389) total-vm:96348kB, anon-rss:1232kB, file-rss:22272kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 442.188235][T16709] loop8: detected capacity change from 0 to 512 [ 442.266281][T16709] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 442.317764][T16709] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.4408: bad orphan inode 131083 [ 442.353913][T16709] loop8: lost filesystem error report for type 5 error -117 [ 442.354589][T16709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.510565][T16719] gre0 speed is unknown, defaulting to 1000 [ 443.996432][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.310538][T16747] loop8: detected capacity change from 0 to 764 [ 444.409579][T16747] Symlink component flag not implemented [ 444.417610][T16747] Symlink component flag not implemented (15) [ 444.504087][T16751] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4421'. [ 446.827982][T16776] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.4434'. [ 446.849115][T16765] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.4434'. [ 446.899838][T16776] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.4434'. [ 446.931971][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4428'. [ 447.223322][T16799] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4433'. [ 448.068009][T16820] gre0 speed is unknown, defaulting to 1000 [ 448.195721][T16823] loop8: detected capacity change from 0 to 1024 [ 448.214345][T16823] EXT4-fs: Ignoring removed bh option [ 448.252547][T16823] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.267308][ T28] kauditd_printk_skb: 223 callbacks suppressed [ 448.267323][ T28] audit: type=1400 audit(2000000020.830:4984): avc: denied { write } for pid=16822 comm="syz.8.4442" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.297275][ T28] audit: type=1400 audit(2000000020.850:4985): avc: denied { read open } for pid=16822 comm="syz.8.4442" path="/439/file0/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 448.321560][ T28] audit: type=1400 audit(2000000020.850:4986): avc: denied { write } for pid=16822 comm="syz.8.4442" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 448.426992][ T28] audit: type=1400 audit(2000000020.980:4987): avc: denied { write } for pid=16822 comm="syz.8.4442" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.545861][T16834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4445'. [ 448.814936][T16842] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4457'. [ 448.984523][T16827] ================================================================== [ 448.992659][T16827] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 448.999798][T16827] [ 449.002124][T16827] write to 0xffff8881005ef3d4 of 4 bytes by task 16823 on cpu 1: [ 449.009845][T16827] xas_set_mark+0x12b/0x140 [ 449.014367][T16827] __folio_start_writeback+0x17b/0x370 [ 449.019844][T16827] ext4_bio_write_folio+0x5a6/0xa20 [ 449.025068][T16827] mpage_process_page_bufs+0x4a1/0x620 [ 449.030544][T16827] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 449.036368][T16827] ext4_do_writepages+0x9f6/0x2770 [ 449.041512][T16827] ext4_writepages+0x18f/0x320 [ 449.046285][T16827] do_writepages+0x1c6/0x310 [ 449.050885][T16827] file_write_and_wait_range+0x178/0x2f0 [ 449.056539][T16827] mmb_fsync_noflush+0x48/0x140 [ 449.061401][T16827] ext4_sync_file+0x1f1/0x6b0 [ 449.066109][T16827] vfs_fsync_range+0xc5/0xe0 [ 449.070810][T16827] ext4_buffered_write_iter+0x447/0x4c0 [ 449.076554][T16827] ext4_file_write_iter+0x380/0xfa0 [ 449.081989][T16827] iter_file_splice_write+0x6c4/0xa80 [ 449.087389][T16827] direct_splice_actor+0x156/0x2a0 [ 449.092527][T16827] splice_direct_to_actor+0x311/0x670 [ 449.098013][T16827] do_splice_direct+0x119/0x1a0 [ 449.102891][T16827] do_sendfile+0x382/0x650 [ 449.107588][T16827] __x64_sys_sendfile64+0x105/0x150 [ 449.112808][T16827] x64_sys_call+0x2dc4/0x3020 [ 449.117504][T16827] do_syscall_64+0x12c/0x3b0 [ 449.122127][T16827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.128026][T16827] [ 449.130350][T16827] read to 0xffff8881005ef3d4 of 4 bytes by task 16827 on cpu 0: [ 449.137987][T16827] xas_find_marked+0x5d7/0x620 [ 449.142780][T16827] filemap_get_folios_tag+0xfa/0x430 [ 449.148095][T16827] mpage_prepare_extent_to_map+0x328/0xc50 [ 449.154163][T16827] ext4_do_writepages+0x9f6/0x2770 [ 449.159290][T16827] ext4_writepages+0x18f/0x320 [ 449.164066][T16827] do_writepages+0x1c6/0x310 [ 449.168671][T16827] file_write_and_wait_range+0x178/0x2f0 [ 449.174330][T16827] mmb_fsync_noflush+0x48/0x140 [ 449.179226][T16827] ext4_sync_file+0x1f1/0x6b0 [ 449.183910][T16827] vfs_fsync_range+0xc5/0xe0 [ 449.188512][T16827] ext4_buffered_write_iter+0x447/0x4c0 [ 449.194093][T16827] ext4_file_write_iter+0x380/0xfa0 [ 449.199319][T16827] iter_file_splice_write+0x6c4/0xa80 [ 449.204722][T16827] direct_splice_actor+0x156/0x2a0 [ 449.209863][T16827] splice_direct_to_actor+0x311/0x670 [ 449.215263][T16827] do_splice_direct+0x119/0x1a0 [ 449.220129][T16827] do_sendfile+0x382/0x650 [ 449.224557][T16827] __x64_sys_sendfile64+0x105/0x150 [ 449.229776][T16827] x64_sys_call+0x2dc4/0x3020 [ 449.234470][T16827] do_syscall_64+0x12c/0x3b0 [ 449.239091][T16827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.245003][T16827] [ 449.247326][T16827] value changed: 0x0a000021 -> 0x04000021 [ 449.253045][T16827] [ 449.255372][T16827] Reported by Kernel Concurrency Sanitizer on: [ 449.262012][T16827] CPU: 0 UID: 0 PID: 16827 Comm: syz.8.4442 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 449.273052][T16827] Tainted: [W]=WARN [ 449.276946][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.287094][T16827] ================================================================== [ 449.547696][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 449.570582][ T9630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.