last executing test programs: 2m7.586811401s ago: executing program 2 (id=154): syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0xffff0000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 2m6.476073977s ago: executing program 2 (id=161): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xfe8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)=ANY=[], 0xfc, 0x2b8, &(0x7f0000001540)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) statfs(&(0x7f0000000ac0)='.\x00', 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0x1}}}, 0x24}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x40) unshare(0x2a020480) open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') file_getattr(0xffffffffffffffff, &(0x7f0000001300)='./file0\x00', &(0x7f0000000300), 0x18, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00000038c5adc4983ede43c683a655ccaf65c49467f393bc7c5630c217bb58cf3fdf75e8b043b833a476ed9be16ac55e6339dc7cdd19bc2c015dea974970beb8bf6ebb7393b340ac2d45b1686d760f0a7087544a37ecc9a445535b9b5958405b94396f8b1fd839867eb67cf05af2a49939e2138e77e279aa4929ca980fcf2c63f08fbe82f4eaa9c557adf7b86758ff822fca883cea4e03f4359ae17735b1a693008976436ae41f0a20af42542733e5a5418f51640b3052c468e724b1846fca5cab3f7f56817944acfd52ac4c056b480866ac2d", @ANYRESHEX=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@initdev, @in=@multicast2}}, {{@in=@initdev}}}, &(0x7f00000012c0)=0x78) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2m6.087954989s ago: executing program 2 (id=166): socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @private=0xa010102}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, 0x0, 0x0, 0x2204803, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r2, 0x3}, &(0x7f00000000c0)=0x8) 2m5.984703522s ago: executing program 2 (id=167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb9, &(0x7f000000cf3d)=""/185, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x36}, 0x94) io_setup(0x4, &(0x7f0000000000)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000400000000600"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000ff7fffff060000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000403588d7806fff0e2fd576971c02194b47003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0, r2}, 0xc) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYRES8=0x0], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xdffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff3, 0xe}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="010056ba89e12d5c613864f14b0e2800"/28], 0x50) ioctl$TCXONC(r6, 0x560b, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, 0x0, 0x44040) unshare(0x28060080) unshare(0x28020600) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x0, 0x80000}, 0x28) r9 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000007c0)={{r4, &(0x7f00000002c0)='vfat\x00', 0x400000, &(0x7f0000000380)={@align=0xc, {0x1, 0xff, 0xffffffff, 0x4}}, 0x46a, &(0x7f00000003c0), &(0x7f0000000400)=0x7fffffff}, 0x1, &(0x7f0000000780)=[{0x3, 0x6, &(0x7f0000000180)='GPL\x00', &(0x7f0000000680)="576529a46283bfb72f72a54c60367ecd818c3b42f5ab667438c8a56c1208e4c91edb3112e63e9edf39afe265527f8f3ffbbade21cf46512f0c89083e4bd6b3647d780c2385580980e4827ddf66499546b9c3223bfefb6e5fdfdbd7cd5284247c4e053d4b98e293111f2aeeccf2070030e15f550f251f1267615a0417a42a75989083d50388313dab15fa140bd682f1ff876b4e1ca2c0c1978eb2fcd3a59ff78beea86e8d01e82abd4a87bb6035f6aa3b45214ef1ea4cc578ae7cd043ea47583ec1ad9cb57ff20d3a365d80c63f77a1bc10d45890", 0xd4, 0x10}]}) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000040)="a5b634494ddfb3e3cf195eb3b06c89f75fc28f18deed34429e236f6a73b01334655229710854f5c2ab461cd8494e212583d28dbcff2b366238de8cefc167c608246d90f0fd94ffd4348f8c13e807cab38d245d3eedbe5a309a532783a400", 0x5e, 0x2c00000000000000, 0x0, 0x1}, &(0x7f0000000100)) 2m4.451092092s ago: executing program 2 (id=179): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m3.909406839s ago: executing program 2 (id=184): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m3.907914099s ago: executing program 32 (id=184): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m37.331318973s ago: executing program 0 (id=330): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000100)=""/105) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x8, 0x0, 0x40, 0x0, 0x5, 0x20a, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x5, 0x80000004dd5}, 0x0, 0x0, 0x10000, 0x2, 0x40000000000006f, 0x80000001, 0x0, 0x0, 0x80, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0xffa7, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007379903100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$igmp(0x2, 0x3, 0x2) 1m33.808409586s ago: executing program 0 (id=350): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff45, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63ecede75e9a8087803f83427068", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 1m33.751488038s ago: executing program 0 (id=352): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000840)=ANY=[@ANYRES32=r0], 0x0, 0x24, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.514978945s ago: executing program 0 (id=356): io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) 1m33.05178358s ago: executing program 0 (id=361): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m32.956840883s ago: executing program 0 (id=363): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) pidfd_send_signal(r0, 0x3b, &(0x7f0000000080)={0x3b, 0x8000, 0xfa}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 1m17.681549154s ago: executing program 33 (id=363): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) pidfd_send_signal(r0, 0x3b, &(0x7f0000000080)={0x3b, 0x8000, 0xfa}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 5.198726553s ago: executing program 1 (id=2261): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000002880)={0x7, 0x8, 0xfa00, {r2, 0xe}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="5d5800000000000014000300"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x3, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102270, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r5, 0x0, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40804) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) 4.446384617s ago: executing program 1 (id=2270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x3) 4.300011411s ago: executing program 6 (id=2271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) 4.282484752s ago: executing program 6 (id=2272): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000009"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 4.199530735s ago: executing program 1 (id=2273): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x30, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x48000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.980951161s ago: executing program 1 (id=2274): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000"], 0x0, 0x96}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x18, r8, 0x301, 0x70bd28, 0x25dfdbbe, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3, r2}, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x8010, r2, 0x100c4000) r9 = mq_open(&(0x7f0000000040)='\xd8T\xd1\xb8-\xf7', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x9}) mq_timedsend(r9, 0x0, 0x0, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x18, "bb84d7e13c6b439972a0f85f4a21bccd71f187c433cfecc9"}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000400)) eventfd2(0x2, 0x80800) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0xfffffffffffff2b8}, 0xd90, 0x0, 0x0, 0x6, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 3.345651672s ago: executing program 6 (id=2280): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x0, 0x7fffffff, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000b80)='\bP', 0x2}], 0x1}}], 0x1, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) shutdown(r0, 0x1) 2.261516167s ago: executing program 1 (id=2287): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0xf, 0x0, 0x0, 0x5, 0x80102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000780)=[{&(0x7f0000001440)="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", 0x1ab}], 0x1) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) 2.208884778s ago: executing program 4 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000004080)={&(0x7f0000003fc0), 0xc, &(0x7f0000004040)={&(0x7f0000000000)={0x40, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001}, 0x4008000) close(r0) 2.14387128s ago: executing program 3 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) 1.985917356s ago: executing program 3 (id=2290): syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0xffff0000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.972841036s ago: executing program 6 (id=2291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x0, r2}) (fail_nth: 4) 1.740682504s ago: executing program 4 (id=2292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000480)="a7affe0e4dfc1ba15d504c004e01ecf557a5ebe25376111ce278b41b3fa76ffb202c02f5b9e31c33f7b7", 0x2a}], 0x1) 1.702547935s ago: executing program 6 (id=2293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000210444fb4b929eaaa73e000000", @ANYRES32=0x0, @ANYBLOB="0000010004090000140012800a000100767863616e00000004000280080003"], 0x3c}}, 0x24000840) 1.686252785s ago: executing program 3 (id=2294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x3) 1.664987896s ago: executing program 6 (id=2295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="11002abd7000fedbdf271f0700"/22], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10004, &(0x7f00000003c0), 0x21, 0x51c, &(0x7f0000000400)="$eJzs3M9vFNcdAPDvrHf9A0pxKUXCpa2BVrUq1QZDC4deqFSph1aqSg/laNkLclggwj4EZIVFisgZKfcoxyi3RMo1OUY55Q8ghxwiRUgo4QJEirTR7M7Y+3vXjsGy/flIC+/Nvnlv3sx7s2/meSaAfWs6/SeJ+FlEPIqIw41oa4Lpxn/Pn64tvni6thjVWu3yt0k93bM0nsnXO5hFZgoRhbeStgwbVu7cvb5QqZRvR7Uen1u98frcyp27f16+sXCtfK18c/7ixfPnzl746/xfWvKOiPGBlepSXlqvZ1Nv3jpx/J9XHv57sdieWXM9eipmuX9XHZg08n3bwx828tsTDjWFk8563XulG8PQxrNmWEr7/1rl1JWd3iDglanVarWx3l9Xa+3udywBdq0kdnoLgJ2R/9Cn17/5p7Gk9CqGHzvuyaXGBdCzp2u1e1FcfL5e/2IUsjSltuvbVJ8x06ZMR8T/q9+/m36i332Ir7apQABg3/v0UjYMTKJt/FeIY03pfp7NoUxGxC8i4khE/DIijkbEryJa0rZIImp9yj/avmC9/I+yWYTC463WbRjp+O9v2dxW/snKzZNMjmSxQxH5gLl8JtsnM1Eau7pcKZ/tkf/ogPKbx3/pJy0/Hwtm2/G42DbYXFpYXdhabTs9uR8xVWyvf1JMD1w+jZNExPGImNpEvpNN4eU/vX9iPdJ2WTG4/nW1LlN62zJ/Vnsv4o+N41+N9fpPtEwiJs3zk4WO+cm58aiUz8ylreBM1438/IsH/+lV/sD6f/x1+yr/uPDJ5Z9e8Ux6/A80tf/I52836j+ZRCTr87UrEbWRzZXx4Mu36/lOn25dXt1a+78SEQujyf/qkbx/vbGwunr7bMRo8q/O5fMbK+fxPH1a/5nT3fv/kWyddE/8OiLSRvybiPhtRH0PpNt+MiJORcTpPvX/7O+/f63Xd0O2/5cmrf9S1/NfkrWD+vHfmK8fIjAWd+7m+adLRq6ffPRiqvvEfVb/w/2P//l6aCZb0v38l7ScIobb0rQ1AwAAwN5XiPrf/hdm18OFwuxs4x7Q0ThQqNxaWf1dRNxcajwjMBmlwtXlSjm/ITcZpSS//znZFJ9vi5/L7hu/MzJRj88u3qos7XTlYZ87WO/zSUf/T32zyfu8wC60h55DAzZpUP8/9rBzWZeHPIFdSFeG/aup//d6s0XVX8rA3uT3H/avbv3/XnzQ99kF5wzY/Wr6Muxr/fv/4PdtArtXMf67Hq4/9tz1aVtgL+r9++/KAPawwQ/Jj23q2f/WwOhY96/GozNxjG+piIGBiS5l7UigUIzYxgxLETFc4omtFJEPAXumicLmMhyLzq9Got9aSff3OEREteda6V4ZuD3Xjg3b+Mu3kxeNF2UOqGD+TpTtbjYfbvTT0pCHu0fghxiy+fW63j/40k9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8GPAQAA//+vbc4Y") r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000003a00)=""/4115, 0x1013}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 1.336614397s ago: executing program 3 (id=2298): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$uhid(0xffffffffffffff9c, &(0x7f0000001300), 0x802, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) unshare(0x20000400) r5 = inotify_init() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) inotify_add_watch(r5, &(0x7f00000002c0)='./file0\x00', 0x80000623) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0xa, 0xfffff01c}, {0x6, 0x1, 0x7c, 0x80000000}]}, 0x10) 1.044388036s ago: executing program 1 (id=2299): r0 = inotify_init1(0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioperm(0x7, 0x4, 0x7) r5 = fsmount(r2, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 1.025698817s ago: executing program 3 (id=2300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) 998.349577ms ago: executing program 3 (id=2301): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x0, 0x7fffffff, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000b80)='\bP', 0x2}], 0x1}}], 0x1, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) shutdown(r0, 0x1) 948.627919ms ago: executing program 4 (id=2302): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) open(&(0x7f0000000180)='./file0\x00', 0x66842, 0xa0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x805, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) 935.42336ms ago: executing program 5 (id=2303): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 823.788883ms ago: executing program 5 (id=2304): syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0xffff0000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 722.148966ms ago: executing program 5 (id=2305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000210444fb4b929eaaa73e000000", @ANYRES32=0x0, @ANYBLOB="0000010004090000140012800a000100767863616e00000004000280080003"], 0x3c}}, 0x24000840) 380.767908ms ago: executing program 5 (id=2306): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff000300"], 0x28}, 0x4004004) 379.708348ms ago: executing program 5 (id=2307): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x5, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x2c, 0x0, 0x1, 0x1ffffe}, 0x28) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2062c0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xfebf, r1, 0x0}]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r3, @ANYBLOB="6d9311000000f8dbdf25010000000c0003000300000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20008004) connect$inet6(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f00000001c0)={[], [{@seclabel}, {@subj_type={'subj_type', 0x3d, 'obj_role'}}, {@obj_role={'obj_role', 0x3d, ':,%!\xbe\'#-^]]+'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '&/$,\xc8\x15$+}:--[-\xb9'}}, {@smackfshat={'smackfshat', 0x3d, '{(/\x00\x00{-\t\xa4\xe6\xceP6\x1dY<:\xd2k\x8a:\xb1[\x1b\xc3:a\xe8\xc5\xf9\x18\x1a\xc9\x115\xd3B3C\xf2o\xe6.?\xcdZ\x9b#vf\\\xa1Rb#k#,\xb7\v\xf1|V!\x00k\xd3\x88\xef\x80\xef\xddp\xd7\xc4,\xf4No\x160\xef\vd\xe7\x91\x8c\xdb\xebs\x99\xbc\xdeD\xe0)\x7f>\x9ck\xf39Ig\xd3k \x81\x02\x9c\v\x16\x10h\xf8&\x01Q\xb8O\xdaA\x1dq\x06\xf0\x97m\x94\xc9\x14C\x85\xc9l\x9c0E\tl=@\x98o\xce\xacv\x00\rc\xbf:\x8a\xe8B;Rj\xb8 \xd6\x90\x0fH\xeb\xc4\x8d\x1f\xc9\xe0\x03\"\x85\x1f\xa0\xae7\x82$\xc1\xeas\xde\x93_\xf2\x01\b\xc8y\x1e\xcb\r\xc7\xfb\x9a\xc5\xc1\xc4\xa9\xb7\xbcC\x83\xbaK_\x88\xfbx[V\xc1}\xf82\x9fJ\xb20}\x1e\xc6\xf5\x995\xc6\xff\x8f\xa0\x19\xb0\x18\x80.\x86\x13\x8cq\x13\xf9 wN*\xcbc\x01\xc2\xce.\n/N\x01L-o\xc7SZJ\xea\x1d4\x05X\xe1\x13VDSI,[\xb7h\x02\xb5\xd6>n\x7f+X\xd4\r\xfd\xba\x89\x9di\xd2\x90\xdc9K\x9b\xc4\xa9\x16.K\xf6pv'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@subj_role={'subj_role', 0x3d, '^}/\'\xff'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000200000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 298.43287ms ago: executing program 4 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xec, 0x3, 0xbd80}, {0x6, 0xa, 0x5, 0x9}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r6, 0x26}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x8014) 156.969715ms ago: executing program 4 (id=2309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x1, 0x0, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfffd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140), 0x0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 100.287826ms ago: executing program 5 (id=2310): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0xf, 0x0, 0x0, 0x5, 0x80102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000780)=[{&(0x7f0000001440)="77be84c5e1d9540d0500f2589781f705267ee40e07de62d422fcf14690bea6df9ff392b473dada0648ce160cd4efd6360353e59f73e6dd25281174f05f60f688e11c5407dc71f3d75cb61f335b09c04555921726ceb2a885baf13bf4cba8ebdcb5d2d62f14170da553c3b552e0d3e501ec3bdea7de19dbe87c677900a6b8ddeffac60302fcd5b8837dc7cad59e0af7d274599fb3c29e3cab8751e6cb4b1b44fdde0b3e45c2d3a11453938467cd64ccbb8a7530fc5b251b21c4654933316f0514536f791a5ed7f7ab3c79c2154bfe520e3a1cf5a9dd7b53f24f231b387a6c225dcab7c3fced74d42b9b371fd208097cc3c83fd29bd44993086db6c2eb2d09bab7ca1883797d68edfb4aab380319e1e3a6a02c8c4018350f0812bf52f21898d35263efac9c223b14e273f9dc6d5d5409a7db686d894f1aed1a173bc448e6f25c040144db035147eff5f68c36f9669b0050576cfa60ce4c63d0946d0711c1cc0e61c83be1492ed40a47a80bbf4073300ff1e04941bcbc7a5fe00fff3e95feccb100135295f609cc4aae21018565ae5b4a5fe87fce9566c5c101f881fe16a7ae0c6007391277bf234af09daaae", 0x1ab}], 0x1) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) 0s ago: executing program 4 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) kernel console output (not intermixed with test programs): 492'. [ 97.687513][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 97.705061][ T5208] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.492'. [ 97.819968][ T5226] syzkaller0: entered promiscuous mode [ 97.819988][ T5226] syzkaller0: entered allmulticast mode [ 97.872938][ T5195] vhci_hcd: connection closed [ 97.873126][ T4219] vhci_hcd vhci_hcd.4: stop threads [ 97.873165][ T5193] vhci_hcd: connection closed [ 97.883786][ T5191] vhci_hcd: connection reset by peer [ 97.894018][ T4219] vhci_hcd vhci_hcd.4: release socket [ 97.907233][ T4219] vhci_hcd vhci_hcd.4: disconnect device [ 97.924045][ T4219] vhci_hcd vhci_hcd.4: stop threads [ 97.932907][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.943151][ T4219] vhci_hcd vhci_hcd.4: release socket [ 97.956076][ T4219] vhci_hcd vhci_hcd.4: disconnect device [ 97.967454][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.976939][ T4219] vhci_hcd vhci_hcd.4: stop threads [ 97.983672][ T4219] vhci_hcd vhci_hcd.4: release socket [ 97.995709][ T5240] tipc: Enabling of bearer rejected, failed to enable media [ 98.002396][ T4219] vhci_hcd vhci_hcd.4: disconnect device [ 98.013400][ T3399] IPVS: starting estimator thread 0... [ 98.127477][ T5241] IPVS: using max 2640 ests per chain, 132000 per kthread [ 98.177416][ T5267] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 98.200036][ T5267] syzkaller0: entered promiscuous mode [ 98.213516][ T5267] syzkaller0: entered allmulticast mode [ 98.239953][ T5274] batadv_slave_1: entered promiscuous mode [ 98.530239][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.575023][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.652749][ T5308] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 98.672487][ T5308] syzkaller0: entered promiscuous mode [ 98.701090][ T5308] syzkaller0: entered allmulticast mode [ 98.965351][ T5325] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 98.980736][ T5325] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 98.990378][ T5258] batadv_slave_1: left promiscuous mode [ 99.091316][ T5331] syzkaller0: entered promiscuous mode [ 99.096903][ T5331] syzkaller0: entered allmulticast mode [ 99.741544][ T5357] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 99.755790][ T5357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.915709][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 99.915745][ T28] audit: type=1400 audit(1780396423.352:996): avc: denied { bind } for pid=5364 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.925050][ T5367] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 99.944910][ T28] audit: type=1400 audit(1780396423.362:997): avc: denied { setopt } for pid=5364 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.961878][ T5367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.000057][ T5367] team0: Port device netdevsim2 added [ 100.126621][ T5383] netlink: 'syz.5.565': attribute type 1 has an invalid length. [ 100.146555][ T5383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.159654][ T5383] gretap1: entered promiscuous mode [ 100.396877][ T5403] syzkaller0: entered promiscuous mode [ 100.439010][ T5403] syzkaller0: entered allmulticast mode [ 100.456240][ T5410] syzkaller0: entered promiscuous mode [ 100.462613][ T5410] syzkaller0: entered allmulticast mode [ 100.466559][ T5407] PID 5407 killed due to inadequate hugepage pool [ 100.514953][ T5416] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 100.523565][ T5416] syzkaller0: entered promiscuous mode [ 100.529091][ T5416] syzkaller0: entered allmulticast mode [ 100.689915][ T5436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.710728][ T5436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.790929][ T5447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.799950][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.809604][ T5447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.819031][ T5447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.336377][ T5455] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 101.345190][ T5455] syzkaller0: entered promiscuous mode [ 101.350976][ T5455] syzkaller0: entered allmulticast mode [ 101.660561][ T5477] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 101.669177][ T5477] syzkaller0: entered promiscuous mode [ 101.674690][ T5477] syzkaller0: entered allmulticast mode [ 101.692893][ T5477] tipc: Enabled bearer , priority 0 [ 101.701883][ T5476] tipc: Resetting bearer [ 101.719196][ T5476] tipc: Disabling bearer [ 101.765059][ T28] audit: type=1400 audit(1780396425.202:998): avc: denied { read write } for pid=5485 comm="syz.3.608" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.788310][ T28] audit: type=1400 audit(1780396425.202:999): avc: denied { open } for pid=5485 comm="syz.3.608" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.813754][ T28] audit: type=1400 audit(1780396425.212:1000): avc: denied { ioctl } for pid=5485 comm="syz.3.608" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.009731][ T5513] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 102.018263][ T5513] syzkaller0: entered promiscuous mode [ 102.023951][ T5513] syzkaller0: entered allmulticast mode [ 102.033172][ T5513] tipc: Enabled bearer , priority 0 [ 102.040665][ T5512] tipc: Resetting bearer [ 102.058878][ T5512] tipc: Disabling bearer [ 102.199479][ T28] audit: type=1400 audit(1780396425.642:1001): avc: denied { name_bind } for pid=5529 comm="syz.3.629" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 102.286572][ T28] audit: type=1400 audit(1780396425.722:1002): avc: denied { mount } for pid=5540 comm="syz.1.633" name="/" dev="ramfs" ino=12127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.578442][ T3423] usb 9-1: enqueue for inactive port 0 [ 102.584485][ T3423] usb 9-1: enqueue for inactive port 0 [ 102.666800][ T3423] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 103.056636][ T5567] __nla_validate_parse: 3 callbacks suppressed [ 103.056654][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 103.072224][ T5567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 103.081567][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 103.263532][ T5568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.642'. [ 103.950961][ T5600] random: crng reseeded on system resumption [ 103.951092][ T28] audit: type=1400 audit(1780396427.392:1003): avc: denied { write } for pid=5599 comm="syz.4.657" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.982044][ T28] audit: type=1400 audit(1780396427.392:1004): avc: denied { open } for pid=5599 comm="syz.4.657" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 104.204772][ T5620] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 104.242173][ T5622] syzkaller0: entered promiscuous mode [ 104.248682][ T5622] syzkaller0: entered allmulticast mode [ 104.748849][ T5644] netlink: 'syz.5.678': attribute type 1 has an invalid length. [ 104.792190][ T5648] syzkaller0: entered promiscuous mode [ 104.798082][ T5648] syzkaller0: entered allmulticast mode [ 104.970193][ T5652] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 104.979174][ T5652] syzkaller0: entered promiscuous mode [ 104.984725][ T5652] syzkaller0: entered allmulticast mode [ 104.992581][ T5652] tipc: Enabled bearer , priority 0 [ 105.000211][ T5651] tipc: Resetting bearer [ 105.012772][ T5651] tipc: Disabling bearer [ 105.052691][ T5658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 105.143734][ T5667] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 105.167198][ T5667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.180701][ T5669] gretap0: entered promiscuous mode [ 105.189460][ T5667] gretap1: entered promiscuous mode [ 105.232497][ T5672] syzkaller0: entered promiscuous mode [ 105.249774][ T5672] syzkaller0: entered allmulticast mode [ 105.310654][ T5683] team0: Device gtp0 is of different type [ 105.348371][ T5685] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 105.360207][ T5685] syzkaller0: entered promiscuous mode [ 105.365871][ T5685] syzkaller0: entered allmulticast mode [ 105.372630][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.697'. [ 105.381677][ T5685] tipc: Started in network mode [ 105.392269][ T5685] tipc: Node identity ca775b3d04d3, cluster identity 4711 [ 105.409452][ T28] audit: type=1400 audit(1780396428.852:1005): avc: denied { watch_reads } for pid=5688 comm="syz.1.698" path="/168" dev="tmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.436836][ T5685] tipc: Enabled bearer , priority 0 [ 105.455931][ T5684] tipc: Resetting bearer [ 105.464728][ T5684] tipc: Disabling bearer [ 105.521106][ T5700] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 105.568628][ T5700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.637330][ T5712] syzkaller0: entered promiscuous mode [ 105.642903][ T5712] syzkaller0: entered allmulticast mode [ 105.677404][ T5714] syzkaller0: entered promiscuous mode [ 105.682966][ T5714] syzkaller0: entered allmulticast mode [ 105.817377][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 105.852591][ T5729] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 105.862193][ T5729] tipc: Enabled bearer , priority 0 [ 105.875928][ T5728] tipc: Disabling bearer [ 106.014278][ T5746] syzkaller0: entered promiscuous mode [ 106.021526][ T5746] syzkaller0: entered allmulticast mode [ 106.125573][ T5756] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 106.135909][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 106.150644][ T5762] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 106.157305][ T5762] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.179272][ T5762] vhci_hcd vhci_hcd.0: Device attached [ 106.189913][ T5767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'. [ 106.198377][ T5763] vhci_hcd: connection closed [ 106.199168][ T4219] vhci_hcd vhci_hcd.1: stop threads [ 106.200930][ T28] audit: type=1400 audit(1780396429.632:1006): avc: denied { execute } for pid=5761 comm="syz.1.731" path="/179/bus" dev="tmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.207210][ T4219] vhci_hcd vhci_hcd.1: release socket [ 106.265198][ T4219] vhci_hcd vhci_hcd.1: disconnect device [ 106.314120][ T5779] syzkaller0: entered promiscuous mode [ 106.320385][ T5779] syzkaller0: entered allmulticast mode [ 106.417983][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 106.546262][ T5823] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 106.596499][ T5825] syzkaller0: entered promiscuous mode [ 106.608371][ T5825] syzkaller0: entered allmulticast mode [ 106.796598][ T5861] random: crng reseeded on system resumption [ 106.880574][ T5869] syzkaller0: entered promiscuous mode [ 106.897000][ T5869] syzkaller0: entered allmulticast mode [ 107.095741][ T5887] random: crng reseeded on system resumption [ 107.158860][ T5891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 107.165423][ T5891] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.186594][ T5891] vhci_hcd vhci_hcd.0: Device attached [ 107.201096][ T5892] vhci_hcd: connection closed [ 107.202161][ T68] vhci_hcd vhci_hcd.4: stop threads [ 107.218152][ T68] vhci_hcd vhci_hcd.4: release socket [ 107.230015][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 107.810583][ T5905] syzkaller0: entered promiscuous mode [ 107.822084][ T5905] syzkaller0: entered allmulticast mode [ 107.915063][ T2068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.014680][ T2068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.060368][ T5920] __nla_validate_parse: 2 callbacks suppressed [ 108.060387][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.800'. [ 108.061451][ T2068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.190295][ T2068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.212783][ T5940] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 108.233091][ T5933] syzkaller0: entered promiscuous mode [ 108.239049][ T5933] syzkaller0: entered allmulticast mode [ 108.248988][ T5929] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 108.266974][ T5940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.289715][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.297505][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.304765][ T5898] bridge_slave_0: entered allmulticast mode [ 108.314684][ T5898] bridge_slave_0: entered promiscuous mode [ 108.323598][ T5929] tipc: Enabled bearer , priority 0 [ 108.335799][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.345512][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.352956][ T5898] bridge_slave_1: entered allmulticast mode [ 108.360557][ T5898] bridge_slave_1: entered promiscuous mode [ 108.368578][ T5928] tipc: Disabling bearer [ 108.412255][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.435099][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.460220][ T5955] syzkaller1: entered promiscuous mode [ 108.465878][ T5955] syzkaller1: entered allmulticast mode [ 108.489297][ T2068] bridge_slave_1: left allmulticast mode [ 108.497767][ T2068] bridge_slave_1: left promiscuous mode [ 108.503581][ T2068] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.511742][ T2068] bridge_slave_0: left allmulticast mode [ 108.517593][ T2068] bridge_slave_0: left promiscuous mode [ 108.523492][ T2068] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.614387][ T2068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.627001][ T2068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.631965][ T5971] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 108.644177][ T2068] bond0 (unregistering): Released all slaves [ 108.654348][ T5898] team0: Port device team_slave_0 added [ 108.661222][ T5898] team0: Port device team_slave_1 added [ 108.677725][ T5971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.696681][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.703902][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.729930][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.741725][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.752363][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.782092][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.806022][ T2068] hsr_slave_0: left promiscuous mode [ 108.812355][ T2068] hsr_slave_1: left promiscuous mode [ 108.818163][ T2068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.826045][ T2068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.834512][ T2068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.852522][ T2068] veth1_macvtap: left promiscuous mode [ 108.862096][ T2068] veth0_macvtap: left promiscuous mode [ 108.872122][ T2068] veth1_vlan: left promiscuous mode [ 108.878275][ T2068] veth0_vlan: left promiscuous mode [ 108.948259][ T2068] team0 (unregistering): Port device team_slave_1 removed [ 108.959504][ T2068] team0 (unregistering): Port device team_slave_0 removed [ 109.023573][ T5989] syzkaller0: entered promiscuous mode [ 109.029229][ T5989] syzkaller0: entered allmulticast mode [ 109.065379][ T5983] syzkaller0: entered promiscuous mode [ 109.071049][ T5983] syzkaller0: entered allmulticast mode [ 109.087506][ T5985] tipc: Enabled bearer , priority 0 [ 109.096197][ T5984] tipc: Disabling bearer [ 109.105872][ T5898] hsr_slave_0: entered promiscuous mode [ 109.112508][ T5898] hsr_slave_1: entered promiscuous mode [ 109.118546][ T5898] debugfs: 'hsr0' already exists in 'hsr' [ 109.124349][ T5898] Cannot create hsr debugfs directory [ 109.132159][ T28] audit: type=1400 audit(1780396432.572:1007): avc: denied { write } for pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.188987][ T28] audit: type=1400 audit(1780396432.632:1008): avc: denied { write } for pid=6012 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.236581][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 109.249988][ T6017] random: crng reseeded on system resumption [ 109.306159][ T5898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.317686][ T5898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.338117][ T5898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.346892][ T5898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.359345][ T6030] syzkaller1: entered promiscuous mode [ 109.365321][ T6030] syzkaller1: entered allmulticast mode [ 109.372786][ T5898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.388562][ T28] audit: type=1400 audit(1780396432.812:1009): avc: denied { write } for pid=6020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.413190][ T28] audit: type=1400 audit(1780396432.852:1010): avc: denied { write } for pid=6037 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.437281][ T5898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.445942][ T6038] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 109.447328][ T5898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.472887][ T5898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.497209][ T6038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.505723][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 109.538520][ T6045] usb usb8: usbfs: process 6045 (syz.3.832) did not claim interface 3 before use [ 109.542635][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.578257][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.613408][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.620541][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.630928][ T28] audit: type=1400 audit(1780396433.072:1011): avc: denied { append } for pid=6061 comm="syz.1.836" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.664741][ T6057] syzkaller0: entered promiscuous mode [ 109.686076][ T6057] syzkaller0: entered allmulticast mode [ 109.707928][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.715170][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.715985][ T6078] random: crng reseeded on system resumption [ 109.762569][ T28] audit: type=1400 audit(1780396433.202:1012): avc: denied { write } for pid=6058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.791601][ T6063] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 109.800411][ T28] audit: type=1400 audit(1780396433.222:1013): avc: denied { write } for pid=6084 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.813060][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 109.859253][ T6063] tipc: Enabled bearer , priority 0 [ 109.866688][ T28] audit: type=1400 audit(1780396433.302:1014): avc: denied { create } for pid=6087 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.894472][ T6060] tipc: Disabling bearer [ 109.976464][ T6107] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 109.981678][ T6111] syzkaller1: entered promiscuous mode [ 109.990594][ T6111] syzkaller1: entered allmulticast mode [ 110.033734][ T6107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.050090][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 110.138155][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.198621][ T6142] syzkaller0: entered promiscuous mode [ 110.208869][ T6142] syzkaller0: entered allmulticast mode [ 110.334497][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.854'. [ 110.376040][ T5898] veth0_vlan: entered promiscuous mode [ 110.385447][ T5898] veth1_vlan: entered promiscuous mode [ 110.449348][ T5898] veth0_macvtap: entered promiscuous mode [ 110.461871][ T5898] veth1_macvtap: entered promiscuous mode [ 110.474413][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.494633][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.511924][ T4219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.520909][ T4219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.540520][ T4219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.549459][ T4219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.559099][ T6175] syzkaller1: entered promiscuous mode [ 110.564898][ T6175] syzkaller1: entered allmulticast mode [ 110.591780][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 110.591796][ T28] audit: type=1400 audit(1780396434.032:1018): avc: denied { mounton } for pid=5898 comm="syz-executor" path="/root/syzkaller.Jssr5P/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 110.680713][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.696683][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.704205][ T6188] syzkaller0: entered promiscuous mode [ 110.711561][ T6188] syzkaller0: entered allmulticast mode [ 110.830979][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 110.854969][ T6207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.868'. [ 110.857987][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.871272][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.909882][ T28] audit: type=1400 audit(1780396434.352:1019): avc: denied { getopt } for pid=6206 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.972486][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.990204][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.052670][ T6191] bond1: left promiscuous mode [ 111.058144][ T6191] bridge1: left promiscuous mode [ 111.063305][ T6191] bond1: left allmulticast mode [ 111.068979][ T6191] bridge1: left allmulticast mode [ 111.078606][ T6191] gretap1: left promiscuous mode [ 111.135902][ T3447] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.151536][ T3447] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.183233][ T3447] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.203621][ T3447] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.257410][ T6241] syzkaller0: entered promiscuous mode [ 111.269830][ T6241] syzkaller0: entered allmulticast mode [ 111.344670][ T6253] netlink: 'syz.6.878': attribute type 1 has an invalid length. [ 111.355772][ T6253] gretap1: entered promiscuous mode [ 111.425883][ T6259] syzkaller0: entered promiscuous mode [ 111.441720][ T6259] syzkaller0: entered allmulticast mode [ 111.446581][ T6264] netlink: 'syz.3.880': attribute type 4 has an invalid length. [ 111.489574][ T6261] syzkaller0: entered promiscuous mode [ 111.495133][ T6261] syzkaller0: entered allmulticast mode [ 111.508287][ T6261] tipc: Enabled bearer , priority 0 [ 111.540543][ T6260] tipc: Resetting bearer [ 111.559035][ T6260] tipc: Disabling bearer [ 111.577678][ T6277] syzkaller0: entered promiscuous mode [ 111.583194][ T6277] syzkaller0: entered allmulticast mode [ 111.734391][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 111.744471][ T6292] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 111.750997][ T6292] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.758944][ T6292] vhci_hcd vhci_hcd.0: Device attached [ 111.766406][ T6293] vhci_hcd: connection closed [ 111.766549][ T4219] vhci_hcd vhci_hcd.1: stop threads [ 111.776604][ T4219] vhci_hcd vhci_hcd.1: release socket [ 111.782131][ T4219] vhci_hcd vhci_hcd.1: disconnect device [ 111.933509][ T6304] syzkaller0: entered promiscuous mode [ 111.940150][ T6304] syzkaller0: entered allmulticast mode [ 112.020154][ T6308] syzkaller0: entered promiscuous mode [ 112.025669][ T6308] syzkaller0: entered allmulticast mode [ 112.033438][ T6308] tipc: Enabled bearer , priority 0 [ 112.041140][ T6307] tipc: Resetting bearer [ 112.047967][ T6307] tipc: Disabling bearer [ 112.411931][ T6332] syzkaller0: entered promiscuous mode [ 112.418081][ T6332] syzkaller0: entered allmulticast mode [ 112.467669][ T6336] syzkaller0: entered promiscuous mode [ 112.473760][ T6336] syzkaller0: entered allmulticast mode [ 112.482755][ T6336] tipc: Enabled bearer , priority 0 [ 112.492061][ T6335] tipc: Resetting bearer [ 112.501824][ T6335] tipc: Disabling bearer [ 112.535506][ T6342] 8021q: VLANs not supported on gre0 [ 112.651888][ T6360] syzkaller0: entered promiscuous mode [ 112.664615][ T6360] syzkaller0: entered allmulticast mode [ 112.714108][ T6368] syzkaller0: entered promiscuous mode [ 112.719657][ T6368] syzkaller0: entered allmulticast mode [ 112.728355][ T6368] tipc: Enabled bearer , priority 0 [ 112.735704][ T6367] tipc: Resetting bearer [ 112.744455][ T6367] tipc: Disabling bearer [ 112.869498][ T6384] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 112.880234][ T6382] bond2: option arp_interval: invalid value (18446744073709547520) [ 112.889098][ T6382] bond2: option arp_interval: allowed values 0 - 2147483647 [ 112.897567][ T6382] bond2 (unregistering): Released all slaves [ 113.023229][ T28] audit: type=1400 audit(1780396436.462:1020): avc: denied { map } for pid=6399 comm="syz.6.943" path="socket:[18795]" dev="sockfs" ino=18795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.073386][ T6405] syzkaller0: entered promiscuous mode [ 113.079945][ T6405] syzkaller0: entered allmulticast mode [ 113.094633][ T6405] tipc: Enabled bearer , priority 0 [ 113.103345][ T6404] tipc: Resetting bearer [ 113.110309][ T6404] tipc: Disabling bearer [ 113.120500][ T6408] syzkaller0: entered promiscuous mode [ 113.126004][ T6408] syzkaller0: entered allmulticast mode [ 113.235000][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 113.367967][ T6441] syzkaller0: entered promiscuous mode [ 113.378219][ T6441] syzkaller0: entered allmulticast mode [ 113.412236][ T28] audit: type=1400 audit(1780396436.852:1021): avc: denied { mounton } for pid=6447 comm="syz.3.964" path="/proc/549/cgroup" dev="proc" ino=17967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 113.533779][ T28] audit: type=1400 audit(1780396436.972:1022): avc: denied { mount } for pid=6466 comm="syz.3.972" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.560865][ T28] audit: type=1400 audit(1780396436.972:1023): avc: denied { mounton } for pid=6466 comm="syz.3.972" path="/223/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 113.583964][ T28] audit: type=1400 audit(1780396437.032:1024): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.624945][ T6469] syzkaller1: entered promiscuous mode [ 113.630621][ T6469] syzkaller1: entered allmulticast mode [ 113.729310][ T6485] syzkaller0: entered promiscuous mode [ 113.750082][ T6485] syzkaller0: entered allmulticast mode [ 113.769264][ T6489] syzkaller0: entered promiscuous mode [ 113.779232][ T6489] syzkaller0: entered allmulticast mode [ 113.803810][ T6489] tipc: Started in network mode [ 113.823276][ T6489] tipc: Node identity 7a209647827, cluster identity 4711 [ 113.849956][ T6489] tipc: Enabled bearer , priority 0 [ 113.862609][ T6487] tipc: Resetting bearer [ 113.892223][ T6487] tipc: Disabling bearer [ 113.916163][ T6509] syzkaller1: entered promiscuous mode [ 113.922346][ T6509] syzkaller1: entered allmulticast mode [ 114.068643][ T6523] syzkaller0: entered promiscuous mode [ 114.076927][ T6523] syzkaller0: entered allmulticast mode [ 114.173554][ T6535] syzkaller0: entered promiscuous mode [ 114.187463][ T6535] syzkaller0: entered allmulticast mode [ 114.203177][ T6535] tipc: Enabled bearer , priority 0 [ 114.214428][ T6532] tipc: Resetting bearer [ 114.228761][ T6532] tipc: Disabling bearer [ 114.375664][ T6549] loop1: detected capacity change from 0 to 2048 [ 114.429110][ T6549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.791403][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 114.951948][ T6572] syzkaller0: entered promiscuous mode [ 114.985904][ T6572] syzkaller0: entered allmulticast mode [ 115.629612][ T6579] syzkaller0: entered promiscuous mode [ 115.650510][ T6579] syzkaller0: entered allmulticast mode [ 115.684317][ T6579] tipc: Enabled bearer , priority 0 [ 115.707001][ T6578] tipc: Resetting bearer [ 115.732465][ T6578] tipc: Disabling bearer [ 115.998490][ T6608] syzkaller0: entered promiscuous mode [ 116.004192][ T6608] syzkaller0: entered allmulticast mode [ 116.183867][ T6621] netlink: 'syz.3.1031': attribute type 11 has an invalid length. [ 116.210748][ T6621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1031'. [ 116.411243][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1039'. [ 116.423430][ T6638] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 116.430035][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 116.438748][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 116.445957][ T6639] vhci_hcd: connection closed [ 116.446232][ T4219] vhci_hcd vhci_hcd.6: stop threads [ 116.457154][ T4219] vhci_hcd vhci_hcd.6: release socket [ 116.462694][ T4219] vhci_hcd vhci_hcd.6: disconnect device [ 116.499686][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.585912][ T6651] loop1: detected capacity change from 0 to 1024 [ 116.595905][ T6651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 116.604135][ T6651] System zones: 0-1, 3-36 [ 116.609194][ T6651] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1041: bad orphan inode 134217728 [ 116.620508][ T6651] loop1: lost filesystem error report for type 5 error -117 [ 116.620987][ T6651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.674897][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.427306][ T6695] syzkaller0: entered promiscuous mode [ 117.482308][ T6695] syzkaller0: entered allmulticast mode [ 117.688335][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 117.701726][ T6716] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 117.708335][ T6716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.733112][ T6716] vhci_hcd vhci_hcd.0: Device attached [ 117.748718][ T6717] vhci_hcd: connection closed [ 117.748876][ T3447] vhci_hcd vhci_hcd.4: stop threads [ 117.760527][ T3447] vhci_hcd vhci_hcd.4: release socket [ 117.766055][ T3447] vhci_hcd vhci_hcd.4: disconnect device [ 117.863090][ T6740] syzkaller0: entered promiscuous mode [ 117.868628][ T6740] syzkaller0: entered allmulticast mode [ 118.032954][ T6750] loop1: detected capacity change from 0 to 256 [ 118.098724][ T6750] syzkaller0: entered promiscuous mode [ 118.104554][ T6750] syzkaller0: entered allmulticast mode [ 118.605530][ T6786] syzkaller0: entered promiscuous mode [ 118.612240][ T6786] syzkaller0: entered allmulticast mode [ 118.776007][ T6801] loop3: detected capacity change from 0 to 256 [ 119.097420][ T6801] syzkaller0: entered promiscuous mode [ 119.103050][ T6801] syzkaller0: entered allmulticast mode [ 119.135730][ T6832] syzkaller0: entered promiscuous mode [ 119.141515][ T6832] syzkaller0: entered allmulticast mode [ 119.309155][ T6851] syzkaller0: entered promiscuous mode [ 119.314882][ T6851] syzkaller0: entered allmulticast mode [ 119.492214][ T6876] syzkaller0: entered promiscuous mode [ 119.497877][ T6876] syzkaller0: entered allmulticast mode [ 119.506028][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1110'. [ 119.515878][ T6878] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 119.522440][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.530902][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 119.539375][ T6879] vhci_hcd: connection closed [ 119.541294][ T3447] vhci_hcd vhci_hcd.5: stop threads [ 119.559235][ T3447] vhci_hcd vhci_hcd.5: release socket [ 119.569608][ T3447] vhci_hcd vhci_hcd.5: disconnect device [ 119.709043][ T6899] loop1: detected capacity change from 0 to 256 [ 119.739344][ T6899] syzkaller0: entered promiscuous mode [ 119.752872][ T6899] syzkaller0: entered allmulticast mode [ 119.848677][ T6916] syzkaller0: entered promiscuous mode [ 119.858445][ T6916] syzkaller0: entered allmulticast mode [ 119.947479][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 119.965349][ T6925] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 119.971936][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.989204][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 120.004711][ T6926] vhci_hcd: connection closed [ 120.005462][ T39] vhci_hcd vhci_hcd.1: stop threads [ 120.024226][ T39] vhci_hcd vhci_hcd.1: release socket [ 120.040754][ T39] vhci_hcd vhci_hcd.1: disconnect device [ 120.336611][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 120.496565][ T6941] x_tables: ip_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 120.511894][ T6964] syzkaller0: entered promiscuous mode [ 120.524203][ T6964] syzkaller0: entered allmulticast mode [ 120.762007][ T28] audit: type=1326 audit(1780396444.202:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.3.1127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5cb9ace59 code=0x0 [ 120.906157][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1138'. [ 120.918693][ T6974] syzkaller0: entered promiscuous mode [ 120.925835][ T6974] syzkaller0: entered allmulticast mode [ 121.366050][ T7000] syzkaller0: entered promiscuous mode [ 121.371776][ T7000] syzkaller0: entered allmulticast mode [ 121.424338][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 121.460124][ T6975] loop1: detected capacity change from 0 to 1024 [ 121.515073][ T6975] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 121.637563][ T28] audit: type=1400 audit(1780396445.072:1026): avc: denied { write } for pid=7009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.714667][ T28] audit: type=1400 audit(1780396445.152:1027): avc: denied { write } for pid=7032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.976731][ T6975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.034486][ T28] audit: type=1400 audit(1780396445.472:1028): avc: denied { write } for pid=7037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.036648][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 122.123016][ T28] audit: type=1400 audit(1780396445.562:1029): avc: denied { write } for pid=7067 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.154623][ T7065] syzkaller0: entered promiscuous mode [ 122.168819][ T7065] syzkaller0: entered allmulticast mode [ 122.229452][ T7056] tipc: Enabling of bearer rejected, failed to enable media [ 122.319561][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1166'. [ 122.339107][ T28] audit: type=1400 audit(1780396445.772:1030): avc: denied { write } for pid=7076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.429033][ T28] audit: type=1400 audit(1780396445.862:1031): avc: denied { write } for pid=7099 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.521071][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 122.584211][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 122.632537][ T28] audit: type=1400 audit(1780396446.072:1032): avc: denied { write } for pid=7108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.688146][ T28] audit: type=1400 audit(1780396446.132:1033): avc: denied { write } for pid=7132 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.717087][ T7126] syzkaller0: entered promiscuous mode [ 122.734895][ T7111] loop3: detected capacity change from 0 to 8192 [ 122.738416][ T7126] syzkaller0: entered allmulticast mode [ 122.820461][ T7130] tipc: Enabling of bearer rejected, failed to enable media [ 123.076594][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1188'. [ 123.217400][ T7169] syzkaller0: entered promiscuous mode [ 123.256139][ T7169] syzkaller0: entered allmulticast mode [ 123.358112][ T7171] tipc: Enabling of bearer rejected, failed to enable media [ 123.890774][ T7208] syzkaller0: entered promiscuous mode [ 123.919606][ T7208] syzkaller0: entered allmulticast mode [ 124.032034][ T7225] loop5: detected capacity change from 0 to 1024 [ 124.060179][ T7225] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 124.078297][ T7225] System zones: 0-1, 3-36 [ 124.079005][ T7205] tipc: Enabling of bearer rejected, failed to enable media [ 124.095807][ T7225] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1207: bad orphan inode 134217728 [ 124.136810][ T7225] loop5: lost filesystem error report for type 5 error -117 [ 124.137337][ T7225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.289879][ T7233] syzkaller0: entered promiscuous mode [ 124.307443][ T7233] syzkaller0: entered allmulticast mode [ 124.575548][ T7249] syzkaller0: entered promiscuous mode [ 124.593124][ T7249] syzkaller0: entered allmulticast mode [ 124.686301][ T7251] tipc: Enabling of bearer rejected, failed to enable media [ 124.883065][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.926228][ T7270] syzkaller0: entered promiscuous mode [ 124.926257][ T7270] syzkaller0: entered allmulticast mode [ 124.974423][ T7272] loop5: detected capacity change from 0 to 512 [ 124.987704][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.055896][ T7272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 125.086997][ T7272] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.132264][ T7281] syzkaller0: entered promiscuous mode [ 125.208227][ T7281] syzkaller0: entered allmulticast mode [ 125.357467][ T7301] tipc: Enabling of bearer rejected, failed to enable media [ 125.416867][ T28] audit: type=1400 audit(1780396448.822:1034): avc: denied { append } for pid=7271 comm="syz.5.1226" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.822606][ T7308] loop6: detected capacity change from 0 to 1024 [ 125.866709][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 125.878660][ T7308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 125.897122][ T28] audit: type=1400 audit(1780396449.302:1036): avc: denied { write } for pid=7271 comm="syz.5.1226" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.920646][ T7308] System zones: 0-1, 3-36 [ 125.945841][ T7308] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1237: bad orphan inode 134217728 [ 125.970277][ T7308] loop6: lost filesystem error report for type 5 error -117 [ 125.972901][ T7308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.022059][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1241'. [ 126.070088][ T7315] syzkaller0: entered promiscuous mode [ 126.076086][ T7315] syzkaller0: entered allmulticast mode [ 126.106310][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.240913][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.297204][ T7328] syzkaller0: entered promiscuous mode [ 126.313377][ T7328] syzkaller0: entered allmulticast mode [ 126.501455][ T7340] syzkaller0: entered promiscuous mode [ 126.507172][ T7340] syzkaller0: entered allmulticast mode [ 126.515349][ T7340] tipc: Enabled bearer , priority 0 [ 126.522809][ T7339] tipc: Resetting bearer [ 126.534003][ T7339] tipc: Disabling bearer [ 126.614214][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1254'. [ 126.765344][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 126.843652][ T7371] syzkaller0: entered promiscuous mode [ 126.849249][ T7371] syzkaller0: entered allmulticast mode [ 126.857026][ T7371] tipc: Enabled bearer , priority 0 [ 126.864546][ T7370] tipc: Resetting bearer [ 126.874844][ T7370] tipc: Disabling bearer [ 126.928504][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 126.971088][ T7383] loop1: detected capacity change from 0 to 2048 [ 126.991153][ T7383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.070377][ T7390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.273402][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 127.304191][ T7410] syzkaller0: entered promiscuous mode [ 127.310587][ T7410] syzkaller0: entered allmulticast mode [ 127.322360][ T7410] tipc: Enabled bearer , priority 0 [ 127.329924][ T7409] tipc: Resetting bearer [ 127.341742][ T7409] tipc: Disabling bearer [ 127.347782][ T7388] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 127.439860][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1280'. [ 127.539217][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.121889][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1291'. [ 128.157213][ T7445] syzkaller0: entered promiscuous mode [ 128.163004][ T7445] syzkaller0: entered allmulticast mode [ 128.171785][ T7445] tipc: Enabled bearer , priority 0 [ 128.179910][ T7444] tipc: Resetting bearer [ 128.188249][ T7444] tipc: Disabling bearer [ 128.297204][ T7447] syzkaller0: entered promiscuous mode [ 128.303184][ T7447] syzkaller0: entered allmulticast mode [ 128.401629][ T7451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.671078][ T7472] syzkaller0: entered promiscuous mode [ 128.687221][ T7472] syzkaller0: entered allmulticast mode [ 128.707040][ T7472] tipc: Enabled bearer , priority 0 [ 128.723469][ T7471] tipc: Resetting bearer [ 128.742369][ T7471] tipc: Disabling bearer [ 128.777613][ T7484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.903217][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1313'. [ 129.047461][ T7505] netlink: 'syz.6.1315': attribute type 11 has an invalid length. [ 129.064299][ T7505] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1315'. [ 129.200403][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.302178][ T7507] loop5: detected capacity change from 0 to 256 [ 129.344852][ T7515] syzkaller0: entered promiscuous mode [ 129.352015][ T7515] syzkaller0: entered allmulticast mode [ 129.360334][ T7515] tipc: Enabled bearer , priority 0 [ 129.368412][ T7514] tipc: Resetting bearer [ 129.376316][ T7514] tipc: Disabling bearer [ 129.431569][ T7507] syzkaller0: entered promiscuous mode [ 129.442480][ T7507] syzkaller0: entered allmulticast mode [ 129.474847][ T7517] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.670077][ T7540] loop1: detected capacity change from 0 to 2048 [ 129.703628][ T7540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.724977][ T7550] syzkaller0: entered promiscuous mode [ 129.737926][ T7550] syzkaller0: entered allmulticast mode [ 129.812585][ T7550] tipc: Enabled bearer , priority 0 [ 129.838761][ T7554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.846607][ T7549] tipc: Resetting bearer [ 129.854477][ T7549] tipc: Disabling bearer [ 129.920880][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1337'. [ 129.954377][ T7570] netlink: 'syz.5.1338': attribute type 11 has an invalid length. [ 130.037703][ T7571] loop4: detected capacity change from 0 to 256 [ 130.069054][ T7571] syzkaller0: entered promiscuous mode [ 130.077000][ T7571] syzkaller0: entered allmulticast mode [ 130.104226][ T7567] x_tables: ip_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 130.132773][ T28] audit: type=1326 audit(1780396453.572:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.6.1337" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f529873ce59 code=0x0 [ 130.617462][ T7586] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 130.624021][ T7586] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.631743][ T7586] vhci_hcd vhci_hcd.0: Device attached [ 130.640887][ T7587] vhci_hcd: connection closed [ 130.642647][ T68] vhci_hcd vhci_hcd.5: stop threads [ 130.653193][ T68] vhci_hcd vhci_hcd.5: release socket [ 130.677857][ T68] vhci_hcd vhci_hcd.5: disconnect device [ 130.746426][ T7594] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 130.761636][ T7594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.094558][ T7615] __nla_validate_parse: 4 callbacks suppressed [ 131.094576][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1354'. [ 131.106235][ T7616] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 131.120776][ T7615] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 131.127317][ T7615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.135233][ T7615] vhci_hcd vhci_hcd.0: Device attached [ 131.144981][ T7617] vhci_hcd: connection closed [ 131.145245][ T39] vhci_hcd vhci_hcd.6: stop threads [ 131.156000][ T39] vhci_hcd vhci_hcd.6: release socket [ 131.162251][ T39] vhci_hcd vhci_hcd.6: disconnect device [ 131.185624][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 131.255963][ T7626] netlink: 'syz.6.1358': attribute type 1 has an invalid length. [ 131.272540][ T7626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.396463][ T7637] syzkaller0: entered promiscuous mode [ 131.412533][ T7637] syzkaller0: entered allmulticast mode [ 131.431873][ T7637] tipc: Enabled bearer , priority 0 [ 131.447385][ T7636] tipc: Resetting bearer [ 131.457436][ T7636] tipc: Disabling bearer [ 131.697781][ T7548] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 131.731038][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1367'. [ 131.768500][ T7651] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 131.775061][ T7651] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.801950][ T7651] vhci_hcd vhci_hcd.0: Device attached [ 131.810003][ T7653] vhci_hcd: connection closed [ 131.810374][ T68] vhci_hcd vhci_hcd.5: stop threads [ 131.821865][ T68] vhci_hcd vhci_hcd.5: release socket [ 131.827489][ T68] vhci_hcd vhci_hcd.5: disconnect device [ 131.859479][ T7658] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 131.883047][ T7658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.949304][ T7669] syzkaller0: entered promiscuous mode [ 131.954944][ T7669] syzkaller0: entered allmulticast mode [ 131.962884][ T7669] tipc: Enabled bearer , priority 0 [ 131.970435][ T7667] tipc: Resetting bearer [ 131.979937][ T7667] tipc: Disabling bearer [ 132.009341][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.021698][ T7674] netlink: 'syz.5.1374': attribute type 11 has an invalid length. [ 132.029880][ T7674] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1374'. [ 132.245260][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 132.284286][ T7692] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 132.308231][ T7694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1382'. [ 132.331450][ T7696] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 132.344332][ T7696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 132.372885][ T7699] loop1: detected capacity change from 0 to 1024 [ 132.382673][ T7699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 132.391562][ T7699] System zones: 0-1, 3-36 [ 132.396567][ T7699] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1384: bad orphan inode 134217728 [ 132.407927][ T7699] loop1: lost filesystem error report for type 5 error -117 [ 132.408498][ T7699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.464691][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.597724][ T7719] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1393'. [ 132.621047][ T7721] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 132.636696][ T7724] loop6: detected capacity change from 0 to 1024 [ 132.641141][ T7721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 132.659580][ T7724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 132.671918][ T7724] System zones: 0-1, 3-36 [ 132.677058][ T7724] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1395: bad orphan inode 134217728 [ 132.688099][ T7724] loop6: lost filesystem error report for type 5 error -117 [ 132.695037][ T7724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.715652][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1397'. [ 132.764008][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.779554][ T7736] netlink: 'syz.1.1400': attribute type 11 has an invalid length. [ 132.808219][ T7736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1400'. [ 132.851207][ T7746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1405'. [ 132.881965][ T7748] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 132.897668][ T7748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.015316][ T7766] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 133.027698][ T7766] syzkaller0: entered promiscuous mode [ 133.040980][ T7766] syzkaller0: entered allmulticast mode [ 133.060276][ T7766] tipc: Enabled bearer , priority 0 [ 133.069372][ T7764] tipc: Resetting bearer [ 133.079325][ T7764] tipc: Disabling bearer [ 133.151296][ T7779] syzkaller0: entered promiscuous mode [ 133.158125][ T7779] syzkaller0: entered allmulticast mode [ 133.166489][ T7779] tipc: Enabled bearer , priority 0 [ 133.175225][ T7778] tipc: Resetting bearer [ 133.183983][ T7778] tipc: Disabling bearer [ 133.387006][ T7808] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 133.391132][ T7807] loop1: detected capacity change from 0 to 512 [ 133.471005][ T7820] loop3: detected capacity change from 0 to 1024 [ 133.567810][ T7820] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 133.577115][ T7807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 133.590637][ T7807] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.593043][ T7820] System zones: [ 133.610639][ T7831] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 133.620841][ T7831] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.634639][ T7820] 0-1, 3-36 [ 133.645330][ T7820] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1429: bad orphan inode 134217728 [ 133.680874][ T7831] vhci_hcd vhci_hcd.0: Device attached [ 133.687624][ T7820] loop3: lost filesystem error report for type 5 error -117 [ 133.696744][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 133.710548][ C1] EXT4-fs (loop3): initial error at time 1780396457: ext4_orphan_get:1423 [ 133.719231][ C1] EXT4-fs (loop3): last error at time 1780396457: ext4_orphan_get:1423 [ 133.728686][ T7820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.746841][ T7832] vhci_hcd: connection closed [ 133.750624][ T3447] vhci_hcd vhci_hcd.5: stop threads [ 133.768271][ T3447] vhci_hcd vhci_hcd.5: release socket [ 133.778381][ T3447] vhci_hcd vhci_hcd.5: disconnect device [ 133.830817][ T7840] syzkaller0: entered promiscuous mode [ 133.836582][ T7840] syzkaller0: entered allmulticast mode [ 133.853890][ T7840] tipc: Enabled bearer , priority 0 [ 133.906129][ T7839] tipc: Resetting bearer [ 133.951787][ T7839] tipc: Disabling bearer [ 134.342961][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.367009][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 134.660337][ T7875] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 134.666918][ T7875] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.680827][ T7875] vhci_hcd vhci_hcd.0: Device attached [ 134.714326][ T7885] vhci_hcd: connection closed [ 134.714550][ T39] vhci_hcd vhci_hcd.6: stop threads [ 134.739673][ T39] vhci_hcd vhci_hcd.6: release socket [ 134.762644][ T39] vhci_hcd vhci_hcd.6: disconnect device [ 135.072485][ T7944] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 135.079416][ T7944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.087766][ T7944] vhci_hcd vhci_hcd.0: Device attached [ 135.096433][ T7946] vhci_hcd: connection closed [ 135.097381][ T3447] vhci_hcd vhci_hcd.5: stop threads [ 135.111720][ T3447] vhci_hcd vhci_hcd.5: release socket [ 135.117585][ T3447] vhci_hcd vhci_hcd.5: disconnect device [ 135.506577][ T7978] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 135.513314][ T7978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.521046][ T7978] vhci_hcd vhci_hcd.0: Device attached [ 135.527900][ T7979] vhci_hcd: connection closed [ 135.528129][ T3447] vhci_hcd vhci_hcd.5: stop threads [ 135.541768][ T3447] vhci_hcd vhci_hcd.5: release socket [ 135.547764][ T3447] vhci_hcd vhci_hcd.5: disconnect device [ 135.808511][ T8012] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 135.815137][ T8012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.825780][ T8012] vhci_hcd vhci_hcd.0: Device attached [ 135.833235][ T8013] vhci_hcd: connection closed [ 135.833416][ T39] vhci_hcd vhci_hcd.3: stop threads [ 135.844364][ T39] vhci_hcd vhci_hcd.3: release socket [ 135.859387][ T39] vhci_hcd vhci_hcd.3: disconnect device [ 136.033746][ T8044] random: crng reseeded on system resumption [ 136.136611][ T8055] __nla_validate_parse: 15 callbacks suppressed [ 136.136652][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 136.156110][ T8055] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 136.162663][ T8055] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.190581][ T8055] vhci_hcd vhci_hcd.0: Device attached [ 136.199589][ T8057] vhci_hcd: connection closed [ 136.199887][ T68] vhci_hcd vhci_hcd.1: stop threads [ 136.210176][ T68] vhci_hcd vhci_hcd.1: release socket [ 136.217652][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 136.236129][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 136.551621][ T8100] syzkaller0: entered promiscuous mode [ 136.557363][ T8100] syzkaller0: entered allmulticast mode [ 136.565053][ T8100] tipc: Enabled bearer , priority 0 [ 136.586451][ T8098] tipc: Resetting bearer [ 136.599449][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 136.600769][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 136.618554][ T8098] tipc: Disabling bearer [ 136.618587][ T8103] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 136.630916][ T8103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.639220][ T8103] vhci_hcd vhci_hcd.0: Device attached [ 136.649762][ T8106] vhci_hcd: connection closed [ 136.650698][ T4219] vhci_hcd vhci_hcd.4: stop threads [ 136.670282][ T4219] vhci_hcd vhci_hcd.4: release socket [ 136.680242][ T4219] vhci_hcd vhci_hcd.4: disconnect device [ 136.912101][ T8126] syzkaller0: entered promiscuous mode [ 136.917950][ T8126] syzkaller0: entered allmulticast mode [ 136.964756][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1525'. [ 136.983911][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1526'. [ 137.029197][ T8145] syzkaller0: entered promiscuous mode [ 137.034839][ T8145] syzkaller0: entered allmulticast mode [ 137.058750][ T8145] tipc: Enabled bearer , priority 0 [ 137.073715][ T8144] tipc: Resetting bearer [ 137.083935][ T8144] tipc: Disabling bearer [ 137.156425][ T8157] syzkaller1: entered promiscuous mode [ 137.166603][ T8157] syzkaller1: entered allmulticast mode [ 137.190198][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1535'. [ 137.231087][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 137.348864][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 137.529575][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 137.677485][ T8194] x_tables: ip_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 137.870231][ T28] audit: type=1326 audit(1780396461.312:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.3.1548" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5cb9ace59 code=0x0 [ 138.504761][ T8238] loop5: detected capacity change from 0 to 256 [ 138.506241][ T8270] syzkaller0: entered promiscuous mode [ 138.506259][ T8270] syzkaller0: entered allmulticast mode [ 139.564624][ T8319] loop3: detected capacity change from 0 to 8192 [ 139.670410][ T8313] x_tables: ip_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 139.685609][ T28] audit: type=1326 audit(1780396463.122:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.5.1579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc17d94ce59 code=0x0 [ 139.727181][ T8338] loop3: detected capacity change from 0 to 1024 [ 139.738823][ T8338] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 139.747092][ T8338] System zones: 0-1, 3-36 [ 139.752173][ T8338] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1589: bad orphan inode 134217728 [ 139.762890][ T8338] loop3: lost filesystem error report for type 5 error -117 [ 139.763306][ T8338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.815681][ T8344] validate_nla: 1 callbacks suppressed [ 139.815693][ T8344] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 140.275411][ T8368] netlink: 'syz.5.1600': attribute type 11 has an invalid length. [ 140.578282][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.802523][ T8392] x_tables: ip_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 140.838010][ T28] audit: type=1326 audit(1780396464.282:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.6.1610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f529873ce59 code=0x0 [ 141.013853][ T8406] loop3: detected capacity change from 0 to 8192 [ 141.452051][ T8436] __nla_validate_parse: 18 callbacks suppressed [ 141.452069][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 142.431874][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1641'. [ 142.515753][ T8465] loop5: detected capacity change from 0 to 8192 [ 142.598279][ T8476] loop3: detected capacity change from 0 to 1024 [ 142.614585][ T8476] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 142.623323][ T8476] System zones: 0-1, 3-36 [ 142.628809][ T8476] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1645: bad orphan inode 134217728 [ 142.639745][ T8476] loop3: lost filesystem error report for type 5 error -117 [ 142.640379][ T8476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.759631][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1649'. [ 143.259939][ T8509] syzkaller0: entered promiscuous mode [ 143.270963][ T8509] syzkaller0: entered allmulticast mode [ 143.439541][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.473110][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 143.509624][ T8537] loop1: detected capacity change from 0 to 8192 [ 143.584728][ T8547] syzkaller0: entered promiscuous mode [ 143.590813][ T8547] syzkaller0: entered allmulticast mode [ 143.758026][ T8554] syzkaller0: entered promiscuous mode [ 143.763556][ T8554] syzkaller0: entered allmulticast mode [ 143.822457][ T8550] loop1: detected capacity change from 0 to 1024 [ 143.845012][ T8550] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.895112][ T8550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.904690][ T8563] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 143.923034][ T8563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 144.055194][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 144.088979][ T8575] loop3: detected capacity change from 0 to 8192 [ 144.150599][ T8578] syzkaller0: entered promiscuous mode [ 144.156177][ T8578] syzkaller0: entered allmulticast mode [ 144.302073][ T8582] syzkaller0: entered promiscuous mode [ 144.307833][ T8582] syzkaller0: entered allmulticast mode [ 144.331181][ T8588] netlink: 'syz.5.1692': attribute type 1 has an invalid length. [ 144.345513][ T8588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.540574][ T8602] syzkaller0: entered promiscuous mode [ 144.548203][ T8602] syzkaller0: entered allmulticast mode [ 144.555800][ T8603] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 144.567749][ T8603] tipc: Enabled bearer , priority 0 [ 144.581420][ T8601] tipc: Disabling bearer [ 144.631220][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.737356][ T8613] netlink: 'syz.6.1704': attribute type 1 has an invalid length. [ 144.754195][ T8613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.794980][ T8617] syzkaller0: entered promiscuous mode [ 144.800719][ T8617] syzkaller0: entered allmulticast mode [ 144.824194][ T8595] loop3: detected capacity change from 0 to 256 [ 145.092306][ T8635] loop4: detected capacity change from 0 to 1024 [ 145.102954][ T8635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 145.111641][ T8635] System zones: 0-1, 3-36 [ 145.118430][ T8635] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1712: bad orphan inode 134217728 [ 145.129352][ T8635] loop4: lost filesystem error report for type 5 error -117 [ 145.129966][ T8635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.254052][ T8629] loop1: detected capacity change from 0 to 1024 [ 145.289588][ T8629] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 145.342205][ T8629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.371486][ T8647] loop6: detected capacity change from 0 to 2048 [ 145.417796][ T8651] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 145.433436][ T8651] 8021q: adding VLAN 0 to HW filter on device bond7 [ 145.436485][ T8647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.566984][ T8661] syzkaller0: entered promiscuous mode [ 145.572539][ T8661] syzkaller0: entered allmulticast mode [ 145.583326][ T8663] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 145.591966][ T8663] syzkaller0: entered promiscuous mode [ 145.597821][ T8663] syzkaller0: entered allmulticast mode [ 145.610575][ T8663] tipc: Enabled bearer , priority 0 [ 145.619878][ T8662] tipc: Resetting bearer [ 145.627958][ T8662] tipc: Disabling bearer [ 145.763907][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 146.038859][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.549165][ T8678] netlink: 'syz.5.1727': attribute type 1 has an invalid length. [ 146.580818][ T8678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.609469][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.804494][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1731'. [ 146.875273][ T8689] syzkaller0: entered promiscuous mode [ 146.902378][ T8689] syzkaller0: entered allmulticast mode [ 146.911456][ T8693] loop1: detected capacity change from 0 to 256 [ 147.058278][ T8559] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 147.290155][ T8699] syzkaller0: entered promiscuous mode [ 147.310547][ T8699] syzkaller0: entered allmulticast mode [ 147.362946][ T8673] loop3: detected capacity change from 0 to 256 [ 147.409311][ T28] audit: type=1326 audit(1780396470.842:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.5.1731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc17d94ce59 code=0x0 [ 147.445937][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.471909][ T8705] loop1: detected capacity change from 0 to 1024 [ 147.488696][ T8705] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 147.507336][ T8705] System zones: 0-1, 3-36 [ 147.543005][ T8705] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1736: bad orphan inode 134217728 [ 147.610933][ T8705] loop1: lost filesystem error report for type 5 error -117 [ 147.611609][ T8705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.627956][ T8714] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 147.699890][ T8714] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.765810][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.828669][ T8726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 147.842930][ T8726] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.089758][ T8736] syzkaller0: entered promiscuous mode [ 148.095734][ T8736] syzkaller0: entered allmulticast mode [ 148.484122][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1747'. [ 148.583922][ T8757] set_capacity_and_notify: 1 callbacks suppressed [ 148.583938][ T8757] loop5: detected capacity change from 0 to 8192 [ 148.649142][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1751'. [ 148.706829][ T8767] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 148.763323][ T8770] loop6: detected capacity change from 0 to 1024 [ 148.775694][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 148.801507][ T8767] 8021q: adding VLAN 0 to HW filter on device bond8 [ 148.816836][ T8770] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 148.843706][ T8770] System zones: 0-1, 3-36 [ 148.852091][ T28] audit: type=1326 audit(1780396472.292:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.3.1751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5cb9ace59 code=0x0 [ 148.889949][ T8770] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1753: bad orphan inode 134217728 [ 148.925428][ T8770] loop6: lost filesystem error report for type 5 error -117 [ 148.926050][ T8770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.991607][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.113721][ T8786] syzkaller0: entered promiscuous mode [ 149.119946][ T8786] syzkaller0: entered allmulticast mode [ 149.179924][ T8797] syzkaller0: entered promiscuous mode [ 149.185860][ T8797] syzkaller0: entered allmulticast mode [ 149.232882][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 149.244151][ T8799] loop4: detected capacity change from 0 to 512 [ 149.276914][ T8799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 149.305738][ T8799] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.415328][ T8806] syzkaller0: entered promiscuous mode [ 149.431686][ T8806] syzkaller0: entered allmulticast mode [ 150.225985][ T8827] syzkaller0: entered promiscuous mode [ 150.238312][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 150.249788][ T8827] syzkaller0: entered allmulticast mode [ 150.398327][ T8845] syzkaller0: entered promiscuous mode [ 150.403972][ T8845] syzkaller0: entered allmulticast mode [ 150.500752][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'. [ 150.547853][ T8857] syzkaller0: entered promiscuous mode [ 150.560938][ T8857] syzkaller0: entered allmulticast mode [ 150.699977][ T8886] syzkaller0: entered promiscuous mode [ 150.705573][ T8886] syzkaller0: entered allmulticast mode [ 150.913001][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 150.961644][ T8912] loop4: detected capacity change from 0 to 8192 [ 151.162364][ T8928] loop6: detected capacity change from 0 to 256 [ 151.359452][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1821'. [ 151.648979][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1826'. [ 151.950244][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1832'. [ 152.077901][ T8962] loop1: detected capacity change from 0 to 256 [ 152.310000][ T8970] syzkaller0: entered promiscuous mode [ 152.321944][ T8970] syzkaller0: entered allmulticast mode [ 152.333721][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1837'. [ 152.411663][ T8976] syzkaller0: entered promiscuous mode [ 152.422376][ T8976] syzkaller0: entered allmulticast mode [ 152.572319][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1848'. [ 152.573029][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1849'. [ 152.665279][ T8997] loop5: detected capacity change from 0 to 8192 [ 152.677140][ T9006] loop4: detected capacity change from 0 to 256 [ 152.728689][ T9008] loop6: detected capacity change from 0 to 512 [ 152.777756][ T9008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 152.828308][ T9008] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.981022][ T9026] syzkaller0: entered promiscuous mode [ 152.986677][ T9026] syzkaller0: entered allmulticast mode [ 153.724546][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 153.753260][ T9038] syzkaller0: entered promiscuous mode [ 153.759305][ T9038] syzkaller0: entered allmulticast mode [ 153.786244][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 153.816062][ T9037] loop1: detected capacity change from 0 to 8192 [ 153.833616][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1862'. [ 154.018526][ T9054] syzkaller0: entered promiscuous mode [ 154.034120][ T9054] syzkaller0: entered allmulticast mode [ 154.079271][ T9062] loop5: detected capacity change from 0 to 256 [ 154.411229][ T9078] loop3: detected capacity change from 0 to 1024 [ 154.430573][ T9078] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 154.449576][ T9078] System zones: 0-1, 3-36 [ 154.464174][ T9078] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1873: bad orphan inode 134217728 [ 154.475230][ T9078] loop3: lost filesystem error report for type 5 error -117 [ 154.475737][ T9078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.551261][ T9083] syzkaller0: entered promiscuous mode [ 154.557565][ T9083] syzkaller0: entered allmulticast mode [ 154.599991][ T9086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1876'. [ 154.662077][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 154.794845][ T28] audit: type=1326 audit(1780396478.232:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9093 comm="syz.1.1880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f705178ce59 code=0x0 [ 155.063499][ T9109] loop6: detected capacity change from 0 to 256 [ 155.170350][ T9114] syzkaller0: entered promiscuous mode [ 155.176064][ T9114] syzkaller0: entered allmulticast mode [ 155.231860][ T9119] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1888'. [ 155.262751][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1889'. [ 155.288426][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.332519][ T9123] syzkaller0: entered promiscuous mode [ 155.338284][ T9123] syzkaller0: entered allmulticast mode [ 155.475599][ T9142] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 155.489041][ T9142] 8021q: adding VLAN 0 to HW filter on device bond7 [ 155.558158][ T9147] syzkaller0: entered promiscuous mode [ 155.563764][ T9147] syzkaller0: entered allmulticast mode [ 156.054792][ T9181] syzkaller0: entered promiscuous mode [ 156.060534][ T9181] syzkaller0: entered allmulticast mode [ 156.144984][ T9183] syzkaller0: entered promiscuous mode [ 156.150574][ T9183] syzkaller0: entered allmulticast mode [ 156.342749][ T9204] syzkaller0: entered promiscuous mode [ 156.352016][ T9204] syzkaller0: entered allmulticast mode [ 156.403051][ T9208] loop3: detected capacity change from 0 to 8192 [ 156.451651][ T9212] syzkaller0: entered promiscuous mode [ 156.457620][ T9212] syzkaller0: entered allmulticast mode [ 156.689446][ T9237] syzkaller0: entered promiscuous mode [ 156.703188][ T9237] syzkaller0: entered allmulticast mode [ 156.757150][ T9243] loop1: detected capacity change from 0 to 512 [ 156.780184][ T9243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.793094][ T9243] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.534313][ T9258] __nla_validate_parse: 12 callbacks suppressed [ 157.534331][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1947'. [ 157.605110][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1947'. [ 157.646509][ T9262] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1948'. [ 157.738791][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 157.959009][ T9292] loop6: detected capacity change from 0 to 512 [ 157.983625][ T9292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 157.999995][ T9292] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.336912][ T28] audit: type=1400 audit(1780396481.732:1044): avc: denied { write } for pid=9291 comm="syz.6.1960" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.023596][ T9321] loop1: detected capacity change from 0 to 1024 [ 159.088162][ T9321] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 159.130918][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 159.195864][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1975'. [ 159.200883][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1977'. [ 159.250511][ T9321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.444563][ T9345] loop5: detected capacity change from 0 to 512 [ 159.492010][ T9345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 159.512242][ T9351] syzkaller0: entered promiscuous mode [ 159.524839][ T9345] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.536121][ T9351] syzkaller0: entered allmulticast mode [ 159.625963][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.694182][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1983'. [ 159.840794][ T9358] loop6: detected capacity change from 0 to 8192 [ 159.936992][ T28] audit: type=1326 audit(1780396483.372:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9336 comm="syz.4.1977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd79bacce59 code=0x0 [ 159.993864][ T9367] loop3: detected capacity change from 0 to 512 [ 160.070884][ T9367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 160.250638][ T9367] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.389321][ T9380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1987'. [ 160.603052][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 161.049753][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 161.159312][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 161.167937][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'. [ 161.256457][ T9415] loop1: detected capacity change from 0 to 8192 [ 161.331456][ T9433] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 161.340127][ T9433] syzkaller0: entered promiscuous mode [ 161.349323][ T9433] syzkaller0: entered allmulticast mode [ 161.362541][ T9433] tipc: Enabled bearer , priority 0 [ 161.398870][ T9431] tipc: Resetting bearer [ 161.401531][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2006'. [ 161.420660][ T9431] tipc: Disabling bearer [ 161.456853][ T9443] loop3: detected capacity change from 0 to 512 [ 161.487464][ T9443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 161.506571][ T9443] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.015996][ T9473] loop6: detected capacity change from 0 to 1024 [ 162.091114][ T9473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 162.152155][ T9473] System zones: 0-1, 3-36 [ 162.202908][ T9473] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2023: bad orphan inode 134217728 [ 162.218355][ T9479] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 162.222670][ T9473] loop6: lost filesystem error report for type 5 error -117 [ 162.230835][ T9481] syzkaller0: entered promiscuous mode [ 162.246342][ T9481] syzkaller0: entered allmulticast mode [ 162.247093][ T9473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.264393][ T9479] syzkaller0: entered promiscuous mode [ 162.270139][ T9479] syzkaller0: entered allmulticast mode [ 162.301647][ T9479] tipc: Enabled bearer , priority 0 [ 162.313246][ T9478] tipc: Resetting bearer [ 162.367765][ T9478] tipc: Disabling bearer [ 162.368483][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.374402][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 162.608910][ T9503] loop6: detected capacity change from 0 to 128 [ 162.635744][ T9503] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 162.670398][ T9508] loop1: detected capacity change from 0 to 512 [ 162.695215][ T9510] syzkaller0: entered promiscuous mode [ 162.714142][ T9510] syzkaller0: entered allmulticast mode [ 162.737156][ T9508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 162.760930][ T9508] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.913618][ T9518] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 162.922237][ T9518] syzkaller0: entered promiscuous mode [ 162.939223][ T9518] syzkaller0: entered allmulticast mode [ 162.963186][ T9518] tipc: Enabled bearer , priority 0 [ 163.126850][ T9517] tipc: Resetting bearer [ 163.134720][ T9517] tipc: Disabling bearer [ 163.522368][ T9524] loop3: detected capacity change from 0 to 512 [ 163.549686][ T9526] syzkaller0: entered promiscuous mode [ 163.555468][ T9526] syzkaller0: entered allmulticast mode [ 163.567910][ T9524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 163.636562][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 163.645984][ T9524] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.844475][ T9540] syzkaller0: entered promiscuous mode [ 163.850816][ T9540] syzkaller0: entered allmulticast mode [ 163.948040][ T9543] syzkaller0: entered promiscuous mode [ 163.975985][ T9543] syzkaller0: entered allmulticast mode [ 164.515854][ T9562] loop4: detected capacity change from 0 to 256 [ 164.650500][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 164.776994][ T9570] loop3: detected capacity change from 0 to 2048 [ 164.806624][ T9570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.969578][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 165.013475][ T9579] serio: Serial port ttyS3 [ 165.050450][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.115122][ T9589] syzkaller0: entered promiscuous mode [ 165.121303][ T9589] syzkaller0: entered allmulticast mode [ 165.485496][ T9590] loop4: detected capacity change from 0 to 512 [ 165.510107][ T9590] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 165.530060][ T9590] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 165.546166][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 165.582207][ T9590] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2063: Corrupt directory, running e2fsck is recommended [ 165.588843][ T9617] loop1: detected capacity change from 0 to 8192 [ 165.648706][ T9590] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 165.659259][ T9590] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2063: corrupted in-inode xattr: e_name out of bounds [ 165.675122][ T9590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.675961][ T9590] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2063: couldn't read orphan inode 15 (err -117) [ 165.685572][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 165.685622][ C0] EXT4-fs (loop4): initial error at time 1780396489: ext4_iget_extra_inode:5128: inode 15 [ 165.686212][ C0] EXT4-fs (loop4): last error at time 1780396489: ext4_iget_extra_inode:5128: inode 15 [ 165.731813][ T9590] loop4: lost filesystem error report for type 5 error -117 [ 165.737639][ T9622] loop5: detected capacity change from 0 to 2048 [ 165.763310][ T9590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.784361][ T9622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.906359][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.986012][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 167.280852][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.364833][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2089'. [ 167.479498][ T9670] syzkaller0: entered promiscuous mode [ 167.485065][ T9670] syzkaller0: entered allmulticast mode [ 167.502198][ T9672] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 167.511096][ T9672] syzkaller0: entered promiscuous mode [ 167.516594][ T9672] syzkaller0: entered allmulticast mode [ 167.562362][ T9674] netlink: 'syz.4.2095': attribute type 1 has an invalid length. [ 167.575495][ T9674] 8021q: adding VLAN 0 to HW filter on device bond8 [ 167.607396][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2096'. [ 167.796964][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2102'. [ 167.864844][ T9697] syzkaller0: entered promiscuous mode [ 167.870701][ T9697] syzkaller0: entered allmulticast mode [ 167.952494][ T9702] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 167.962720][ T28] audit: type=1400 audit(1780396491.412:1046): avc: denied { relabelto } for pid=9701 comm="syz.4.2107" name="436" dev="tmpfs" ino=2250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 167.989438][ T28] audit: type=1400 audit(1780396491.412:1047): avc: denied { associate } for pid=9701 comm="syz.4.2107" name="436" dev="tmpfs" ino=2250 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.017458][ T28] audit: type=1400 audit(1780396491.422:1048): avc: denied { write } for pid=9701 comm="syz.4.2107" name="436" dev="tmpfs" ino=2250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.017490][ T28] audit: type=1400 audit(1780396491.422:1049): avc: denied { add_name } for pid=9701 comm="syz.4.2107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.017561][ T28] audit: type=1400 audit(1780396491.422:1050): avc: denied { create } for pid=9701 comm="syz.4.2107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 168.089187][ T28] audit: type=1400 audit(1780396491.422:1051): avc: denied { associate } for pid=9701 comm="syz.4.2107" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.110506][ T28] audit: type=1400 audit(1780396491.422:1052): avc: denied { write } for pid=9701 comm="syz.4.2107" name="file0" dev="tmpfs" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 168.132948][ T28] audit: type=1400 audit(1780396491.422:1053): avc: denied { open } for pid=9701 comm="syz.4.2107" path="/436/file0" dev="tmpfs" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 168.180062][ T28] audit: type=1400 audit(1780396491.622:1054): avc: denied { write } for pid=3301 comm="syz-executor" name="436" dev="tmpfs" ino=2250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.207152][ T28] audit: type=1400 audit(1780396491.622:1055): avc: denied { remove_name } for pid=3301 comm="syz-executor" name="file0" dev="tmpfs" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.261665][ T9712] syzkaller0: entered promiscuous mode [ 168.267586][ T9712] syzkaller0: entered allmulticast mode [ 168.282832][ T9714] syzkaller0: entered promiscuous mode [ 168.292995][ T9714] syzkaller0: entered allmulticast mode [ 168.364913][ T9716] loop6: detected capacity change from 0 to 256 [ 168.575953][ T9723] syzkaller0: entered promiscuous mode [ 168.582083][ T9723] syzkaller0: entered allmulticast mode [ 168.711975][ T9737] FAULT_INJECTION: forcing a failure. [ 168.711975][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 168.727977][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.6.2122 Not tainted syzkaller #0 PREEMPT(lazy) [ 168.728061][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.728071][ T9737] Call Trace: [ 168.728077][ T9737] [ 168.728084][ T9737] __dump_stack+0x1d/0x30 [ 168.728109][ T9737] dump_stack_lvl+0x95/0xd0 [ 168.728132][ T9737] dump_stack+0x15/0x1b [ 168.728158][ T9737] should_fail_ex+0x263/0x280 [ 168.728248][ T9737] should_failslab+0x8c/0xb0 [ 168.728363][ T9737] __kvmalloc_node_noprof+0x155/0x640 [ 168.728430][ T9737] ? io_rsrc_data_alloc+0x2d/0x70 [ 168.728458][ T9737] io_rsrc_data_alloc+0x2d/0x70 [ 168.728498][ T9737] io_alloc_file_tables+0x21/0x90 [ 168.728530][ T9737] io_sqe_files_register+0x13b/0x4f0 [ 168.728630][ T9737] __se_sys_io_uring_register+0xe86/0x1330 [ 168.728711][ T9737] ? _raw_spin_unlock+0x9/0x30 [ 168.728733][ T9737] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 168.728765][ T9737] __x64_sys_io_uring_register+0x55/0x70 [ 168.728784][ T9737] x64_sys_call+0x2be0/0x3020 [ 168.728878][ T9737] do_syscall_64+0x12c/0x3b0 [ 168.728976][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.729001][ T9737] RIP: 0033:0x7f529873ce59 [ 168.729018][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.729038][ T9737] RSP: 002b:00007f5297197028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 168.729062][ T9737] RAX: ffffffffffffffda RBX: 00007f52989b5fa0 RCX: 00007f529873ce59 [ 168.729113][ T9737] RDX: 0000200000000900 RSI: 0000000000000002 RDI: 0000000000000005 [ 168.729125][ T9737] RBP: 00007f5297197090 R08: 0000000000000000 R09: 0000000000000000 [ 168.729137][ T9737] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 168.729150][ T9737] R13: 00007f52989b6038 R14: 00007f52989b5fa0 R15: 00007ffccd3d4a38 [ 168.729168][ T9737] [ 168.954653][ T9743] syzkaller0: entered promiscuous mode [ 168.960633][ T9743] syzkaller0: entered allmulticast mode [ 168.983066][ T9742] loop3: detected capacity change from 0 to 8192 [ 169.056166][ T9742] loop3: p1 p2 p3 [ 169.066501][ T9742] loop3: p2 start 9961480 is beyond EOD, truncated [ 169.073683][ T9742] loop3: p3 start 117772289 is beyond EOD, truncated [ 169.084283][ T2981] loop3: p1 p2 p3 [ 169.089815][ T2981] loop3: p2 start 9961480 is beyond EOD, truncated [ 169.097240][ T9742] process 'syz.3.2125' launched './file1' with NULL argv: empty string added [ 169.109742][ T2981] loop3: p3 start 117772289 is beyond EOD, truncated [ 169.126899][ T9742] usb usb5: usbfs: process 9742 (syz.3.2125) did not claim interface 0 before use [ 169.162549][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 169.200378][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 169.347549][ T9766] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2134'. [ 169.382754][ T9768] loop3: detected capacity change from 0 to 256 [ 169.416136][ T9772] veth0: entered promiscuous mode [ 169.441218][ T9772] loop6: detected capacity change from 0 to 512 [ 169.451839][ T9772] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2136: iget: bad i_size value: 38620345925642 [ 169.465237][ T9772] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.467839][ T9772] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2136: couldn't read orphan inode 15 (err -117) [ 169.477448][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 169.498678][ C1] EXT4-fs (loop6): initial error at time 1780396492: ext4_orphan_get:1397: inode 15 [ 169.512068][ C1] EXT4-fs (loop6): last error at time 1780396492: ext4_orphan_get:1397: inode 15 [ 169.521009][ T9772] loop6: lost filesystem error report for type 5 error -117 [ 169.525897][ T9772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.570713][ T9772] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2136: bg 0: block 5: invalid block bitmap [ 169.628234][ T9771] veth0: left promiscuous mode [ 169.647877][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.658006][ T9774] syzkaller0: entered promiscuous mode [ 169.663613][ T9774] syzkaller0: entered allmulticast mode [ 169.689189][ T9768] syzkaller0: entered promiscuous mode [ 169.694693][ T9768] syzkaller0: entered allmulticast mode [ 169.854498][ T9808] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2146'. [ 169.870022][ T9807] netlink: 'syz.3.2147': attribute type 11 has an invalid length. [ 169.892279][ T9812] syzkaller0: entered promiscuous mode [ 169.900964][ T9812] syzkaller0: entered allmulticast mode [ 170.112939][ T9824] syzkaller0: entered promiscuous mode [ 170.125484][ T9824] syzkaller0: entered allmulticast mode [ 170.169545][ T9835] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2159'. [ 170.181729][ T9836] FAULT_INJECTION: forcing a failure. [ 170.181729][ T9836] name failslab, interval 1, probability 0, space 0, times 0 [ 170.230711][ T9836] CPU: 0 UID: 0 PID: 9836 Comm: syz.4.2160 Not tainted syzkaller #0 PREEMPT(lazy) [ 170.230795][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.230808][ T9836] Call Trace: [ 170.230815][ T9836] [ 170.230824][ T9836] __dump_stack+0x1d/0x30 [ 170.230890][ T9836] dump_stack_lvl+0x95/0xd0 [ 170.230913][ T9836] dump_stack+0x15/0x1b [ 170.230934][ T9836] should_fail_ex+0x263/0x280 [ 170.230956][ T9836] should_failslab+0x8c/0xb0 [ 170.230997][ T9836] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 170.231069][ T9836] ? sidtab_sid2str_get+0xa0/0x130 [ 170.231096][ T9836] ? sidtab_sid2str_put+0x1b5/0x360 [ 170.231122][ T9836] kmemdup_noprof+0x2b/0x70 [ 170.231162][ T9836] sidtab_sid2str_get+0xa0/0x130 [ 170.231187][ T9836] security_sid_to_context_core+0x1eb/0x2e0 [ 170.231336][ T9836] security_sid_to_context+0x27/0x40 [ 170.231357][ T9836] avc_audit_post_callback+0x10f/0x510 [ 170.231462][ T9836] ? audit_log_lsm_data+0xb3e/0xbb0 [ 170.231483][ T9836] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 170.231584][ T9836] common_lsm_audit+0x1ba/0x230 [ 170.231606][ T9836] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 170.231636][ T9836] slow_avc_audit+0x14c/0x190 [ 170.231725][ T9836] avc_has_perm+0x144/0x190 [ 170.231756][ T9836] selinux_socket_sendmsg+0x1ab/0x1e0 [ 170.231792][ T9836] security_socket_sendmsg+0x44/0x80 [ 170.231899][ T9836] __sys_sendto+0x2c3/0x490 [ 170.231943][ T9836] __x64_sys_sendto+0x76/0x90 [ 170.231967][ T9836] x64_sys_call+0x2d35/0x3020 [ 170.232048][ T9836] do_syscall_64+0x12c/0x3b0 [ 170.232082][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.232166][ T9836] RIP: 0033:0x7fd79ba8d68e [ 170.232181][ T9836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.232199][ T9836] RSP: 002b:00007fd79a51de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.232256][ T9836] RAX: ffffffffffffffda RBX: 00007fd79a51f6c0 RCX: 00007fd79ba8d68e [ 170.232273][ T9836] RDX: 0000000000000020 RSI: 00007fd79a51e000 RDI: 0000000000000008 [ 170.232287][ T9836] RBP: 0000000000000000 R08: 00007fd79a51df04 R09: 000000000000000c [ 170.232302][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 170.232316][ T9836] R13: 00007fd79a51df58 R14: 00007fd79a51e000 R15: 0000000000000000 [ 170.232412][ T9836] [ 170.252445][ T9842] syzkaller0: entered promiscuous mode [ 170.483707][ T9842] syzkaller0: entered allmulticast mode [ 170.689147][ T9851] loop4: detected capacity change from 0 to 2048 [ 170.739314][ T9851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.758329][ T9851] FAULT_INJECTION: forcing a failure. [ 170.758329][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 170.808020][ T9851] CPU: 0 UID: 0 PID: 9851 Comm: syz.4.2164 Not tainted syzkaller #0 PREEMPT(lazy) [ 170.808077][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.808090][ T9851] Call Trace: [ 170.808097][ T9851] [ 170.808105][ T9851] __dump_stack+0x1d/0x30 [ 170.808131][ T9851] dump_stack_lvl+0x95/0xd0 [ 170.808150][ T9851] dump_stack+0x15/0x1b [ 170.808170][ T9851] should_fail_ex+0x263/0x280 [ 170.808224][ T9851] should_failslab+0x8c/0xb0 [ 170.808310][ T9851] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 170.808346][ T9851] ? __alloc_skb+0x2d6/0x690 [ 170.808371][ T9851] __alloc_skb+0x2d6/0x690 [ 170.808391][ T9851] ? __alloc_skb+0x200/0x690 [ 170.808488][ T9851] netlink_alloc_large_skb+0xbf/0xf0 [ 170.808552][ T9851] netlink_sendmsg+0x40c/0x6f0 [ 170.808593][ T9851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.808687][ T9851] ____sys_sendmsg+0x563/0x5b0 [ 170.808736][ T9851] ___sys_sendmsg+0x195/0x1e0 [ 170.808773][ T9851] __x64_sys_sendmsg+0xd4/0x160 [ 170.808810][ T9851] x64_sys_call+0x194c/0x3020 [ 170.808835][ T9851] do_syscall_64+0x12c/0x3b0 [ 170.808925][ T9851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.808948][ T9851] RIP: 0033:0x7fd79bacce59 [ 170.808967][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.808986][ T9851] RSP: 002b:00007fd79a51f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.809057][ T9851] RAX: ffffffffffffffda RBX: 00007fd79bd45fa0 RCX: 00007fd79bacce59 [ 170.809073][ T9851] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 170.809088][ T9851] RBP: 00007fd79a51f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.809102][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.809116][ T9851] R13: 00007fd79bd46038 R14: 00007fd79bd45fa0 R15: 00007ffc8bfb7fe8 [ 170.809190][ T9851] [ 170.901499][ T9832] loop1: detected capacity change from 0 to 256 [ 171.134116][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2171'. [ 171.259926][ T9876] loop6: detected capacity change from 0 to 2048 [ 171.308391][ T9876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.734346][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.738781][ T9873] net_ratelimit: 10 callbacks suppressed [ 171.738798][ T9873] Set syz1 is full, maxelem 65536 reached [ 171.865325][ T9907] syzkaller0: entered promiscuous mode [ 171.876756][ T9907] syzkaller0: entered allmulticast mode [ 171.939978][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 171.976612][ T9921] loop5: detected capacity change from 0 to 512 [ 171.998592][ T9921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 172.011426][ T9921] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.175713][ T9929] loop1: detected capacity change from 0 to 1024 [ 172.182470][ T9929] EXT4-fs: test_dummy_encryption option not supported [ 173.595341][ T9932] loop1: detected capacity change from 0 to 512 [ 173.611572][ T9932] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 173.692734][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 173.692750][ T28] audit: type=1400 audit(1780396497.132:1071): avc: denied { ioctl } for pid=9928 comm="syz.1.2184" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.497567][ T5898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.559547][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 174.682539][ T9958] loop6: detected capacity change from 0 to 256 [ 174.693153][ T9955] syzkaller0: entered promiscuous mode [ 174.698677][ T9955] syzkaller0: entered allmulticast mode [ 174.711219][ T9958] syzkaller0: entered promiscuous mode [ 174.717263][ T9958] syzkaller0: entered allmulticast mode [ 174.784377][ T9963] loop1: detected capacity change from 0 to 1024 [ 174.808023][ T9963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.824282][ T28] audit: type=1400 audit(1780396498.262:1072): avc: denied { read } for pid=9962 comm="syz.1.2195" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 174.847323][ T28] audit: type=1400 audit(1780396498.262:1073): avc: denied { write } for pid=9962 comm="syz.1.2195" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.890460][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 174.968132][ T28] audit: type=1400 audit(1780396498.412:1074): avc: denied { ioctl } for pid=9971 comm="syz.6.2198" path="socket:[31260]" dev="sockfs" ino=31260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.008909][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.030590][ T28] audit: type=1400 audit(1780396498.462:1075): avc: denied { create } for pid=9976 comm="syz.6.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 175.056510][ T28] audit: type=1400 audit(1780396498.472:1076): avc: denied { write } for pid=9976 comm="syz.6.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 175.288866][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'. [ 175.317429][ T28] audit: type=1326 audit(1780396498.752:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.1.2203" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f705178ce59 code=0x0 [ 175.700683][ T9999] syzkaller0: entered promiscuous mode [ 175.706455][ T9999] syzkaller0: entered allmulticast mode [ 175.944802][T10004] loop5: detected capacity change from 0 to 256 [ 175.975008][T10004] syzkaller0: entered promiscuous mode [ 175.989614][T10004] syzkaller0: entered allmulticast mode [ 176.637937][T10017] loop6: detected capacity change from 0 to 512 [ 176.655518][T10017] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 176.955939][T10034] veth0: entered promiscuous mode [ 176.967622][T10034] loop4: detected capacity change from 0 to 512 [ 176.976540][T10034] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2222: iget: bad i_size value: 38620345925642 [ 176.990165][T10034] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.990508][T10034] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2222: couldn't read orphan inode 15 (err -117) [ 176.999763][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 176.999792][ C0] EXT4-fs (loop4): initial error at time 1780396500: ext4_orphan_get:1397: inode 15 [ 176.999820][ C0] EXT4-fs (loop4): last error at time 1780396500: ext4_orphan_get:1397: inode 15 [ 177.037620][T10034] loop4: lost filesystem error report for type 5 error -117 [ 177.038217][T10034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.059475][ T28] audit: type=1400 audit(1780396500.502:1078): avc: denied { write } for pid=10033 comm="syz.4.2222" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.059916][T10034] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2222: bg 0: block 5: invalid block bitmap [ 177.136067][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2223'. [ 177.145551][T10033] veth0: left promiscuous mode [ 177.153286][ T28] audit: type=1326 audit(1780396500.592:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc17d94ce59 code=0x0 [ 177.179769][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.352643][T10052] netlink: 'syz.3.2229': attribute type 11 has an invalid length. [ 177.363135][T10052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2229'. [ 177.416166][T10041] loop6: detected capacity change from 0 to 256 [ 177.490093][T10041] syzkaller0: entered promiscuous mode [ 177.495892][T10041] syzkaller0: entered allmulticast mode [ 177.551145][T10058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2232'. [ 177.560642][ T28] audit: type=1400 audit(1780396501.002:1080): avc: denied { shutdown } for pid=10057 comm="syz.1.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.720251][T10064] syzkaller0: entered promiscuous mode [ 177.725787][T10064] syzkaller0: entered allmulticast mode [ 178.457554][T10087] loop5: detected capacity change from 0 to 256 [ 178.506126][T10087] syzkaller0: entered promiscuous mode [ 178.525446][T10087] syzkaller0: entered allmulticast mode [ 178.676057][T10101] veth0: entered promiscuous mode [ 178.699829][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 178.745750][T10101] veth0 (unregistering): left promiscuous mode [ 178.778615][T10112] netlink: 'syz.1.2244': attribute type 3 has an invalid length. [ 178.788461][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 178.797312][T10113] syzkaller0: entered promiscuous mode [ 178.800057][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 178.812418][T10113] syzkaller0: entered allmulticast mode [ 178.820704][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 178.842469][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 178.842537][ T28] audit: type=1326 audit(1780396502.282:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.4.2249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd79bacce59 code=0x0 [ 178.847438][T10101] netlink: 'syz.1.2244': attribute type 4 has an invalid length. [ 178.905965][T10101] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2244'. [ 178.916487][T10101] .`: renamed from bond0 [ 178.948296][T10117] loop5: detected capacity change from 0 to 512 [ 178.985327][T10117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 179.015752][T10117] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.125689][T10129] loop3: detected capacity change from 0 to 1024 [ 179.132844][ T28] audit: type=1326 audit(1780396502.512:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10120 comm="syz.3.2252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5cb9ace59 code=0x0 [ 179.158790][T10129] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.170339][T10129] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.2252: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 179.188919][T10129] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.189909][T10129] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2252: couldn't read orphan inode 11 (err -117) [ 179.199086][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 179.199109][ C1] EXT4-fs (loop3): initial error at time 1780396502: ext4_ext_check_inode:521: inode 11 [ 179.199160][ C1] EXT4-fs (loop3): last error at time 1780396502: ext4_ext_check_inode:521: inode 11 [ 179.237282][T10129] loop3: lost filesystem error report for type 5 error -117 [ 179.282596][T10129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.644231][T10124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 179.730042][T10141] Set syz1 is full, maxelem 14 reached [ 179.795159][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 179.843995][T10134] loop6: detected capacity change from 0 to 128 [ 179.876019][T10145] loop1: detected capacity change from 0 to 128 [ 179.891981][T10145] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.927039][T10145] bridge0: entered promiscuous mode [ 179.940574][T10145] bridge0: entered allmulticast mode [ 179.999047][T10150] loop5: detected capacity change from 0 to 256 [ 180.011584][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 180.021207][T10145] netlink: 'syz.1.2259': attribute type 19 has an invalid length. [ 180.064232][T10134] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.095668][T10134] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.113416][ T2068] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.135366][T10150] syzkaller0: entered promiscuous mode [ 180.192465][T10150] syzkaller0: entered allmulticast mode [ 180.230844][ T28] audit: type=1400 audit(1780396503.672:1084): avc: denied { view } for pid=10132 comm="syz.6.2254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 180.288220][ T5898] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.381636][T10160] __nla_validate_parse: 2 callbacks suppressed [ 180.381654][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 180.484078][T10163] syzkaller0: entered promiscuous mode [ 180.492789][T10163] syzkaller0: entered allmulticast mode [ 180.581106][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2267'. [ 180.592568][T10168] FAULT_INJECTION: forcing a failure. [ 180.592568][T10168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.606878][T10168] CPU: 0 UID: 0 PID: 10168 Comm: syz.5.2266 Not tainted syzkaller #0 PREEMPT(lazy) [ 180.606908][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.606986][T10168] Call Trace: [ 180.606995][T10168] [ 180.607050][T10168] __dump_stack+0x1d/0x30 [ 180.607077][T10168] dump_stack_lvl+0x95/0xd0 [ 180.607100][T10168] dump_stack+0x15/0x1b [ 180.607120][T10168] should_fail_ex+0x263/0x280 [ 180.607142][T10168] should_fail+0xb/0x20 [ 180.607161][T10168] should_fail_usercopy+0x1a/0x20 [ 180.607262][T10168] _copy_to_user+0x20/0xa0 [ 180.607288][T10168] simple_read_from_buffer+0xb5/0x130 [ 180.607333][T10168] proc_fail_nth_read+0x10e/0x150 [ 180.607364][T10168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.607524][T10168] vfs_read+0x1ab/0x7f0 [ 180.607555][T10168] ? __rcu_read_unlock+0x4e/0x70 [ 180.607577][T10168] ? __fget_files+0x184/0x1c0 [ 180.607599][T10168] ? mutex_lock+0x57/0x90 [ 180.607641][T10168] ksys_read+0xdc/0x1a0 [ 180.607737][T10168] __x64_sys_read+0x40/0x50 [ 180.607793][T10168] x64_sys_call+0x2886/0x3020 [ 180.607826][T10168] do_syscall_64+0x12c/0x3b0 [ 180.607859][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.607883][T10168] RIP: 0033:0x7fc17d90d68e [ 180.607901][T10168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.607944][T10168] RSP: 002b:00007fc17c385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.607967][T10168] RAX: ffffffffffffffda RBX: 00007fc17c3866c0 RCX: 00007fc17d90d68e [ 180.607983][T10168] RDX: 000000000000000f RSI: 00007fc17c3860a0 RDI: 0000000000000008 [ 180.608018][T10168] RBP: 00007fc17c386090 R08: 0000000000000000 R09: 0000000000000000 [ 180.608031][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.608043][T10168] R13: 00007fc17dbc6128 R14: 00007fc17dbc6090 R15: 00007ffc8a7a1fb8 [ 180.608062][T10168] [ 180.818424][ T28] audit: type=1326 audit(1780396504.252:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10166 comm="syz.4.2267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd79bacce59 code=0x0 [ 180.913819][T10171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 180.933876][T10171] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.183094][ T28] audit: type=1400 audit(1780396504.622:1086): avc: denied { load_policy } for pid=10182 comm="syz.6.2272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 181.618572][T10199] xt_hashlimit: size too large, truncated to 1048576 [ 181.746026][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 181.949145][T10187] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 181.963501][T10187] SELinux: failed to load policy [ 181.991308][T10212] syzkaller0: entered promiscuous mode [ 181.997237][T10212] syzkaller0: entered allmulticast mode [ 182.026477][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.115473][T10218] set_capacity_and_notify: 1 callbacks suppressed [ 182.115493][T10218] loop4: detected capacity change from 0 to 2048 [ 182.145452][T10218] EXT4-fs: Ignoring removed i_version option [ 182.179963][T10218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.196201][T10218] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.229735][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.267733][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.284320][T10218] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 183.124533][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.313619][T10236] loop1: detected capacity change from 0 to 512 [ 183.339029][T10236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 183.353900][T10236] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.373987][T10246] FAULT_INJECTION: forcing a failure. [ 183.373987][T10246] name failslab, interval 1, probability 0, space 0, times 0 [ 183.387571][T10246] CPU: 1 UID: 0 PID: 10246 Comm: syz.6.2291 Not tainted syzkaller #0 PREEMPT(lazy) [ 183.387661][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.387724][T10246] Call Trace: [ 183.387732][T10246] [ 183.387740][T10246] __dump_stack+0x1d/0x30 [ 183.387768][T10246] dump_stack_lvl+0x95/0xd0 [ 183.387788][T10246] dump_stack+0x15/0x1b [ 183.387814][T10246] should_fail_ex+0x263/0x280 [ 183.387901][T10246] should_failslab+0x8c/0xb0 [ 183.387929][T10246] __kmalloc_noprof+0xb8/0x4d0 [ 183.388015][T10246] ? fib6_info_alloc+0x2e/0x90 [ 183.388052][T10246] fib6_info_alloc+0x2e/0x90 [ 183.388079][T10246] ip6_route_info_create+0xe9/0x4f0 [ 183.388098][T10246] addrconf_f6i_alloc+0x1cb/0x2f0 [ 183.388170][T10246] ipv6_add_addr+0x3ca/0x860 [ 183.388215][T10246] inet6_addr_add+0x29d/0x8f0 [ 183.388284][T10246] ? selinux_capable+0x31/0x40 [ 183.388318][T10246] ? should_fail_ex+0xd9/0x280 [ 183.388342][T10246] addrconf_add_ifaddr+0x1bf/0x280 [ 183.388380][T10246] inet6_ioctl+0xb0/0x190 [ 183.388488][T10246] ? ioctl_has_perm+0x27e/0x2d0 [ 183.388520][T10246] sock_do_ioctl+0x73/0x230 [ 183.388596][T10246] sock_ioctl+0x41b/0x610 [ 183.388619][T10246] ? mutex_lock+0x57/0x90 [ 183.388722][T10246] ? __pfx_sock_ioctl+0x10/0x10 [ 183.388886][T10246] __se_sys_ioctl+0xce/0x140 [ 183.388960][T10246] __x64_sys_ioctl+0x43/0x50 [ 183.388992][T10246] x64_sys_call+0x1563/0x3020 [ 183.389067][T10246] do_syscall_64+0x12c/0x3b0 [ 183.389110][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.389131][T10246] RIP: 0033:0x7f529873ce59 [ 183.389146][T10246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.389226][T10246] RSP: 002b:00007f5297197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.389253][T10246] RAX: ffffffffffffffda RBX: 00007f52989b5fa0 RCX: 00007f529873ce59 [ 183.389270][T10246] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 183.389337][T10246] RBP: 00007f5297197090 R08: 0000000000000000 R09: 0000000000000000 [ 183.389425][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.389440][T10246] R13: 00007f52989b6038 R14: 00007f52989b5fa0 R15: 00007ffccd3d4a38 [ 183.389459][T10246] [ 183.641629][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2293'. [ 183.887390][T10262] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 183.964783][T10262] syzkaller0: entered promiscuous mode [ 184.001559][T10262] syzkaller0: entered allmulticast mode [ 184.101177][T10264] loop6: detected capacity change from 0 to 8192 [ 184.301764][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 184.417162][T10285] loop4: detected capacity change from 0 to 256 [ 184.463936][ T28] audit: type=1400 audit(1780396507.902:1087): avc: denied { mounton } for pid=10280 comm="syz.4.2302" path="/477/file0" dev="tmpfs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.964087][T10302] loop5: detected capacity change from 0 to 1024 [ 184.972074][T10302] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 185.074859][T10304] syzkaller0: entered promiscuous mode [ 185.097823][T10304] syzkaller0: entered allmulticast mode [ 185.206808][T10306] syzkaller0: entered promiscuous mode [ 185.228571][T10306] syzkaller0: entered allmulticast mode [ 185.259978][T10308] loop5: detected capacity change from 0 to 512 [ 185.301803][T10308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 185.359381][T10264] ================================================================== [ 185.367597][T10264] BUG: KCSAN: data-race in __d_drop / fast_dput [ 185.373847][T10264] [ 185.376173][T10264] write to 0xffff8881087d6b50 of 8 bytes by task 10273 on cpu 0: [ 185.383886][T10264] __d_drop+0x14d/0x240 [ 185.388132][T10264] d_invalidate+0x50/0x1d0 [ 185.392553][T10264] path_openat+0x12e6/0x2050 [ 185.397154][T10264] do_file_open+0x16c/0x290 [ 185.401661][T10264] do_sys_openat2+0x94/0x130 [ 185.406258][T10264] __x64_sys_openat+0xf2/0x120 [ 185.411022][T10264] x64_sys_call+0x1e39/0x3020 [ 185.415706][T10264] do_syscall_64+0x12c/0x3b0 [ 185.420313][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.426210][T10264] [ 185.428564][T10264] read to 0xffff8881087d6b50 of 8 bytes by task 10264 on cpu 1: [ 185.436193][T10264] fast_dput+0x5f/0x2c0 [ 185.440350][T10264] dput+0x24/0x60 [ 185.443984][T10264] filename_mknodat+0x2cb/0x450 [ 185.448841][T10264] __se_sys_mknodat+0x38/0xf0 [ 185.453531][T10264] __x64_sys_mknodat+0x55/0x70 [ 185.458305][T10264] x64_sys_call+0x312/0x3020 [ 185.462900][T10264] do_syscall_64+0x12c/0x3b0 [ 185.467502][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.473397][T10264] [ 185.475737][T10264] value changed: 0xffff88823794f250 -> 0x0000000000000000 [ 185.482839][T10264] [ 185.485157][T10264] Reported by Kernel Concurrency Sanitizer on: [ 185.491306][T10264] CPU: 1 UID: 0 PID: 10264 Comm: syz.6.2295 Not tainted syzkaller #0 PREEMPT(lazy) [ 185.500679][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.510909][T10264] ================================================================== [ 185.519042][T10308] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.235489][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.