last executing test programs: 3.565725738s ago: executing program 0 (id=614): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) (async) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) prlimit64(0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',nodevmap']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)={0x8}) sendfile(r4, r3, 0x0, 0x100800001) 3.397607151s ago: executing program 0 (id=617): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)={0x24, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0xfffffffffffffec9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x24}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1, @time}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x44a, &(0x7f0000001380)="$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") r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000, 0x0) openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000004700)=[{&(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)=']', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000840000000000004000000000000000002000000000000000840000492ba01200fc000000001600"/56], 0x38}], 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x40040080}, 0x1) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000780)) tkill(r1, 0x20000007) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800006, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x557, &(0x7f0000000940)="$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") 3.069706649s ago: executing program 1 (id=622): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffd88) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket(0x10, 0x3, 0x0) 2.748920434s ago: executing program 4 (id=626): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_emit_ethernet(0x7e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xb, 0x0, [@dev, @loopback]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 2.716551477s ago: executing program 2 (id=627): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xc, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x48c4) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 64) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) (rerun: 64) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) (async) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000002c0)="eafd9ff4f593dfc8fa7a52882f07d52c0580e6fac9809969c3b72c019126a9ab9085a58e0714c7f18c40031a24d29b4f682f3396190b83ba40d38e5d3edd3f5c730220a443d76dd4644c20fac607c0e319a3356cfb1e9293485ce2d1e970c5e03afd11954b08bfaaeb138c44fceefa10a46b66f3e1f5f9aa248ff38def448e2092706a808c7a52c317024cc701946355c61e135dec700c652beb26e85eb080a4f4aa3976fc36a4daeb0086", 0xab, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x37bc) 2.714600567s ago: executing program 4 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@auto_da_alloc}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@orlov}], [], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$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") socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000005d0131f6ffffff009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000001c0)='./file0\x00', 0x0) recvmmsg(r1, &(0x7f0000002c40), 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x2fd, 0x0, 0x10, 0x0, 0x0}) (fail_nth: 2) 2.653788452s ago: executing program 2 (id=629): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/if_inet6\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbb, 0x0) 2.652293573s ago: executing program 2 (id=630): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x0, @v={0x3, 0x3, 0x3, 0x6, 0x2, 0x4, 0x6b, {0x7f, 0x6, "beacfe46fd18176d"}, 0x6, 0x80, 0x1f, 0x1f, 0x1, "ad"}}, 0x1a) 2.555996081s ago: executing program 0 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@auto_da_alloc}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@orlov}], [], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$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") socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000005d0131f6ffffff009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x80}}, 0x1c}}, 0x0) semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f00000001c0)='./file0\x00', 0x0) recvmmsg(r1, &(0x7f0000002c40), 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x0, 0x0) 2.001244746s ago: executing program 1 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.949587s ago: executing program 1 (id=636): setrlimit(0xf, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffe}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000001000370400000000ffdbdf3500000000", @ANYRES32=r3, @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc02000000000000000000000000000108000d000300000014000700ff020000000000000000000000000001040012"], 0xa0}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @remote}, 0x14) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x8008551c, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001a4b02abb4ddca1faf82f5f52652567f8d2dd8f61bfbb35531903f37817ed309dd229dbd5c05161e519148943adc95ad346a727c071ad033", @ANYBLOB="000000000000000000001e0000000c0006000000000000"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r9 = memfd_create(&(0x7f0000000000)='\x06', 0x6) lseek(r9, 0x8000000000000001, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) unshare(0x20000600) mremap(&(0x7f00008c4000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000e2e000/0x1000)=nil) 1.872061876s ago: executing program 4 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000001900)={0xf24, r1, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x973, 0x4, 0x0, 0x9, 0x7, 0x5]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0xa}, {0x6, 0x1}, {0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x7, 0xa}, {0x2, 0x6}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8cf1, 0x1, 0x4ab, 0x5, 0x643, 0x5, 0x200, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x47, 0x4, 0x12, 0x1f, 0x30, 0x36, 0xc, 0x1, 0x9, 0x18, 0x30, 0x4c6c1a757ebf58e5, 0x30, 0x2, 0x6c, 0x3, 0x2, 0x60, 0x36, 0x30, 0x36, 0x1, 0x7c, 0x16, 0x1, 0xb, 0xb]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9cc9, 0x6, 0x4000, 0x3ff, 0x2, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x6, 0x3, 0x3, 0x0, 0x2, 0x6c, 0x5, 0x9, 0x2, 0x1b, 0x2, 0xc, 0x18, 0x6, 0x2, 0x5, 0x9, 0xc, 0x6c, 0x12, 0x5, 0x9, 0x69, 0x12, 0x1, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x1, 0xc, 0x4, 0x5, 0x5f, 0x9, 0x4, 0x3, 0x18, 0x30, 0xc, 0x1b, 0x36, 0x6, 0x1b, 0x6, 0x18, 0x1b, 0x36, 0x0, 0x3, 0x48, 0xb, 0x31, 0x0, 0x4, 0x16, 0x48, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x24, 0x12, 0xb, 0x16, 0x3, 0x48, 0x12, 0x5, 0x1, 0x48, 0x1b, 0x3, 0x4, 0x4, 0x2, 0x2, 0x30, 0x36, 0x4, 0x1b, 0x24, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x8}, {0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x3, 0x6}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x6}, {}, {0x5, 0x7}, {0x7, 0x9}, {0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x7}, {0x4, 0xf}, {0x0, 0x4}, {0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x4}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x6}, {0x2, 0x9}, {0x7, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x6}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x5, 0x8}, {0x3, 0x7}, {0x0, 0xa}, {0x2}, {0x4, 0xa}, {0x6, 0x2}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x8}, {0x4, 0x5}, {0x5, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {}, {0x1, 0x8}, {0x1}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x6}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xa, 0x0, 0x1, 0xe414, 0x7, 0x9e]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x6, 0x1b, 0x6c, 0x3, 0x18, 0x12, 0x30, 0x12, 0x1, 0x30, 0x0, 0x5, 0x9, 0x12, 0x12, 0xb, 0x6, 0x48, 0x18, 0x24, 0x1, 0xb, 0x2f, 0xfc583ae60e870f62, 0x16, 0x16, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x3ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x6}, {0x0, 0x7}, {0x2}, {0x1}, {0x3, 0x2}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0x6}, {0x7}, {0x5}, {0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x3, 0x9}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x4}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x4}, {0x4, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x8}, {0x5, 0x5}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x4}, {}, {0x1, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x24, 0xb, 0x2, 0x30, 0x1b, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xff, 0x5, 0xfff9, 0x8, 0x2, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x0, 0x9, 0x8812, 0x2, 0xa2c, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb8, 0x4, 0xfffc, 0xfbff, 0x1000, 0x1, 0x573f, 0xdf18]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x6, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x3, 0x6}, {0x7, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x7, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x2, 0x6}, {0x6, 0x2}, {0x0, 0x7}, {0x0, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x1c, 0x1, 0x10, 0x6, 0x9, 0xfff8]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x7ff, 0x1, 0x80, 0x7fff, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbf, 0x0, 0x1, 0x8, 0x0, 0x6, 0x5, 0x8]}}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6936, 0x0, 0x1, 0x3, 0x8, 0x5, 0x4, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0xa, 0x4, 0x7, 0x40, 0x380, 0xfffa]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x12}, {0x2, 0x5}, {0x2}, {0x4, 0x7}, {0x4, 0x6}, {0x5, 0x7}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x4}, {0x4, 0x9}, {}, {0x4, 0x3}, {0x0, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x2, 0x8}, {0x3, 0x5}, {0x5, 0x8}, {0x4, 0x6}, {0x3}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x9}, {0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x7}, {0x7, 0x17}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0xb, 0x3, 0x18, 0x48, 0x5, 0x5, 0x5, 0x1, 0x12, 0x60, 0x9, 0xc, 0x28a6f7112bac970e, 0x6, 0x60, 0x1b, 0x4, 0x4, 0xc, 0x16, 0x1b, 0x6, 0x18, 0x60, 0x3, 0xb, 0x60, 0x18, 0xc, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x3, 0x81, 0x7, 0x3, 0xfbe, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x5}, {0x3, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0x1}, {0x6, 0x9}, {0x0, 0xa}, {0x2, 0x7}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x48, 0x0, 0x30, 0x9, 0x12, 0xc, 0x60, 0xb, 0x5, 0x1b, 0x60, 0xb, 0x3, 0x3f, 0x16, 0x3, 0x36, 0x1, 0x48, 0x3, 0x9, 0x1, 0x2, 0x36, 0x36, 0x5, 0x5, 0x6f, 0x12, 0x1b, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x48, 0x6, 0x9, 0x4, 0x24, 0x2, 0x6c, 0x2, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1428, 0x9, 0x2, 0x3, 0x8b7, 0x100, 0x6, 0x74]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3269, 0x8001, 0x6, 0x7, 0x9, 0x2, 0x8, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0xa77d, 0x5, 0x8, 0x5, 0x9, 0x8f6c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x1}, {0x3}, {0x7, 0x9}, {0x1}, {0x7}, {0x1, 0x1}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x9}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x8}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x5}, {0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x6, 0x5}, {0x5, 0x5}, {0x6, 0x6}, {0x2}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x6}, {0x4, 0x3}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0xa}, {0x3, 0x7}, {0x3, 0xe}, {0x5, 0x7}, {0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x6}, {0x6, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x9, 0x37, 0xc, 0x12, 0x6, 0x48, 0xb, 0x16, 0x4, 0x12, 0x5, 0x30, 0x6c, 0x1, 0x1b, 0xc, 0xf1764755e4565a04, 0x36, 0x9, 0x6, 0x30, 0x1b, 0x6, 0x1b, 0x48, 0x6, 0x48, 0x9, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x2, 0x4, 0x3, 0x30, 0x81, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x8, 0x9, 0xf, 0x7af, 0x7fff, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0xffff, 0x64, 0x57, 0x8, 0x81, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x2}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x5, 0xb, 0x9, 0x3ff, 0x5, 0x81, 0x3]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x1, 0x24, 0x1, 0x7c, 0x3, 0x5c, 0x2, 0x48, 0x48, 0x48, 0x1, 0x5, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3ff, 0x8, 0x8001, 0x9, 0x7cb, 0xaf, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x4, 0x9deb, 0xcff, 0x7, 0xd1, 0x63]}}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3ff, 0xfff9, 0x7, 0x7ff, 0x4, 0x4, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2e, 0x48, 0x12, 0x1b, 0x30, 0x0, 0x36, 0xc, 0x4, 0x1b, 0x3, 0x2, 0x12, 0x1b, 0x48, 0x4, 0x1, 0xb, 0x1b]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x30, 0x60, 0x16, 0x24, 0x5, 0x0, 0x30, 0x24, 0x18, 0x12, 0x36, 0x16, 0x9, 0x12, 0x6f, 0x1, 0x2, 0x6, 0xc, 0x1, 0x48, 0x9, 0x6c, 0x1b, 0x4, 0x30, 0x48, 0x12]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xfff7, 0x8, 0x1, 0x6, 0x4, 0xd5, 0x1c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbbc4, 0xff, 0xd, 0x40, 0x7, 0x2, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xe, 0x7, 0x6, 0x1, 0x1, 0x7, 0xd2]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x3}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x5}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x6}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x2, 0x4}, {}, {0x1, 0x4}, {0x4, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3ff, 0x7, 0x5, 0xa, 0x4, 0x1d5c, 0xfeff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x60, 0xc, 0x22, 0x16, 0x60, 0x60, 0x1b, 0xb, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0xff, 0x6, 0xcc, 0xcd75, 0x1, 0x400, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x6, 0x6}, {}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x7}, {}, {0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0xa}, {0x1}, {0x0, 0x4}, {0x5}, {0x3, 0x7}, {}, {0x4, 0x5}, {0x7, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x2}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x9}, {0x5}, {0x0, 0x5}, {}, {0x2, 0x6}, {0x5, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x2}, {0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x8}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x215, 0x101, 0x9, 0x1, 0x8, 0xfff7, 0x1, 0xfff7]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x2}, {0x6, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x9}, {0x3, 0x8}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x2}, {0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0x7}, {0x4, 0x7}, {0x3, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa, 0x8, 0x8, 0x0, 0x8001, 0x101, 0xcc0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x4, 0xc536, 0xc, 0x9, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x9}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x101, 0x6, 0x9, 0x0, 0x8001, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb8, 0x401, 0xfff, 0x100, 0xea7f, 0x8000, 0x5, 0x46]}}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x38, 0x18, 0x6c, 0x4, 0x48, 0x36, 0x60, 0x16, 0x18, 0x6, 0x3, 0x6c, 0x24, 0x36, 0x30, 0x3, 0x24, 0x3, 0x6, 0x2, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x24, 0x5, 0x4, 0x2, 0x6, 0xc, 0x36, 0x3, 0x4, 0x34, 0x5, 0x18, 0x6c, 0xb]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb5, 0x3, 0x200, 0x7, 0x5, 0x25f, 0x9, 0xaa9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3, 0xfff, 0x80, 0x80, 0x0, 0x3, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x1a, 0x16, 0x1b, 0x4, 0x24, 0x30, 0x4, 0x16, 0x30, 0x12, 0x9, 0xc, 0x42, 0x3, 0x5, 0x30, 0x24, 0x60, 0x1d, 0x5, 0x9a1c0a2666b8de13, 0x16, 0x9, 0x5, 0x60, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x5, 0xc, 0x48, 0x60, 0x36, 0xb, 0x60, 0x16, 0x18, 0x12, 0x36, 0x5, 0x24, 0xb, 0x3, 0x24, 0x30, 0x24, 0x60, 0x18, 0x9, 0x16, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x3, 0x6c, 0x2, 0x36, 0x24, 0x9, 0xb, 0x30, 0x18, 0x0, 0x0, 0x0, 0x30, 0x18, 0x9, 0x1b, 0x18, 0x1b, 0x1, 0x60, 0x60]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x8e3c, 0x60, 0x5, 0x8, 0x9, 0x6ef, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x3}, {0x3, 0x8}, {0x4, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x4}, {0x4, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa90, 0xde, 0x7, 0x0, 0x400, 0x94, 0x3ffc]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x7, 0x3}, {0x4}, {0x2, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x3}, {0x5}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x8}, {0x4}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x5, 0x8}, {0x3, 0x3}, {0x5}, {0x7, 0x1}, {}, {0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x4}, {0x2, 0xa}, {0x5, 0x6}, {0x6, 0x7}, {0x4}, {0x3, 0x1a}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x8}, {0x2}, {0x5, 0xa}, {0x4, 0x9}, {0x6, 0x6}, {0x2, 0x7}, {0x2, 0x2}, {0x7, 0x4}, {0x7, 0x1}, {0x7, 0x6}, {0x2, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x2, 0x8}, {0x3}, {0x2, 0xb}, {0x4, 0x1}, {0x6}, {0x6, 0x8}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x2}, {0x0, 0x2}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x9}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x8}, {0x7, 0x8}, {0x4, 0x9}, {0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0xa}, {0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x1}, {0x7, 0xa}, {0x5, 0x2}, {0x1}, {0x2, 0x7}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0x8}, {0x5, 0x9}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x5}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x3}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x6, 0x49, 0xfff, 0x2, 0x5, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x9, 0x40, 0x5, 0x4, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5, 0x7fff, 0x0, 0xf521, 0x5, 0x7, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa, 0x6, 0x9, 0xdbe, 0x58b3, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9b78, 0x200, 0x6, 0x8000, 0x5, 0x100, 0x8]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x18]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x1, 0x6db, 0x9, 0x5, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x4e0, 0x9, 0x2769, 0x8, 0x3, 0xbaf, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x10, 0x7, 0x952, 0x6, 0x8, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x8}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x8}, {}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x6}, {0x7}, {0x4, 0x1}, {0x6, 0x2}, {0x2, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x3, 0x0, 0x3, 0x1b, 0x1, 0x60, 0x6c, 0x1b, 0x1b, 0x2, 0x18, 0x0, 0x2, 0x35, 0x16, 0x18, 0x16, 0x18, 0x60, 0x1, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x775b, 0x101, 0x4, 0x3, 0x0, 0x3, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x6, 0x7bd7, 0x800, 0x7fff, 0x3, 0x74eb]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd678, 0x2, 0x1, 0x4, 0x1, 0x7, 0x6]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x6, 0x16, 0x4, 0xb, 0x3, 0x4, 0x12, 0xc, 0x24, 0x5, 0x6, 0x4f, 0xb, 0x16, 0x6c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x4, 0x6, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0xc, 0x6c, 0x48, 0xc, 0x48, 0x5, 0x1, 0x48, 0x6c, 0x4, 0x4, 0x89, 0x6, 0x5, 0x6c, 0x1, 0x30, 0x3, 0x1, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x220, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x8, 0x6, 0x1ff, 0x5, 0x751, 0x3]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x3}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x3}, {}, {0x6, 0x8}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x9}, {0x3}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x5}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {}, {0x3, 0x7}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x5}, {0x7}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xef12, 0xfffd, 0xff, 0xb7e, 0x10, 0x2, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x16, 0x12, 0x60, 0x4, 0x4, 0x12, 0x30, 0xc, 0xb, 0x6, 0xb, 0x6c, 0x18, 0xc, 0x48, 0x30, 0x0, 0x24, 0x60, 0x5, 0x1f, 0x6c, 0x36]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {0x4}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x4}, {0x1}, {0x5, 0xa}, {0x1}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x10}, {0x1, 0x2}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x400, 0x1, 0x9, 0x8000, 0x800, 0x8, 0x100]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x12, 0x4, 0x3, 0x47, 0x6, 0x0, 0x1b, 0x7d, 0x6, 0x2, 0x60, 0x60, 0x60, 0x4, 0x9, 0x6c, 0x1, 0x3, 0x2, 0x18, 0x18, 0x9, 0x4, 0x8593ba0d3e570aca]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x3, 0x7}, {0x6}, {0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x9}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x4, 0x2}, {0x6}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x6c, 0x0, 0x0, 0x9, 0x3, 0xb, 0xb, 0x0, 0x0, 0x60, 0x12, 0x36, 0x24, 0x60, 0x48, 0x4, 0x0, 0x6, 0x12, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x2, 0x6, 0xfff9, 0x7, 0xe, 0xa, 0x9]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x1}, {0x1, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x5}, {0x6}, {0x0, 0x4}, {}, {}, {0x6, 0x8}, {0x3}, {0x3, 0x9}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0x1c}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x6, 0x12, 0x6, 0x30, 0x24, 0x9, 0x2, 0x30, 0x9, 0x30, 0x6c, 0x24, 0x0, 0x4, 0x1, 0x9, 0x5, 0x48, 0xb, 0x36, 0x18, 0x18, 0x24, 0x93f1278eb8b96088, 0x36, 0x5]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x3}, {0x7, 0x8}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0xf24}}, 0x40040) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x105240, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100001000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac141400000000000000000000000000000340006c0000002001000000000000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0xfff, 0x7}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) dup3(r4, r5, 0x0) 1.801312302s ago: executing program 1 (id=638): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x100040a, &(0x7f0000000540)=ANY=[], 0xf9, 0x67c, &(0x7f0000000280)="$eJzs3c9vG2kdx/HPOE7iBFEhQKuqdJtnWxalori2s80qKgeGydiZxfZYMw5qTquyTVZVnS60RaJBYsmFHxL8A9z2sgf+CCTOnPkHOCKt4IYEB6OZ8fjn2M6mblrY9yva9eOZ78zznXmm82RizzMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACynN1SqWzle2/NNM5u4DemzjUmWXxZN5PCzbn1Slb0nwoFXU4mXf76YPYb0f+u62ry7qoK0UtBJ1964yt3v5bPpcvPSOg8Zmx/tqfPTx7d73QOn5yvtq51nuVeiolMlDvDUjW36YW+17BrrvFC3+xsb5du71VDU/XqbngQtt2GcQI31/YDs+ncNOWdnS3jFg/8/WZt16676cR3v1MplbbNe6u95r/9XjF09rx63WvW4phodhSz2j9CXLthzNHDzuHWvCSjoPJZgirzgiqlSqVcrlTK23d27rxbKuUnJpTGaCJicNC+Po2Pi7SAszawGLmo//+bJdVVUFP7uieT+eNoV4F8NabM70n7/7dvuzPrHe7/017+8mD2FcX9/7Xk3bVp/f+UXIxMvEDWHGvK9PP9PNVzneiR7qujjg71ZDHr3VjEWpYWuJ3TfmpSXvIUypenhmzV5Mr0phjtaFvbKul97amqUEZVearLVagDhWrLVSNuk0CubLXlK5DRphzdlFFZO9rRloxcFXUgX/tqqqZd2fpXt9s90sN4v2/NyFFH+taXpUOVZwcla8r3j8HJoGn9/48+Tpb4fP0//v/0j50zxACvXDe5/p8RsZQ1cePlZQQAAAAAABbNiv/6bsWf3b8pqauqV3dLrzotAAAAAACwQPEn/1ejl+Wo9KasKdf/3YvPDQAAAAAALIYV32NnSVqPv9RvDe6EOsuXADJvDgAAAAAAAK+X+PP/aytSNx5abUPW9Ot/LvYBAAAAAPjf9JuhMfbz6Ri73fRKPycpbK1af/rHqoJl67R175vWsR3NsY97MRN/FGhXr1h5JQP1xuP1rkiK3znuVas3PnBvEEwrGdhX+uxo3lj/VjCWwMpS+ueLjAQunQwlsJ3vvdPv9FYS81av3gcnOcVzklrWq17dLTp+/W5Ztn0p13bvtX/6+OHPpKC/nUcPO4fFDz7qPIhzOY0mnR5HeXw8kk5uXi7P4vEW4nsusrZ4TdW0yt82G+tWXG8p3f4l2ce54YrOtv2/0vUk5vp68rp+kraArF/2CuVi3GSDrY9Hh7AGWZTHtzyrIaZkUYizuJHE3Ni8kbyk+SWtUPj2klQpTrZBMJxFZTiL+fvC+ufEvpiTRXQsbEVZ/Dla0ZQstj5fFhMtAgCvytGgF4oHMZ8cY3+83z3PWW5+7/690Vqe/aGb3HC4JOV7n00kNyFO61cUndE3k7CVZBT3/JWMM3qp168UNOWMXjpX71ZIf8nRHwfPQOql3YvL97P4d7fbvVuO6/39WK/6SbTAJ1PrDeuVpWgX3n52/ON4APzIh4cfHj6uVLa2S++USncqWo43o/dC3wMAyDD/GTujEYVBf9bvu9/pX1U/+PvbSWmk3/1q/ysFRX2gj9TRA91KHyGwkV3v+tDXEG5NXrVGsWvSeGxZt6Ze1cV96VBspR+7rHSR0d8XBrFbL7sZAAC4UNfn9MPj/X/Wtfut9Lp780rmdfdoXz7+hOBpseUL3hMAAHxxuMFn1nr711YQeK33yzs7Zbu955rAd35gAm+35hqv2XYDZ89u1lzTCvy27/h10wq06u26oQn3Wy0/aJuqH5iWH3r34ie/m96j30O3YTfbnhO26q4dusbxm23baZtdL3RMa//7dS/cc4N44bDlOl7Vc+y25zdN6K/JcYvGhK47CPzPL5KcPTcwXtO0Aq9hBwfmh359v+GaXTd0Aq/V9pMVpnV5zaofNOLVFtWd9aBDAAC+MJ4+P3l0v9M5fDKjcKqksCStRMvMCF7JWuGr3kYAADCKXhoAAAAAAAAAAAAAAAAAAAAAgNffWe7/m1lIB6lPpywrI1jqT/nJpTOt2dJgyqd/faEMz1HIjU/pjbTbnb/4X5JCPitmLSqsSOqku3845nShW7FxpmAlhfzi9+GalHUkvLTCd49Gj8OJmGhm5qzVflvkX/yfQ1bh8acZs37+DWn+EbU6ug9XZm3gaCEv6cnKCzTBxZ+LAFys/wYAAP//i0A4XA==") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000040000000000000000000000180000000000000029000000040000000008"], 0x30}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000001c0)="ad5baf5fedc4cf00257abec6e1fdf27189b4e01db0a5f8595d4b8a8c4f0f5e8d349341f9e1f7dddfae0a18e554f19d1ac5df2f773426d0f0c99b", 0x3a) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x731b, 0x7, 0x6, 0x8}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='xen_mmu_write_cr3\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}, @TCA_CAKE_RTT={0x8, 0x7, 0x1}]}}]}, 0x60}}, 0x0) 1.774909345s ago: executing program 2 (id=639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r2, 0x8995, &(0x7f00000002c0)="4be255f03a") r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x25, 0xa, @void}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) 1.773975705s ago: executing program 4 (id=640): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000380)={0x0, 0x2710}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) 1.71366884s ago: executing program 2 (id=641): semget$private(0x0, 0x207, 0x480) semtimedop(0x0, &(0x7f00000002c0)=[{}, {0x0, 0xff78}], 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x16, 0x0, 0x8001, &(0x7f00000001c0)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000340)={0x0, 0xfffffffd, 0x0, 0x14, 0x0, 0xf6}) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x7}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-010d \x00'}, 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) epoll_create(0x0) socketpair(0x0, 0x1, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x80000000) shutdown(r2, 0x0) 1.687533722s ago: executing program 0 (id=642): io_uring_setup(0x30d3, &(0x7f00000000c0)) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000001c0), 0xc) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) sendmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000004f00)=ANY=[@ANYBLOB="04e56c19b747db36c55a347399b996c95dd6490820beac3971579ad5150691eeb395e021902c81b5be1f0e7ae36225c7f4b5f185e90cf40497ba1d63ea469131d455fb5cb2cf2a1648d704230d4d89dbf285da629c37fd7d8aa99c0416deba28dfeded3c6cd6bd9d01902a6b4aeea701b8f799a2cb538a2c2bb1e708f9cee2ab0834d55632e6159abea8bee1fcda394add41fb2e7f4f88fdde8c889cc63ef4b740141732731a47a1c00f"], 0x4a0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003300)="4ae88587ea8cb33feedb7d2446797886995c67e27bcbce74305a0c68827a18ed0be48c106ca6850204eb36fd35dedc9ac60f8156f21e1c", 0x37}], 0x1, 0x0, 0x130}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x418}}], 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xe5, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x7c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x2, 0xfffff0d3, 0x12, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x8000, 0x1, 0x81}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840), &(0x7f0000000880)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000900)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x80) write$binfmt_aout(r3, &(0x7f00000030c0)=ANY=[@ANYRES64, @ANYRES16], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r10 = syz_open_pts(r3, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "e85e52f25c40d7cb"}) r11 = dup3(r10, r3, 0x0) read$watch_queue(r11, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$TIOCSTI(r11, 0x5412, 0x0) 1.165643494s ago: executing program 3 (id=643): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x20000005) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 936.587644ms ago: executing program 1 (id=644): perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x0, 0x8) r4 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x201cc42, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nocompress}, {@unhide}]}, 0x1, 0xab0, &(0x7f00000017c0)="$eJzs3d1vZOddB/DvmbW9thul23RJQ5RmJ4k2ddPF8QvZaJULurHHjotfkO2VEgnUrboOWsUiqAGpiZCyEYgrIiqEkAAJoVxyFalc0BuUO7jkigskiPgHUMXVFgGDzpmxPWPPeHa9s/amfD7W+Lz9nrdzzpzHM545T/giazab1eOEyzf+5jQry6Pn9cXPP/n04/Lx0Z2M5VxeKf4uGU9ST0b+pzpXRhcWNzfWBmT0TnIzyWdJkeR8WtM+JrqWbqb44zx2sPxZir/MUz2Sjd9n4xioyf9rZ33+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI2lhcWZmtsjqyvqNN+v9VUOAH7N9L7ufVKN+Fz8ZVGyRFOUj4+N7Q30/dfFg85Plr+fzTGvpmdbI3+P54EtPXnjtqyO1vfTHVOhUvPf+B+98b3d35wft5fP1+ujAROcferXu39jJki031le2NlbWri836itbG/VrV6/OvPzG0lZ9aSWNrbe2thtr9YXNxvXtjc361MI367PXrs3XG9NvbdxYX16cXm3srXz1l+ZmZq7WvzP9a43rm1sb6y9/Z3pr4Y2V1dWV9eUqptxcxrxanoi/urJd325cX6vX3769uzPft3bVKPatoNmeAcXBbBk0N6i5czNzc7OzcxO5+sq1V16dmRlpr5ib3Vsxc0iORJz9Scuw/dU9R/7t0K/f8ABq7f4/q1nJem7kzdR7/ixkMZvZyFqPbcVBfnv9/+WXG8eW29n/7/XyTx1sfjpV//9sa+nZfv1/n7oO/mk2WzmfNP1+y++8nw/yTr6X3exmJz940Byb53KoZj87HPPfzWbzBDnXyzwvde6DB259PctpZD0r2cpGVrKW61nO7/97qwUbqedaruZqZvLdvJGlbKWepaxkNY1s5a1sZTuN6oxayGYa9WQ7G9lMPVNZyDdTz2yuZSLzqaeR6byVjdzIepazmOtVLm/ndrXf54+p437Q7L0EzR0TdKQzf7D+v/ko/iXIiQ3+078yrEs3PLBmu/8f6xvQ3JubWji1WgEAAADD9Iv/mMcvPvEP/5qM5uvV+/JLK6uNmbOuFgAAADBE1cf1nikno80kX0/R4/V/7YwqBwAAAAxFUX3HrkgymUutudY3oc7FhwAAAADg50T1//9ny8lkOXcpxf6dUG72iAQAAAC+gAbeY7/9sv/OMRHjad/Tsn6rNb3Vjmjf53dyaWW1Mb2wsfrabF6s7jJQfdPgSG7nkmK0+vrBS3muFfXcZGs62Z3jeBk1O/3abF7K8+2GTL1QTl6Y6hE514r8RivyG8dEzpeR9+DOg+95ADg7zx/tj3/W7LrH/uC/EF7KlVbEladHxpKMPN2jZ5056FlHzqKhAMC+wWPsdEd82E7X2f//cvn6v7tT7+r/n8jb/1uu3Ml0vp93s5tbuVJ926D6xEFXub/+o/Z7BvsfQ5jJlQHvBuzF/tOrtVwZ8H7AZMdAL1cGvCPQis1vJPMP8QgAwOl7vk8/3K//ryKy93HAVv9/peP1f46+/t8fWmjHVwoB4JGwP4L9UGea5zrXnHUbAYBuemkAAAAAAAAAAAAAAAAAAAAAAAAAAAAYvqHe9n/8hMn/rT2uX2tNc/jjEfSemWjvg701H97X3vjovfc/+JMknZtqZSMeTp2rmg4359oQ8mkmOa3j9SAzI0nuPVUuJCfeq+m1aSzJQ2/pxBCK2H86tJ4bteMuHjeO3QoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXQJGc67W+lpxPMpPk5dOv1cNz56wrcPp+pXOhuJu7+WEeP7vqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8fGrf/7+W1vRLrVUZqSWXk9xM0jzrOg7T3bOuwJBMnDBdx/3/y2OeZpGR1mFPMbqwuLmxVh7+auyH2ueffPrx17qTn7/XcqrA2qHBJdolHI7968f25r5SpZpc3Hnvnd9597fri6+nlrG8vr20uri2vPntgyRPFj9O6mk99pT1LR+/d/nvf9Sj5T8uW9rb4XKXqp2zeLTcr/VK3a/cWr/i9t3e3Zkro7Ybb27/7m/d/mHHpifyXPLCVDLVXdJvlo/eLcxzGT2ybuxgtvhp8YfF4/mz3KyOf7k3imZRHqIvV9WdePv27s7099/dvdWnThdyKcmtZDzt9H3rtL+rL1XXk56qs642WpY6UwWVvy4OaGNv+2Nc3NrLcbZPG75SnTKT7TaMdbWh1qfMev82VDu8Y7/vH/OiI0mrRvPtGo2lu0ZfzYs9jnTzfNJ/L7zY40gPVPy0+Jfijfxz/qBj/I9aefwvN/s/O7uzuJzuM6VvZK0VWbV8rnPDdw9H/sef31Ptew5Tw/36o9aJ31bruP63j9XJrkfjh8tpFr2vR20dJc73KbH38+LQ1eHwWdH/mlv1SBcPpWhfffomatXzYiuqTz1/Id9KRp5O147trueR3vpb/a8o3em/fWh988NqctLn/18UU/nP3DH+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OgrknO91teSy0ku7C3Xk+Z9ZHu+34baZHG/VRyqO/u/vuAuVr9rXes+GpysuJu7zQ8fVqUAAAAAAAAAOG2vL37+yacfl4/q//Hn7jab7f/v15ORJBeKP53I4ubG2oCMRpObST4r58f7Bf1Xs6V7bZkujx0sf5Y0v3zyJgEAA/xfAAAA//8bQnEU") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x1000) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x20, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="0e6466646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',version=9p2000.L,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,cachetag=GPL\x00,cache=fscache,noextend,cache=none,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',mmap,fsmagic=0x0000000000003418,\x00']) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x5) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="f953cca1ab2ebdd2e7e429522c1800000000400000000000000000000061198000000000009564000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) socket(0x10, 0x803, 0x0) r8 = socket(0x23, 0x6, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004a00000000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000001"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 853.70961ms ago: executing program 4 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x81f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00') getdents(r2, &(0x7f0000000080)=""/61, 0x3d) getdents64(r2, 0xffffffffffffffff, 0x43) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)={@val={0x0, 0x800}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}, 0xfdef) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001600)={0x28, r1, 0x32b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x6a}}}}}, 0x28}}, 0x0) 833.737032ms ago: executing program 2 (id=646): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffd88) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket(0x10, 0x3, 0x0) 833.245162ms ago: executing program 0 (id=647): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x335, &(0x7f0000000480)="$eJzs3c9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge99CAevQnd/Qe87G33spe9eVnYw8oiO0smMzr5qTuaja7fD8i8k+d9Ju9LYnjekJk5/v7vXyolWy8ZDYkmlURERE5EshIVX8TbRt12QoJ25dOpZw8/XF5d+yZfKMwvKbWQX/k8p5TKzPz/6+8pr9vhpBxlfzx+mnty9O7R+8cvV34u26psq2qtoQy1XnvcMNYtU22W7Yqu1KJlGrapylXbrLfjtXa8ZNW2tprKqG5Op7fqpm0ro9pUFbOpGjXVqDeV8ZNRripd19V0WkQmpVui55G7rLi3tGTkQyZvXPNgENYLx3GGhJ1I3oiJSKonUtwb6bgAAMCN1FX/x9ySPlT9Lxm3/m91Pq//9z+635j67iDj1f+HiX71/xeP2sfqqP+TInLl+j8o2Wf2vRXRrbfzOp2vVP/jZpjpXdNGOvai9byR9v5/XX/+sD/rNqj/AQAAAAAAAAAAAAAAAAAAAAC4DU4cR3McR/O33t9n5z3aj41zjBidAa+/NumdMeXvj3ucGI3l1TVJuifuxTMi1l/bxe1ie+vF/Y6zosmp+37wtNr+mUeqJSv3rB0vf2e7GHMj+ZKUxRJT5kSTbHe+4yx8XZifU21e/tmJeulgfk40ead/fq4z33v+hHzycSBfF00ebEhNLNlsva9PnbP8P+aU+urbQld+yu0HAAAAAMDbQFeqtQweuH7XdeXrirfzz9bXnd8PiATW57N91+dx7YP4eOcOAAAAAMBdYTd/qxiWZdaHNFJycZ/wjXi49IlhfWKBGXaEZHfglBPeFYJHN9MhDf+HFJVEIJSUf71f4fRmxS48sj//0Yw5KmGyZsTxbslylWf3vzYa1EcWR/16xQeE3vvnv+fhjhzxrtobDH15kLxgpiNrTFzqw8OJXcMnEAAAAIA3xS/6U7a7G7lkWr+b6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJCGXAYsfl2XExv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb4lUAAAD//2sRAKU=") open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0xad5be95a7dbb34d4, &(0x7f0000000040)=0x1, 0x4) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4600030007"], 0xd) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000019000100000000000000000080200000000400050000000008000300", @ANYRES32=r7], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r8, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) 741.59097ms ago: executing program 4 (id=648): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x2, 0xbf25, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)='`', &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r1}, 0x38) ftruncate(r0, 0x8208204) open(&(0x7f0000000780)='./bus\x00', 0x14997e, 0x0) io_setup(0x6, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf80", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xaa\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 442.454964ms ago: executing program 0 (id=649): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x0, @v={0x3, 0x3, 0x3, 0x6, 0x2, 0x4, 0x6b, {0x7f, 0x6, "beacfe46fd18176d"}, 0x6, 0x80, 0x1f, 0x1f, 0x1, "ad"}}, 0x1a) 307.715935ms ago: executing program 3 (id=650): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x6000000}}, 0x1c) 258.972599ms ago: executing program 3 (id=651): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0xfffffffffffffffe) r6 = dup2(r3, r2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x10, 0x13d5, 0x40, @mcast1, @private0, 0x7800, 0x20, 0x5, 0x568f}}) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=@deltfilter={0x5c4, 0x2d, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {0x19, 0xd}, {0x3, 0xa}}, [@f_rsvp6={{0xa}, {0x100, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x4, 0x4}, {0x4, 0x7, 0x8}, 0x21, 0x7, 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xe, 0x4, 0x1}, {0x5, 0xa066, 0x94cf}, 0x88, 0x7, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xd}}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_ACT={0x98, 0x6, [@m_skbmod={0x94, 0x2, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x52, 0x6, "ef37d3db673a3338f179964ac455921ff2a7d8324d6c06a344f51bee159953f027366b4476a326425ede645d831cedc4028b49bcb059fd0422d9d55eb9d5c9ad1565811b6b67511e2a1751ed0e50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @f_tcindex={{0xc}, {0x488, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x7775}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x4, 0xfff1}}, @TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_POLICE={0x464, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x0, 0x3, 0x665, 0xe325, {0x5, 0x2, 0x5, 0x1ff, 0x90, 0x6}, {0x5, 0x1, 0x8000, 0x2f33, 0xa2dd, 0x6}, 0x2, 0xfffff55e, 0x69}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40400000, 0x1, 0x793, 0x6, 0x7f, 0x3, 0xffffffff, 0x7, 0x400, 0x5, 0x3ef8, 0x3, 0x6, 0x7fff, 0x7ff, 0x9, 0x2, 0x1, 0x7, 0x1, 0x7ff, 0x7, 0x9dd, 0x1, 0x10000000, 0xfffffff3, 0x8, 0x1, 0x3, 0x8f, 0x8, 0x4, 0x1, 0xc, 0x1, 0xcd3a, 0x5, 0x2, 0x2, 0x401, 0x7, 0x5, 0x0, 0x100, 0x60, 0xb, 0x400, 0x2, 0xe90, 0x8, 0x0, 0x3ff, 0x8, 0x80, 0x0, 0x0, 0x9, 0x0, 0x2, 0x2917a981, 0xd, 0x9, 0x4, 0x40, 0x2, 0xffff, 0x101, 0x3f05, 0x4, 0x9, 0x5, 0x0, 0xa, 0x6, 0x6, 0x7, 0x53, 0x101, 0x7de, 0x80, 0x6, 0x81, 0x5, 0x7f, 0xe, 0x5, 0x6, 0x0, 0x0, 0xa, 0xf, 0x1ffc0000, 0x4, 0x7ff, 0x6, 0x5, 0x9, 0x7a, 0x2400000, 0x7ff, 0x0, 0x9, 0x7fff, 0x8, 0x0, 0x2, 0xb4d, 0x200, 0x7, 0x4, 0x6, 0xffff4ef4, 0x3, 0x9, 0xc7b1, 0xfdf, 0x80000001, 0x10001, 0x6, 0x5, 0xffff, 0x4, 0x0, 0xc, 0x4, 0xfffffff8, 0x7, 0xd6, 0xa00, 0x40, 0x3, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x0, 0xcd, 0x8, 0x36, 0x5, 0x2, 0x3, 0x7, 0x6, 0x7, 0x1, 0x8, 0x1, 0x11b, 0x9, 0x1, 0x24, 0x1, 0x0, 0xa9, 0x2, 0x3, 0x401, 0x1, 0x6, 0x9, 0x9b, 0x400, 0x7, 0x4, 0x4, 0x2b0, 0x8, 0x6, 0x9, 0xf2, 0x1, 0xfffffc01, 0xada, 0x0, 0x6, 0x40, 0x4, 0x6, 0x80000000, 0x7, 0xeed, 0x1, 0xc, 0x7, 0x7fffffff, 0x0, 0x822, 0x9e14, 0x6, 0x4c697127, 0x3, 0x10001, 0x4, 0x8, 0xfffffffe, 0x3ff, 0x0, 0x8, 0x2, 0x4, 0x6, 0x2, 0x6, 0x6, 0x1ff, 0x1, 0x6, 0x7fffffff, 0x319659d8, 0x4, 0x6, 0xf7d2, 0x0, 0x7f, 0x8, 0x3, 0x5, 0x9, 0x6, 0x8, 0x2, 0x8, 0x98, 0xffffff11, 0xfffffffc, 0x2, 0x2000, 0x40, 0x8, 0x0, 0x4, 0x3, 0x3, 0x7, 0x4, 0xdcd, 0x6, 0x7fffffff, 0xab, 0x2d, 0x10, 0x3, 0x6, 0x2, 0x8, 0x2, 0x8, 0x7ff, 0x1, 0x3, 0xb1, 0x1, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xad71}]}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x40041}, 0xc000) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000009c0)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000020000008100000008004d00001c000000000033907800000000ccf19929ffffffff00000000"], 0x0) shutdown(0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x0, 0x20}, &(0x7f0000000480)=0x18) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) unshare(0x40000) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f030e02f00712002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r10, 0x4, 0x0, 0x6, @multicast}, 0x14) 258.546349ms ago: executing program 3 (id=652): r0 = io_uring_setup(0x1895, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3ff, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x4000010, r1, 0x1c3da000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001c00000bea8bc10003000000010000000000000f0100000000200000000000000f03000000eb8730006100"], 0x0, 0x37, 0x0, 0xa}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 85.593413ms ago: executing program 3 (id=653): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1ab900, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000062923a2e30e0b6780a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c0002800800018000000000080001400000000009000100735f0f30000000000900020073797a3200000000140000001100010000000000000000001000000a"], 0x88}}, 0x0) r3 = dup2(r1, r0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000148476921870d9e8fd0000008500000083000000bf0900f6ffffffff54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0xb0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8, &(0x7f0000000740)="31a3ead8eb083dc749e7fa1ccbcee4eff208f4d75b6005e21f07449ae41cf690f9efc851ead646e2ca30b0ee37732b163e18285474cc1bf6e60b456885cb28c3c866a0217717b86414794a48a97d22a1e188d93340b6289a8c284caedfded9582faa149b4f6ea0293452df51d6e3c4ab62fb256ac2045bc3e6600c5720f137b386c3e86316b0d672ba210c3d0a0c13b956e362ce922a14bc2329ce5ec0fbbd9106039290a2c2a8ada3fd0b42aa94376beae346c63fef3a107152f1ef76602a6e23fb4013ba8c45b3f538dd17f1c0a39f27fafe88") r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x0, &(0x7f0000000180)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_submit(r7, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000100)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@block_validity}]}, 0x3, 0x43e, &(0x7f0000000780)="$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") 44.749807ms ago: executing program 1 (id=654): mount$bpf(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x58ca02a0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9009201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x20004054) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20020044}, 0x4040015) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103002000000000000001"], 0x5c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4004815) r5 = syz_io_uring_setup(0x2cd7, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) setgroups(0x0, 0x0) write$binfmt_script(r8, &(0x7f00000000c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r8, 0x0) io_uring_enter(r5, 0x5b43, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x44, 0x4, 0x440, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x1d0, 0x0, {0x0, 0x11}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_etc_t:s0\x00'}}}, {{@ipv6={@private2, @private2, [], [], 'hsr0\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) kernel console output (not intermixed with test programs): p0: detected capacity change from 0 to 512 [ 37.021356][ T3992] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.030485][ T3992] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 37.039564][ T3992] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 37.047786][ T3992] System zones: 0-2, 18-18, 34-34 [ 37.055369][ T3992] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 37.070511][ T3992] EXT4-fs (loop0): 1 truncate cleaned up [ 37.077399][ T3992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.217745][ T3997] loop3: detected capacity change from 0 to 512 [ 37.246646][ T3997] EXT4-fs: Ignoring removed i_version option [ 37.252682][ T3997] EXT4-fs: Ignoring removed nobh option [ 37.262455][ T3997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.272338][ T3997] EXT4-fs (loop3): inodes count not valid: 15 vs 32 [ 37.417680][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.436472][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 37.436486][ T29] audit: type=1400 audit(1721860602.307:430): avc: denied { create } for pid=4005 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.532856][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.541083][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.548907][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.621120][ T4014] infiniband syz2: set active [ 37.625849][ T4014] infiniband syz2: added ip6gretap0 [ 37.633219][ T9] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.646220][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.733969][ T4014] RDS/IB: syz2: added [ 37.738079][ T4014] smc: adding ib device syz2 with port count 1 [ 37.744399][ T4014] smc: ib device syz2 port 1 has pnetid [ 37.752363][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.786626][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.795045][ T4022] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 3: comm syz.0.199: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 37.818451][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.829517][ T9] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.876656][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.891721][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.929091][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.942352][ T4028] loop4: detected capacity change from 0 to 512 [ 37.952017][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.961950][ T3998] chnl_net:caif_netlink_parms(): no params data found [ 37.972458][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.985736][ T4014] ip6gretap0 speed is unknown, defaulting to 1000 [ 37.986330][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.014232][ T4028] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.080545][ T4033] hub 9-0:1.0: USB hub found [ 38.100832][ T4033] hub 9-0:1.0: 8 ports detected [ 38.116723][ T3081] printk: udevd: 6 output lines suppressed due to ratelimiting [ 38.131910][ T40] bridge_slave_1: left allmulticast mode [ 38.137659][ T40] bridge_slave_1: left promiscuous mode [ 38.143402][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.159512][ T4040] hub 9-0:1.0: USB hub found [ 38.165106][ T4040] hub 9-0:1.0: 8 ports detected [ 38.170582][ T40] bridge_slave_0: left allmulticast mode [ 38.176385][ T40] bridge_slave_0: left promiscuous mode [ 38.182038][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.273555][ T4045] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.206: Directory hole found for htree leaf block 0 [ 38.296734][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.307432][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.317952][ T40] bond0 (unregistering): Released all slaves [ 38.338517][ T4040] dummy0: entered promiscuous mode [ 38.340926][ T4041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.366753][ T3998] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.374178][ T3998] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.395016][ T3998] bridge_slave_0: entered allmulticast mode [ 38.401649][ T3998] bridge_slave_0: entered promiscuous mode [ 38.425159][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.432246][ T3998] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.435329][ T4051] loop3: detected capacity change from 0 to 1024 [ 38.447187][ T4051] EXT4-fs: Ignoring removed oldalloc option [ 38.455876][ T3998] bridge_slave_1: entered allmulticast mode [ 38.457524][ T4051] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 38.462681][ T3998] bridge_slave_1: entered promiscuous mode [ 38.490100][ T4051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.534502][ T3998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.547874][ T40] hsr_slave_0: left promiscuous mode [ 38.566893][ T40] hsr_slave_1: left promiscuous mode [ 38.577772][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.585357][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.594559][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.601962][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.609258][ T4051] loop3: detected capacity change from 1024 to 64 [ 38.618728][ T29] audit: type=1400 audit(1721860603.497:431): avc: denied { read write } for pid=4050 comm="syz.3.210" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.641291][ T29] audit: type=1400 audit(1721860603.497:432): avc: denied { open } for pid=4050 comm="syz.3.210" path="/52/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.676146][ T40] veth1_macvtap: left promiscuous mode [ 38.681638][ T40] veth0_macvtap: left promiscuous mode [ 38.687201][ T40] veth1_vlan: left promiscuous mode [ 38.692423][ T40] veth0_vlan: left promiscuous mode [ 38.701163][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.701163][ T29] audit: type=1400 audit(1721860603.577:433): avc: denied { rmdir } for pid=3091 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.714681][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.781353][ C1] eth0: bad gso: type: 1, size: 1408 [ 38.789112][ T3613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.802237][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.843267][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.862296][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.883653][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.897520][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.923352][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.937137][ T40] team0 (unregistering): Port device team_slave_1 removed [ 38.938534][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.957947][ T3091] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 38.958335][ T40] team0 (unregistering): Port device team_slave_0 removed [ 39.007602][ T3998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.055654][ T4074] hub 9-0:1.0: USB hub found [ 39.062153][ T4074] hub 9-0:1.0: 8 ports detected [ 39.068469][ T3998] team0: Port device team_slave_0 added [ 39.083180][ T4077] loop2: detected capacity change from 0 to 1024 [ 39.083466][ T3998] team0: Port device team_slave_1 added [ 39.111854][ T3998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.118866][ T3998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.145089][ T3998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.156407][ T4083] FAULT_INJECTION: forcing a failure. [ 39.156407][ T4083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.157480][ T3998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.169634][ T4083] CPU: 0 UID: 0 PID: 4083 Comm: syz.0.221 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 39.176469][ T3998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.186659][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 39.186671][ T4083] Call Trace: [ 39.186676][ T4083] [ 39.186682][ T4083] dump_stack_lvl+0xf2/0x150 [ 39.186704][ T4083] dump_stack+0x15/0x20 [ 39.186719][ T4083] should_fail_ex+0x229/0x230 [ 39.186751][ T4083] should_fail+0xb/0x10 [ 39.186774][ T4083] should_fail_usercopy+0x1a/0x20 [ 39.212630][ T3998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.222638][ T4083] _copy_from_iter+0xd3/0xb00 [ 39.237316][ T4077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.237624][ T4083] ? rep_movs_alternative+0x4a/0x70 [ 39.243096][ T4077] FAULT_INJECTION: forcing a failure. [ 39.243096][ T4077] name failslab, interval 1, probability 0, space 0, times 0 [ 39.246405][ T4083] ? _copy_from_iter+0x161/0xb00 [ 39.301512][ T4083] copy_page_from_iter+0x14f/0x280 [ 39.306654][ T4083] skb_copy_datagram_from_iter+0x203/0x440 [ 39.312462][ T4083] tun_get_user+0xb90/0x24b0 [ 39.317050][ T4083] ? kstrtoull+0x110/0x140 [ 39.321489][ T4083] ? ref_tracker_alloc+0x1f5/0x2f0 [ 39.326662][ T4083] ? selinux_file_permission+0x22c/0x360 [ 39.332295][ T4083] tun_chr_write_iter+0x18e/0x240 [ 39.337444][ T4083] vfs_write+0x78f/0x900 [ 39.341684][ T4083] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 39.347223][ T4083] ksys_write+0xeb/0x1b0 [ 39.351670][ T4083] __x64_sys_write+0x42/0x50 [ 39.356313][ T4083] x64_sys_call+0x2a40/0x2e00 [ 39.361104][ T4083] do_syscall_64+0xc9/0x1c0 [ 39.365624][ T4083] ? clear_bhb_loop+0x55/0xb0 [ 39.370291][ T4083] ? clear_bhb_loop+0x55/0xb0 [ 39.374955][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.380985][ T4083] RIP: 0033:0x7f396bce4a9f [ 39.385386][ T4083] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 39.405056][ T4083] RSP: 002b:00007f396a967010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 39.413503][ T4083] RAX: ffffffffffffffda RBX: 00007f396be75f60 RCX: 00007f396bce4a9f [ 39.421499][ T4083] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 00000000000000c8 [ 39.429454][ T4083] RBP: 00007f396a9670a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.437427][ T4083] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 39.445383][ T4083] R13: 000000000000000b R14: 00007f396be75f60 R15: 00007ffc7e3be358 [ 39.453377][ T4083] [ 39.456404][ T4077] CPU: 1 UID: 0 PID: 4077 Comm: syz.2.219 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 39.466827][ T4077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 39.476877][ T4077] Call Trace: [ 39.480143][ T4077] [ 39.483059][ T4077] dump_stack_lvl+0xf2/0x150 [ 39.487643][ T4077] dump_stack+0x15/0x20 [ 39.491786][ T4077] should_fail_ex+0x229/0x230 [ 39.496568][ T4077] ? security_file_alloc+0x32/0xe0 [ 39.501672][ T4077] should_failslab+0x8f/0xb0 [ 39.506466][ T4077] kmem_cache_alloc_noprof+0x4c/0x290 [ 39.511829][ T4077] security_file_alloc+0x32/0xe0 [ 39.516898][ T4077] alloc_empty_file+0x121/0x310 [ 39.521756][ T4077] path_openat+0x6a/0x1f10 [ 39.526181][ T4077] ? _parse_integer_limit+0x167/0x180 [ 39.531562][ T4077] ? _parse_integer+0x27/0x30 [ 39.536295][ T4077] ? kstrtoull+0x110/0x140 [ 39.540697][ T4077] ? kstrtouint+0x77/0xc0 [ 39.545017][ T4077] do_filp_open+0xf7/0x200 [ 39.549475][ T4077] do_sys_openat2+0xab/0x120 [ 39.554063][ T4077] __x64_sys_open+0xe6/0x110 [ 39.558658][ T4077] x64_sys_call+0x13dd/0x2e00 [ 39.563419][ T4077] do_syscall_64+0xc9/0x1c0 [ 39.567994][ T4077] ? clear_bhb_loop+0x55/0xb0 [ 39.572748][ T4077] ? clear_bhb_loop+0x55/0xb0 [ 39.577410][ T4077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.583361][ T4077] RIP: 0033:0x7f2164c55f19 [ 39.587920][ T4077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.607552][ T4077] RSP: 002b:00007f21638d7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 39.615953][ T4077] RAX: ffffffffffffffda RBX: 00007f2164de5f60 RCX: 00007f2164c55f19 [ 39.623921][ T4077] RDX: 0000000000000000 RSI: 0000000000143142 RDI: 0000000020000340 [ 39.631957][ T4077] RBP: 00007f21638d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.639920][ T4077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.647970][ T4077] R13: 000000000000000b R14: 00007f2164de5f60 R15: 00007ffdd9427088 [ 39.655937][ T4077] [ 39.672270][ T3998] hsr_slave_0: entered promiscuous mode [ 39.678987][ T3998] hsr_slave_1: entered promiscuous mode [ 39.698870][ T29] audit: type=1400 audit(1721860604.577:434): avc: denied { audit_write } for pid=4089 comm="syz.0.223" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.744738][ T3091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.763093][ T4054] kmmpd-loop3: attempt to access beyond end of device [ 39.763093][ T4054] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 39.776651][ T4054] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 39.796326][ T4093] loop0: detected capacity change from 0 to 2048 [ 39.803160][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.813867][ T29] audit: type=1400 audit(1721860604.697:435): avc: denied { wake_alarm } for pid=4086 comm="syz.4.222" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.861332][ T4093] loop0: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 39.861977][ T4093] loop0: p3 start 4259840 is beyond EOD, [ 39.942677][ T4097] ip6gretap0 speed is unknown, defaulting to 1000 [ 39.953339][ T4093] truncated [ 40.025514][ T4109] loop2: detected capacity change from 0 to 128 [ 40.082553][ T29] audit: type=1400 audit(1721860604.907:436): avc: denied { append } for pid=4106 comm="syz.2.227" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 40.105698][ T29] audit: type=1400 audit(1721860604.907:437): avc: denied { write } for pid=4106 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 40.161593][ T4097] chnl_net:caif_netlink_parms(): no params data found [ 40.195499][ T4126] loop4: detected capacity change from 0 to 128 [ 40.207454][ T29] audit: type=1400 audit(1721860605.087:438): avc: denied { ioctl } for pid=4124 comm="syz.4.231" path="socket:[7365]" dev="sockfs" ino=7365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.234374][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.269985][ T4133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 40.300351][ T4137] loop4: detected capacity change from 0 to 2048 [ 40.300882][ T29] audit: type=1400 audit(1721860605.177:439): avc: denied { view } for pid=4132 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 40.328847][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.339718][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.346851][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.354483][ T4137] loop4: p1 < > p4 [ 40.354741][ T4097] bridge_slave_0: entered allmulticast mode [ 40.359018][ T4137] loop4: p4 size 8388608 extends beyond EOD, truncated [ 40.364828][ T4097] bridge_slave_0: entered promiscuous mode [ 40.380098][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.387248][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.395865][ T4097] bridge_slave_1: entered allmulticast mode [ 40.398695][ T4141] loop4: detected capacity change from 0 to 1024 [ 40.402320][ T4097] bridge_slave_1: entered promiscuous mode [ 40.410381][ T4141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.436601][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.449247][ T4097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.466439][ T4097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.477675][ T3613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.482507][ T3998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.498388][ T3998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.525091][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.548689][ T3998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.558236][ T4097] team0: Port device team_slave_0 added [ 40.566418][ T4097] team0: Port device team_slave_1 added [ 40.572391][ T3998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.599856][ T4097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.606849][ T4097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.632830][ T4097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.654540][ T4097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.661487][ T4097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.687509][ T4097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.715496][ T4165] FAULT_INJECTION: forcing a failure. [ 40.715496][ T4165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.728597][ T4165] CPU: 0 UID: 0 PID: 4165 Comm: syz.4.241 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 40.738923][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 40.749061][ T4165] Call Trace: [ 40.752343][ T4165] [ 40.755338][ T4165] dump_stack_lvl+0xf2/0x150 [ 40.759957][ T4165] dump_stack+0x15/0x20 [ 40.764105][ T4165] should_fail_ex+0x229/0x230 [ 40.768853][ T4165] should_fail+0xb/0x10 [ 40.773033][ T4165] should_fail_usercopy+0x1a/0x20 [ 40.778068][ T4165] _copy_from_iter+0xd3/0xb00 [ 40.782756][ T4165] ? kmalloc_reserve+0x16e/0x190 [ 40.787698][ T4165] ? __build_skb_around+0x196/0x1f0 [ 40.792905][ T4165] ? __alloc_skb+0x21f/0x310 [ 40.797503][ T4165] ? __virt_addr_valid+0x1ed/0x250 [ 40.802689][ T4165] ? __check_object_size+0x35b/0x510 [ 40.808058][ T4165] netlink_sendmsg+0x460/0x6e0 [ 40.812841][ T4165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.818125][ T4165] __sock_sendmsg+0x140/0x180 [ 40.822898][ T4165] sock_write_iter+0x164/0x1b0 [ 40.827679][ T4165] do_iter_readv_writev+0x3b0/0x470 [ 40.832961][ T4165] vfs_writev+0x2e0/0x880 [ 40.837373][ T4165] do_writev+0xf8/0x220 [ 40.841526][ T4165] __x64_sys_writev+0x45/0x50 [ 40.846213][ T4165] x64_sys_call+0x1d63/0x2e00 [ 40.850949][ T4165] do_syscall_64+0xc9/0x1c0 [ 40.855478][ T4165] ? clear_bhb_loop+0x55/0xb0 [ 40.860153][ T4165] ? clear_bhb_loop+0x55/0xb0 [ 40.864854][ T4165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.870871][ T4165] RIP: 0033:0x7fe626bb5f19 [ 40.875276][ T4165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.894914][ T4165] RSP: 002b:00007fe625837048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 40.903327][ T4165] RAX: ffffffffffffffda RBX: 00007fe626d45f60 RCX: 00007fe626bb5f19 [ 40.911290][ T4165] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 40.919255][ T4165] RBP: 00007fe6258370a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.927229][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.935237][ T4165] R13: 000000000000000b R14: 00007fe626d45f60 R15: 00007fffb5291568 [ 40.943238][ T4165] [ 40.970724][ T40] bridge_slave_1: left allmulticast mode [ 40.976452][ T40] bridge_slave_1: left promiscuous mode [ 40.982171][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.983879][ T4172] loop4: detected capacity change from 0 to 2048 [ 40.998648][ T40] bridge_slave_0: left allmulticast mode [ 41.004514][ T40] bridge_slave_0: left promiscuous mode [ 41.010339][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.025271][ T40] infiniband syz2: set down [ 41.034762][ T4172] loop4: p1 < > p4 [ 41.038930][ T4172] loop4: p4 size 8388608 extends beyond EOD, truncated [ 41.052507][ T50] smc: removing ib device syz2 [ 41.067396][ T4175] loop2: detected capacity change from 0 to 1764 [ 41.076505][ T4175] ISOFS: Unable to identify CD-ROM format. [ 41.136460][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.146900][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.155667][ T4181] loop4: detected capacity change from 0 to 2048 [ 41.163218][ T40] bond0 (unregistering): Released all slaves [ 41.181614][ T4097] hsr_slave_0: entered promiscuous mode [ 41.187827][ T4097] hsr_slave_1: entered promiscuous mode [ 41.193995][ T4097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.201570][ T4097] Cannot create hsr debugfs directory [ 41.209511][ T3162] ip6gretap0 speed is unknown, defaulting to 1000 [ 41.213424][ T4181] loop4: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 41.216036][ T9] infiniband syz2: ib_query_port failed (-19) [ 41.310210][ T4181] loop4: p3 start 4259840 is beyond EOD, truncated [ 41.329408][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 41.428753][ T3998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.492520][ T3998] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.508580][ T2754] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.515675][ T2754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.530564][ T40] hsr_slave_0: left promiscuous mode [ 41.537972][ T40] hsr_slave_1: left promiscuous mode [ 41.558094][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.565625][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.575918][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.583335][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.594622][ T40] dummy0: left promiscuous mode [ 41.599564][ T40] macvlan0: left promiscuous mode [ 41.604738][ T40] veth1_macvtap: left promiscuous mode [ 41.610245][ T40] veth0_macvtap: left promiscuous mode [ 41.615759][ T40] veth1_vlan: left promiscuous mode [ 41.620997][ T40] veth0_vlan: left promiscuous mode [ 41.669839][ T4200] loop0: detected capacity change from 0 to 128 [ 41.715649][ T40] team0 (unregistering): Port device team_slave_1 removed [ 41.726689][ T40] team0 (unregistering): Port device team_slave_0 removed [ 41.760098][ T4209] loop2: detected capacity change from 0 to 128 [ 41.767866][ T4209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 41.793548][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.800689][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.819789][ T3998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.882403][ T3998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.914659][ T4225] loop0: detected capacity change from 0 to 1764 [ 41.922436][ T4225] ISOFS: Unable to identify CD-ROM format. [ 41.983486][ T3998] veth0_vlan: entered promiscuous mode [ 41.994402][ T3998] veth1_vlan: entered promiscuous mode [ 42.012048][ T3998] veth0_macvtap: entered promiscuous mode [ 42.026840][ T3998] veth1_macvtap: entered promiscuous mode [ 42.044384][ T3998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.054897][ T3998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.064905][ T3998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.075336][ T3998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.087440][ T3998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.093654][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 42.095698][ T3998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.114063][ T3998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.123880][ T3998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.134364][ T3998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.147579][ T3998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.170663][ T3998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.179632][ T3998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.188438][ T3998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.197226][ T3998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.218780][ T40] IPVS: stop unused estimator thread 0... [ 42.225952][ T3162] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.226788][ T4097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.242421][ T3162] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.261333][ T4097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.270678][ T4097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.279648][ T4097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.331087][ T4097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.337253][ T4259] dccp_close: ABORT with 68 bytes unread [ 42.346322][ T4097] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.357831][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.364912][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.376044][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.383173][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.451705][ T4097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.520856][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 42.520870][ T29] audit: type=1400 audit(1721860607.397:521): avc: denied { write } for pid=4280 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.550435][ T4097] veth0_vlan: entered promiscuous mode [ 42.559641][ T4097] veth1_vlan: entered promiscuous mode [ 42.575985][ T4097] veth0_macvtap: entered promiscuous mode [ 42.584435][ T4097] veth1_macvtap: entered promiscuous mode [ 42.603096][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.613744][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.623856][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.634396][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.644411][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.654919][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.667153][ T4097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.675616][ T29] audit: type=1400 audit(1721860607.547:522): avc: denied { connect } for pid=4290 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.695389][ T29] audit: type=1400 audit(1721860607.547:523): avc: denied { create } for pid=4290 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 42.716194][ T29] audit: type=1400 audit(1721860607.547:524): avc: denied { ioctl } for pid=4290 comm="syz.4.276" path="socket:[8069]" dev="sockfs" ino=8069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 42.741972][ T29] audit: type=1400 audit(1721860607.547:525): avc: denied { write } for pid=4290 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 42.762575][ T29] audit: type=1400 audit(1721860607.547:526): avc: denied { nlmsg_write } for pid=4290 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 42.790637][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.801280][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.811216][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.822000][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.832015][ T4097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.842489][ T4097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.854376][ T4097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.863326][ T4097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.872096][ T4097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.880893][ T4097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.889776][ T4097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.018674][ T4312] loop0: detected capacity change from 0 to 128 [ 43.040703][ T4314] FAULT_INJECTION: forcing a failure. [ 43.040703][ T4314] name failslab, interval 1, probability 0, space 0, times 0 [ 43.053529][ T4314] CPU: 0 UID: 0 PID: 4314 Comm: syz.1.283 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 43.055937][ T29] audit: type=1400 audit(1721860607.937:527): avc: denied { ioctl } for pid=4303 comm="syz.3.226" path="socket:[8489]" dev="sockfs" ino=8489 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.063763][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.098821][ T4314] Call Trace: [ 43.102096][ T4314] [ 43.105022][ T4314] dump_stack_lvl+0xf2/0x150 [ 43.109619][ T4314] dump_stack+0x15/0x20 [ 43.113843][ T4314] should_fail_ex+0x229/0x230 [ 43.118553][ T4314] ? __kvmalloc_node_noprof+0x72/0x170 [ 43.124018][ T4314] should_failslab+0x8f/0xb0 [ 43.128627][ T4314] __kmalloc_node_noprof+0xa8/0x380 [ 43.133922][ T4314] __kvmalloc_node_noprof+0x72/0x170 [ 43.139198][ T4314] seq_read_iter+0x14a/0x940 [ 43.143779][ T4314] ? __alloc_pages_noprof+0x194/0x360 [ 43.149143][ T4314] kernfs_fop_read_iter+0xc6/0x310 [ 43.154239][ T4314] ? should_failslab+0x8f/0xb0 [ 43.159082][ T4314] ? __kmalloc_noprof+0x165/0x370 [ 43.164147][ T4314] copy_splice_read+0x3a4/0x5d0 [ 43.169082][ T4314] ? __pfx_copy_splice_read+0x10/0x10 [ 43.174446][ T4314] splice_direct_to_actor+0x26c/0x670 [ 43.179821][ T4314] ? __pfx_direct_splice_actor+0x10/0x10 [ 43.185462][ T4314] do_splice_direct+0xd7/0x150 [ 43.190207][ T4314] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 43.196139][ T4314] do_sendfile+0x3ab/0x950 [ 43.200608][ T4314] __x64_sys_sendfile64+0x110/0x150 [ 43.205796][ T4314] x64_sys_call+0xfc3/0x2e00 [ 43.210370][ T4314] do_syscall_64+0xc9/0x1c0 [ 43.214953][ T4314] ? clear_bhb_loop+0x55/0xb0 [ 43.219610][ T4314] ? clear_bhb_loop+0x55/0xb0 [ 43.224276][ T4314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.230247][ T4314] RIP: 0033:0x7f8b4abe5f19 [ 43.234644][ T4314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.254509][ T4314] RSP: 002b:00007f8b49867048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 43.262900][ T4314] RAX: ffffffffffffffda RBX: 00007f8b4ad75f60 RCX: 00007f8b4abe5f19 [ 43.270851][ T4314] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 43.278804][ T4314] RBP: 00007f8b498670a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.286761][ T4314] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 43.294718][ T4314] R13: 000000000000000b R14: 00007f8b4ad75f60 R15: 00007ffd6697b458 [ 43.302715][ T4314] [ 43.370034][ T4329] loop1: detected capacity change from 0 to 1764 [ 43.374573][ T4320] FAULT_INJECTION: forcing a failure. [ 43.374573][ T4320] name failslab, interval 1, probability 0, space 0, times 0 [ 43.379181][ T4329] ISOFS: Unable to identify CD-ROM format. [ 43.388986][ T4320] CPU: 0 UID: 0 PID: 4320 Comm: syz.2.285 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 43.404998][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.415081][ T4320] Call Trace: [ 43.418345][ T4320] [ 43.421316][ T4320] dump_stack_lvl+0xf2/0x150 [ 43.425926][ T4320] dump_stack+0x15/0x20 [ 43.430122][ T4320] should_fail_ex+0x229/0x230 [ 43.434792][ T4320] ? alloc_async+0x2b/0x80 [ 43.439201][ T4320] should_failslab+0x8f/0xb0 [ 43.443790][ T4320] __kmalloc_cache_noprof+0x4b/0x2a0 [ 43.449084][ T4320] alloc_async+0x2b/0x80 [ 43.453453][ T4320] proc_do_submiturb+0x732/0x1dd0 [ 43.458539][ T4320] usbdev_ioctl+0x21b5/0x3e10 [ 43.463268][ T4320] ? do_vfs_ioctl+0x99e/0x1560 [ 43.468055][ T4320] ? selinux_file_ioctl+0x2f7/0x380 [ 43.473243][ T4320] ? __fget_files+0x1da/0x210 [ 43.477915][ T4320] ? __pfx_usbdev_ioctl+0x10/0x10 [ 43.482971][ T4320] __se_sys_ioctl+0xd3/0x150 [ 43.487579][ T4320] __x64_sys_ioctl+0x43/0x50 [ 43.492196][ T4320] x64_sys_call+0x1688/0x2e00 [ 43.496872][ T4320] do_syscall_64+0xc9/0x1c0 [ 43.501433][ T4320] ? clear_bhb_loop+0x55/0xb0 [ 43.506101][ T4320] ? clear_bhb_loop+0x55/0xb0 [ 43.510807][ T4320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.516699][ T4320] RIP: 0033:0x7f2164c55f19 [ 43.521101][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.540744][ T4320] RSP: 002b:00007f21638d7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.549155][ T4320] RAX: ffffffffffffffda RBX: 00007f2164de5f60 RCX: 00007f2164c55f19 [ 43.557116][ T4320] RDX: 0000000020000000 RSI: 00000000802c550a RDI: 0000000000000005 [ 43.565074][ T4320] RBP: 00007f21638d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 43.573035][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.581066][ T4320] R13: 000000000000000b R14: 00007f2164de5f60 R15: 00007ffdd9427088 [ 43.589026][ T4320] [ 43.602744][ T4332] dccp_close: ABORT with 68 bytes unread [ 43.623182][ T29] audit: type=1326 audit(1721860608.497:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.1.289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b4abe5f19 code=0x0 [ 43.716541][ T4340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64003 sclass=netlink_route_socket pid=4340 comm=syz.4.294 [ 43.750547][ T29] audit: type=1400 audit(1721860608.627:529): avc: denied { ioctl } for pid=4346 comm="syz.4.296" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.780964][ T4353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.298'. [ 43.792024][ T4354] loop0: detected capacity change from 0 to 128 [ 43.803936][ T4354] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.817668][ T4354] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.838639][ T4358] FAULT_INJECTION: forcing a failure. [ 43.838639][ T4358] name failslab, interval 1, probability 0, space 0, times 0 [ 43.851308][ T4358] CPU: 0 UID: 0 PID: 4358 Comm: syz.3.299 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 43.861568][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.871671][ T4358] Call Trace: [ 43.874945][ T4358] [ 43.877871][ T4358] dump_stack_lvl+0xf2/0x150 [ 43.882543][ T4358] dump_stack+0x15/0x20 [ 43.886713][ T4358] should_fail_ex+0x229/0x230 [ 43.891387][ T4358] ? pfkey_add+0xc4a/0x12f0 [ 43.895912][ T4358] should_failslab+0x8f/0xb0 [ 43.901370][ T4358] __kmalloc_cache_noprof+0x4b/0x2a0 [ 43.906705][ T4358] pfkey_add+0xc4a/0x12f0 [ 43.911068][ T4358] pfkey_sendmsg+0x6f9/0x970 [ 43.915663][ T4358] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 43.920769][ T4358] __sock_sendmsg+0x140/0x180 [ 43.925434][ T4358] ____sys_sendmsg+0x312/0x410 [ 43.930237][ T4358] __sys_sendmsg+0x1e9/0x280 [ 43.934830][ T4358] __x64_sys_sendmsg+0x46/0x50 [ 43.939607][ T4358] x64_sys_call+0x26f8/0x2e00 [ 43.944301][ T4358] do_syscall_64+0xc9/0x1c0 [ 43.948846][ T4358] ? clear_bhb_loop+0x55/0xb0 [ 43.953511][ T4358] ? clear_bhb_loop+0x55/0xb0 [ 43.958211][ T4358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.964103][ T4358] RIP: 0033:0x7fe1b8b45f19 [ 43.968502][ T4358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.988096][ T4358] RSP: 002b:00007fe1b77c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.996595][ T4358] RAX: ffffffffffffffda RBX: 00007fe1b8cd5f60 RCX: 00007fe1b8b45f19 [ 44.004555][ T4358] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 44.012512][ T4358] RBP: 00007fe1b77c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.020467][ T4358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.028423][ T4358] R13: 000000000000000b R14: 00007fe1b8cd5f60 R15: 00007ffdf21b29c8 [ 44.036462][ T4358] [ 44.086297][ T4366] loop4: detected capacity change from 0 to 2048 [ 44.092887][ T64] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.117393][ T29] audit: type=1400 audit(1721860608.997:530): avc: denied { map } for pid=4368 comm="syz.0.303" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.166133][ T4369] loop0: detected capacity change from 0 to 2048 [ 44.186102][ T4366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.247280][ T3613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.259411][ T4369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.275542][ T4369] IPVS: Error joining to the multicast group [ 44.326486][ T4369] capability: warning: `syz.0.303' uses 32-bit capabilities (legacy support in use) [ 44.359271][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.427725][ T4380] dccp_close: ABORT with 68 bytes unread [ 44.459450][ T4390] loop1: detected capacity change from 0 to 1024 [ 44.468645][ T4390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.483545][ T4390] program syz.1.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.514313][ T3998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.532996][ T4393] loop0: detected capacity change from 0 to 256 [ 44.586489][ T4406] veth1_macvtap: left promiscuous mode [ 44.592089][ T4406] macsec0: entered promiscuous mode [ 44.597920][ T4406] macsec0: entered allmulticast mode [ 44.603835][ C1] hrtimer: interrupt took 27410 ns [ 44.677987][ T4412] loop2: detected capacity change from 0 to 1764 [ 44.687218][ T4412] ISOFS: Unable to identify CD-ROM format. [ 44.729499][ T4420] loop1: detected capacity change from 0 to 164 [ 44.736617][ T4420] Unable to read rock-ridge attributes [ 44.769334][ T4422] loop0: detected capacity change from 0 to 1764 [ 44.776458][ T4422] ISOFS: Unable to identify CD-ROM format. [ 44.803161][ T4423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4423 comm=syz.1.320 [ 45.366117][ T4428] loop4: detected capacity change from 0 to 1024 [ 45.372878][ T4428] EXT4-fs: Ignoring removed i_version option [ 45.378995][ T4428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.395218][ T4428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.477474][ T3613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.493638][ T4435] FAULT_INJECTION: forcing a failure. [ 45.493638][ T4435] name failslab, interval 1, probability 0, space 0, times 0 [ 45.506322][ T4435] CPU: 1 UID: 0 PID: 4435 Comm: syz.4.324 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 45.516746][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 45.526966][ T4435] Call Trace: [ 45.530334][ T4435] [ 45.533312][ T4435] dump_stack_lvl+0xf2/0x150 [ 45.537903][ T4435] dump_stack+0x15/0x20 [ 45.542109][ T4435] should_fail_ex+0x229/0x230 [ 45.546853][ T4435] ? sidtab_sid2str_get+0xb8/0x140 [ 45.552077][ T4435] should_failslab+0x8f/0xb0 [ 45.556742][ T4435] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 45.563094][ T4435] kmemdup_noprof+0x2a/0x60 [ 45.567632][ T4435] sidtab_sid2str_get+0xb8/0x140 [ 45.572643][ T4435] security_sid_to_context_core+0x1eb/0x2f0 [ 45.578533][ T4435] security_sid_to_context+0x27/0x30 [ 45.583856][ T4435] avc_audit_post_callback+0x9d/0x530 [ 45.589395][ T4435] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 45.595433][ T4435] common_lsm_audit+0x7d3/0xfc0 [ 45.600273][ T4435] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 45.606253][ T4435] ? avc_denied+0xf1/0x110 [ 45.610670][ T4435] slow_avc_audit+0xf9/0x140 [ 45.615362][ T4435] avc_has_perm+0x129/0x160 [ 45.619931][ T4435] selinux_socket_connect_helper+0x431/0x480 [ 45.625957][ T4435] selinux_sctp_bind_connect+0x1b8/0x270 [ 45.631620][ T4435] security_sctp_bind_connect+0x53/0x90 [ 45.637218][ T4435] sctp_sendmsg+0xeda/0x1920 [ 45.641854][ T4435] ? __pfx_sctp_sendmsg+0x10/0x10 [ 45.646916][ T4435] inet_sendmsg+0xc5/0xd0 [ 45.651290][ T4435] __sock_sendmsg+0x102/0x180 [ 45.655959][ T4435] ____sys_sendmsg+0x312/0x410 [ 45.660818][ T4435] __sys_sendmmsg+0x269/0x500 [ 45.665507][ T4435] __x64_sys_sendmmsg+0x57/0x70 [ 45.670356][ T4435] x64_sys_call+0x2b4e/0x2e00 [ 45.675098][ T4435] do_syscall_64+0xc9/0x1c0 [ 45.679706][ T4435] ? clear_bhb_loop+0x55/0xb0 [ 45.684402][ T4435] ? clear_bhb_loop+0x55/0xb0 [ 45.689117][ T4435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.695071][ T4435] RIP: 0033:0x7fe626bb5f19 [ 45.699471][ T4435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.719118][ T4435] RSP: 002b:00007fe625837048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 45.727573][ T4435] RAX: ffffffffffffffda RBX: 00007fe626d45f60 RCX: 00007fe626bb5f19 [ 45.735529][ T4435] RDX: 0000000000000001 RSI: 0000000020001680 RDI: 0000000000000007 [ 45.743486][ T4435] RBP: 00007fe6258370a0 R08: 0000000000000000 R09: 0000000000000000 [ 45.751506][ T4435] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000002 [ 45.759774][ T4435] R13: 000000000000000b R14: 00007fe626d45f60 R15: 00007fffb5291568 [ 45.767760][ T4435] [ 45.860734][ T4445] loop0: detected capacity change from 0 to 2048 [ 45.876732][ T4450] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 45.876921][ T4445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.885743][ T4450] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 45.907219][ T4450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.923507][ T4445] FAULT_INJECTION: forcing a failure. [ 45.923507][ T4445] name failslab, interval 1, probability 0, space 0, times 0 [ 45.925134][ T4455] loop2: detected capacity change from 0 to 128 [ 45.936176][ T4445] CPU: 0 UID: 0 PID: 4445 Comm: syz.0.328 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 45.952699][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 45.962784][ T4445] Call Trace: [ 45.966075][ T4445] [ 45.969001][ T4445] dump_stack_lvl+0xf2/0x150 [ 45.973587][ T4445] dump_stack+0x15/0x20 [ 45.977735][ T4445] should_fail_ex+0x229/0x230 [ 45.982438][ T4445] ? fib_trie_unmerge+0x349/0xa70 [ 45.987537][ T4445] should_failslab+0x8f/0xb0 [ 45.992133][ T4445] kmem_cache_alloc_noprof+0x4c/0x290 [ 45.997556][ T4445] fib_trie_unmerge+0x349/0xa70 [ 46.002541][ T4445] ? fib_nl2rule+0x217/0xcb0 [ 46.007118][ T4445] fib_unmerge+0x7f/0x200 [ 46.011439][ T4445] fib4_rule_configure+0x10c/0x4f0 [ 46.016577][ T4445] fib_nl_newrule+0xa65/0xf70 [ 46.021250][ T4445] ? xas_load+0x3ae/0x3d0 [ 46.025621][ T4445] ? __pfx_fib_nl_newrule+0x10/0x10 [ 46.031195][ T4445] rtnetlink_rcv_msg+0x6aa/0x710 [ 46.036131][ T4445] ? ref_tracker_free+0x3a5/0x410 [ 46.041146][ T4445] ? __dev_queue_xmit+0x161/0x1fe0 [ 46.046330][ T4445] netlink_rcv_skb+0x12c/0x230 [ 46.051094][ T4445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 46.056660][ T4445] rtnetlink_rcv+0x1c/0x30 [ 46.061082][ T4445] netlink_unicast+0x593/0x670 [ 46.065927][ T4445] netlink_sendmsg+0x5cc/0x6e0 [ 46.070753][ T4445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.076029][ T4445] __sock_sendmsg+0x140/0x180 [ 46.080731][ T4445] sock_write_iter+0x164/0x1b0 [ 46.085519][ T4445] do_iter_readv_writev+0x3b0/0x470 [ 46.090706][ T4445] vfs_writev+0x2e0/0x880 [ 46.095030][ T4445] do_writev+0xf8/0x220 [ 46.099193][ T4445] __x64_sys_writev+0x45/0x50 [ 46.103858][ T4445] x64_sys_call+0x1d63/0x2e00 [ 46.108599][ T4445] do_syscall_64+0xc9/0x1c0 [ 46.113088][ T4445] ? clear_bhb_loop+0x55/0xb0 [ 46.117782][ T4445] ? clear_bhb_loop+0x55/0xb0 [ 46.122513][ T4445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.128407][ T4445] RIP: 0033:0x7f396bce5f19 [ 46.132810][ T4445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.152438][ T4445] RSP: 002b:00007f396a967048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 46.160860][ T4445] RAX: ffffffffffffffda RBX: 00007f396be75f60 RCX: 00007f396bce5f19 [ 46.168923][ T4445] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000000005 [ 46.176881][ T4445] RBP: 00007f396a9670a0 R08: 0000000000000000 R09: 0000000000000000 [ 46.184839][ T4445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.192876][ T4445] R13: 000000000000000b R14: 00007f396be75f60 R15: 00007ffc7e3be358 [ 46.200837][ T4445] [ 46.215479][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.242332][ T4462] dummy0: entered promiscuous mode [ 46.286844][ T4472] xt_TPROXY: Can be used only with -p tcp or -p udp [ 46.310255][ T4473] loop0: detected capacity change from 0 to 2048 [ 46.326397][ T4475] loop1: detected capacity change from 0 to 2048 [ 46.335853][ T4475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.339210][ T4477] loop3: detected capacity change from 0 to 164 [ 46.355571][ T4477] Unable to read rock-ridge attributes [ 46.356801][ T4475] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.376750][ T4475] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 46.389062][ T4475] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.389062][ T4475] [ 46.398816][ T4475] EXT4-fs (loop1): Total free blocks count 0 [ 46.404846][ T4475] EXT4-fs (loop1): Free/Dirty block details [ 46.410750][ T4475] EXT4-fs (loop1): free_blocks=2415919104 [ 46.411005][ T4473] loop0: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 46.416495][ T4475] EXT4-fs (loop1): dirty_blocks=16 [ 46.416514][ T4475] EXT4-fs (loop1): Block reservation details [ 46.416524][ T4475] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 46.433850][ T4481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4481 comm=syz.3.338 [ 46.512822][ T4473] loop0: p3 start 4259840 is beyond EOD, [ 46.521354][ T4475] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 46.524813][ T4473] truncated [ 46.766198][ T4485] loop2: detected capacity change from 0 to 1764 [ 46.773097][ T4485] ISOFS: Unable to identify CD-ROM format. [ 47.170454][ T4492] FAULT_INJECTION: forcing a failure. [ 47.170454][ T4492] name failslab, interval 1, probability 0, space 0, times 0 [ 47.183132][ T4492] CPU: 0 UID: 0 PID: 4492 Comm: syz.1.343 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 47.193380][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.203518][ T4492] Call Trace: [ 47.206782][ T4492] [ 47.209726][ T4492] dump_stack_lvl+0xf2/0x150 [ 47.214396][ T4492] dump_stack+0x15/0x20 [ 47.218545][ T4492] should_fail_ex+0x229/0x230 [ 47.223294][ T4492] ? audit_log_d_path+0x96/0x250 [ 47.228275][ T4492] should_failslab+0x8f/0xb0 [ 47.232859][ T4492] __kmalloc_cache_noprof+0x4b/0x2a0 [ 47.238143][ T4492] audit_log_d_path+0x96/0x250 [ 47.242897][ T4492] ? get_file_rcu+0xf4/0x110 [ 47.247484][ T4492] ? __rcu_read_unlock+0x4e/0x70 [ 47.252405][ T4492] audit_log_d_path_exe+0x45/0x80 [ 47.257414][ T4492] audit_log_task+0x155/0x180 [ 47.262087][ T4492] audit_seccomp+0x68/0x130 [ 47.266578][ T4492] __seccomp_filter+0x6fa/0x1180 [ 47.271546][ T4492] ? __perf_event_task_sched_out+0x111/0xfe0 [ 47.277516][ T4492] ? update_load_avg+0x1f7/0x7c0 [ 47.282520][ T4492] __secure_computing+0x9f/0x1c0 [ 47.287536][ T4492] syscall_trace_enter+0xd1/0x1f0 [ 47.292560][ T4492] do_syscall_64+0xaa/0x1c0 [ 47.297058][ T4492] ? clear_bhb_loop+0x55/0xb0 [ 47.301719][ T4492] ? clear_bhb_loop+0x55/0xb0 [ 47.306388][ T4492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.312356][ T4492] RIP: 0033:0x7f8b4abe49fc [ 47.316869][ T4492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 47.336561][ T4492] RSP: 002b:00007f8b49867040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.345098][ T4492] RAX: ffffffffffffffda RBX: 00007f8b4ad75f60 RCX: 00007f8b4abe49fc [ 47.353319][ T4492] RDX: 000000000000000f RSI: 00007f8b498670b0 RDI: 0000000000000003 [ 47.361278][ T4492] RBP: 00007f8b498670a0 R08: 0000000000000000 R09: 0000000000000000 [ 47.369242][ T4492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.377265][ T4492] R13: 000000000000000b R14: 00007f8b4ad75f60 R15: 00007ffd6697b458 [ 47.385286][ T4492] [ 47.417219][ T4506] loop4: detected capacity change from 0 to 128 [ 47.465689][ T4508] dummy0: entered promiscuous mode [ 47.476693][ T4512] loop4: detected capacity change from 0 to 256 [ 47.514086][ T4518] FAULT_INJECTION: forcing a failure. [ 47.514086][ T4518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.527234][ T4518] CPU: 0 UID: 0 PID: 4518 Comm: syz.1.353 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 47.537475][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.547534][ T4518] Call Trace: [ 47.550806][ T4518] [ 47.553878][ T4518] dump_stack_lvl+0xf2/0x150 [ 47.558664][ T4518] dump_stack+0x15/0x20 [ 47.562965][ T4518] should_fail_ex+0x229/0x230 [ 47.567718][ T4518] should_fail+0xb/0x10 [ 47.571895][ T4518] should_fail_usercopy+0x1a/0x20 [ 47.576937][ T4518] _copy_from_user+0x1e/0xd0 [ 47.581607][ T4518] input_event_from_user+0x126/0x1e0 [ 47.586899][ T4518] ? input_inject_event+0xe1/0x100 [ 47.592116][ T4518] evdev_write+0x288/0x420 [ 47.596613][ T4518] ? __pfx_evdev_write+0x10/0x10 [ 47.601611][ T4518] vfs_write+0x28b/0x900 [ 47.605888][ T4518] ? __fget_files+0x1da/0x210 [ 47.610650][ T4518] ksys_write+0xeb/0x1b0 [ 47.614937][ T4518] __x64_sys_write+0x42/0x50 [ 47.619541][ T4518] x64_sys_call+0x2a40/0x2e00 [ 47.624400][ T4518] do_syscall_64+0xc9/0x1c0 [ 47.629075][ T4518] ? clear_bhb_loop+0x55/0xb0 [ 47.633750][ T4518] ? clear_bhb_loop+0x55/0xb0 [ 47.638426][ T4518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.644396][ T4518] RIP: 0033:0x7f8b4abe5f19 [ 47.648876][ T4518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.668566][ T4518] RSP: 002b:00007f8b49867048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.676970][ T4518] RAX: ffffffffffffffda RBX: 00007f8b4ad75f60 RCX: 00007f8b4abe5f19 [ 47.684928][ T4518] RDX: 0000000000002778 RSI: 0000000020000040 RDI: 0000000000000003 [ 47.693242][ T4518] RBP: 00007f8b498670a0 R08: 0000000000000000 R09: 0000000000000000 [ 47.701290][ T4518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.709308][ T4518] R13: 000000000000000b R14: 00007f8b4ad75f60 R15: 00007ffd6697b458 [ 47.717348][ T4518] [ 47.735257][ T4519] loop3: detected capacity change from 0 to 2048 [ 47.771073][ T4519] loop3: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 47.771607][ T4519] loop3: p3 start 4259840 is beyond EOD, truncated [ 47.958363][ T4541] FAULT_INJECTION: forcing a failure. [ 47.958363][ T4541] name failslab, interval 1, probability 0, space 0, times 0 [ 47.971140][ T4541] CPU: 1 UID: 0 PID: 4541 Comm: syz.0.359 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 47.981424][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 47.991538][ T4541] Call Trace: [ 47.994805][ T4541] [ 47.997733][ T4541] dump_stack_lvl+0xf2/0x150 [ 48.002318][ T4541] dump_stack+0x15/0x20 [ 48.006532][ T4541] should_fail_ex+0x229/0x230 [ 48.011269][ T4541] ? __alloc_skb+0x10b/0x310 [ 48.015850][ T4541] should_failslab+0x8f/0xb0 [ 48.020471][ T4541] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 48.026290][ T4541] __alloc_skb+0x10b/0x310 [ 48.030707][ T4541] netlink_alloc_large_skb+0xad/0xe0 [ 48.036066][ T4541] netlink_sendmsg+0x3b4/0x6e0 [ 48.040946][ T4541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.046265][ T4541] __sock_sendmsg+0x140/0x180 [ 48.050995][ T4541] ____sys_sendmsg+0x312/0x410 [ 48.055779][ T4541] __sys_sendmsg+0x1e9/0x280 [ 48.060459][ T4541] __x64_sys_sendmsg+0x46/0x50 [ 48.065348][ T4541] x64_sys_call+0x26f8/0x2e00 [ 48.070069][ T4541] do_syscall_64+0xc9/0x1c0 [ 48.074561][ T4541] ? clear_bhb_loop+0x55/0xb0 [ 48.079231][ T4541] ? clear_bhb_loop+0x55/0xb0 [ 48.083914][ T4541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.089804][ T4541] RIP: 0033:0x7f396bce5f19 [ 48.094242][ T4541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.113887][ T4541] RSP: 002b:00007f396a967048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.122284][ T4541] RAX: ffffffffffffffda RBX: 00007f396be75f60 RCX: 00007f396bce5f19 [ 48.130325][ T4541] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 48.138419][ T4541] RBP: 00007f396a9670a0 R08: 0000000000000000 R09: 0000000000000000 [ 48.146434][ T4541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.154390][ T4541] R13: 000000000000000b R14: 00007f396be75f60 R15: 00007ffc7e3be358 [ 48.162455][ T4541] [ 48.180608][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 48.180621][ T29] audit: type=1400 audit(1721860613.053:575): avc: denied { bind } for pid=4543 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.206294][ T29] audit: type=1400 audit(1721860613.053:576): avc: denied { node_bind } for pid=4543 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.241316][ T4548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 48.268987][ T4552] loop0: detected capacity change from 0 to 164 [ 48.276726][ T4552] Unable to read rock-ridge attributes [ 48.345844][ T4553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4553 comm=syz.0.362 [ 48.370377][ T4555] loop4: detected capacity change from 0 to 164 [ 48.377475][ T4555] Unable to read rock-ridge attributes [ 48.435486][ T4556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4556 comm=syz.4.363 [ 48.583377][ T4564] loop3: detected capacity change from 0 to 1764 [ 48.590328][ T4564] ISOFS: Unable to identify CD-ROM format. [ 48.600630][ T29] audit: type=1326 audit(1721860613.483:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1b8b45f19 code=0x0 [ 48.698149][ T4576] loop2: detected capacity change from 0 to 2048 [ 48.716372][ T4576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.737682][ C1] eth0: bad gso: type: 1, size: 1408 [ 48.738132][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.765382][ T4584] netlink: 'syz.2.373': attribute type 9 has an invalid length. [ 48.773059][ T4584] netlink: 'syz.2.373': attribute type 7 has an invalid length. [ 48.780834][ T4584] netlink: 'syz.2.373': attribute type 8 has an invalid length. [ 48.823491][ C1] eth0: bad gso: type: 1, size: 1408 [ 49.240191][ T4604] loop4: detected capacity change from 0 to 512 [ 49.247514][ T4604] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 49.257222][ T4604] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 49.265240][ T4604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.278274][ T4604] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.380: lblock 0 mapped to illegal pblock 3 (length 1) [ 49.292344][ T4604] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.380: error -117 reading directory block [ 49.305487][ T4604] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 3: comm syz.4.380: lblock 0 mapped to illegal pblock 3 (length 1) [ 49.319516][ T4604] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.380: error -117 reading directory block [ 49.336846][ T29] audit: type=1400 audit(1721860614.217:578): avc: denied { create } for pid=4603 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.357501][ T29] audit: type=1400 audit(1721860614.217:579): avc: denied { write } for pid=4603 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.377923][ T29] audit: type=1400 audit(1721860614.217:580): avc: denied { read } for pid=4603 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.398687][ T3613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.468509][ T4614] netlink: 60 bytes leftover after parsing attributes in process `syz.3.383'. [ 49.475666][ T4616] loop4: detected capacity change from 0 to 128 [ 49.483865][ T4616] vfat: Unknown parameter '/dev/zero' [ 49.496572][ T4614] loop3: detected capacity change from 0 to 1024 [ 49.505311][ T4614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.518514][ T29] audit: type=1400 audit(1721860614.397:581): avc: denied { setattr } for pid=4613 comm="syz.3.383" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 49.548055][ T4097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.630910][ T4625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.674040][ T4629] loop2: detected capacity change from 0 to 164 [ 49.680957][ T4629] Unable to read rock-ridge attributes [ 49.738877][ T4632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4632 comm=syz.2.389 [ 50.018732][ T4636] loop0: detected capacity change from 0 to 512 [ 50.026267][ T4636] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 50.036253][ T4636] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 50.044313][ T4636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.058458][ T4636] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.392: lblock 0 mapped to illegal pblock 3 (length 1) [ 50.072643][ T4636] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.392: error -117 reading directory block [ 50.086475][ T4636] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.392: lblock 0 mapped to illegal pblock 3 (length 1) [ 50.100571][ T4636] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.392: error -117 reading directory block [ 50.126915][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.150177][ T4639] loop0: detected capacity change from 0 to 1764 [ 50.157843][ T4639] ISOFS: Unable to identify CD-ROM format. [ 50.167758][ T29] audit: type=1326 audit(1721860615.047:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.0.393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f396bce5f19 code=0x0 [ 50.578106][ T29] audit: type=1400 audit(1721860615.457:583): avc: denied { setattr } for pid=4647 comm="syz.4.397" name="SCTPv6" dev="sockfs" ino=9767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.722610][ T4670] loop1: detected capacity change from 0 to 164 [ 50.735768][ T4670] Unable to read rock-ridge attributes [ 50.773897][ T29] audit: type=1400 audit(1721860615.647:584): avc: denied { mount } for pid=4665 comm="syz.4.404" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 50.795102][ T4675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4675 comm=syz.1.406 [ 51.100639][ T4707] loop0: detected capacity change from 0 to 512 [ 51.108870][ T4707] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.418: corrupted in-inode xattr: invalid ea_ino [ 51.122811][ T4707] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.418: couldn't read orphan inode 15 (err -117) [ 51.135344][ T4707] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.155925][ T3095] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 51.207981][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 51.217260][ T4722] FAULT_INJECTION: forcing a failure. [ 51.217260][ T4722] name failslab, interval 1, probability 0, space 0, times 0 [ 51.229903][ T4722] CPU: 1 UID: 0 PID: 4722 Comm: syz.0.421 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 51.240144][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 51.250194][ T4722] Call Trace: [ 51.253478][ T4722] [ 51.256397][ T4722] dump_stack_lvl+0xf2/0x150 [ 51.260990][ T4722] dump_stack+0x15/0x20 [ 51.265150][ T4722] should_fail_ex+0x229/0x230 [ 51.269929][ T4722] ? kstrdup_const+0x3e/0x50 [ 51.274564][ T4722] should_failslab+0x8f/0xb0 [ 51.279158][ T4722] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 51.285639][ T4722] kstrdup+0x3a/0x80 [ 51.289546][ T4722] kstrdup_const+0x3e/0x50 [ 51.294003][ T4722] kvasprintf_const+0xe5/0x100 [ 51.298833][ T4722] kobject_set_name_vargs+0x44/0xe0 [ 51.304315][ T4722] dev_set_name+0x84/0xb0 [ 51.308708][ T4722] ? hrtimer_init+0x104/0x1f0 [ 51.313380][ T4722] ? netdev_register_kobject+0x63/0x230 [ 51.319061][ T4722] ? swiotlb_dev_init+0x19/0x30 [ 51.323949][ T4722] ? device_initialize+0x1fe/0x210 [ 51.329115][ T4722] netdev_register_kobject+0x80/0x230 [ 51.334497][ T4722] register_netdevice+0x910/0xe30 [ 51.339548][ T4722] ip_tunnel_newlink+0x15e/0x4b0 [ 51.344573][ T4722] ipgre_newlink+0x1ce/0x210 [ 51.349159][ T4722] ? __pfx_ipgre_newlink+0x10/0x10 [ 51.354320][ T4722] rtnl_newlink+0xeff/0x1690 [ 51.358975][ T4722] ? security_capable+0x64/0x80 [ 51.363821][ T4722] ? ns_capable+0x7d/0xb0 [ 51.368158][ T4722] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.373197][ T4722] rtnetlink_rcv_msg+0x6aa/0x710 [ 51.378210][ T4722] ? ref_tracker_free+0x3a5/0x410 [ 51.383231][ T4722] ? __dev_queue_xmit+0x161/0x1fe0 [ 51.388355][ T4722] netlink_rcv_skb+0x12c/0x230 [ 51.393126][ T4722] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.398616][ T4722] rtnetlink_rcv+0x1c/0x30 [ 51.403107][ T4722] netlink_unicast+0x593/0x670 [ 51.408004][ T4722] netlink_sendmsg+0x5cc/0x6e0 [ 51.412784][ T4722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.418078][ T4722] __sock_sendmsg+0x140/0x180 [ 51.422830][ T4722] ____sys_sendmsg+0x312/0x410 [ 51.427604][ T4722] __sys_sendmsg+0x1e9/0x280 [ 51.432237][ T4722] __x64_sys_sendmsg+0x46/0x50 [ 51.437119][ T4722] x64_sys_call+0x26f8/0x2e00 [ 51.441800][ T4722] do_syscall_64+0xc9/0x1c0 [ 51.446381][ T4722] ? clear_bhb_loop+0x55/0xb0 [ 51.451048][ T4722] ? clear_bhb_loop+0x55/0xb0 [ 51.455766][ T4722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.461764][ T4722] RIP: 0033:0x7f396bce5f19 [ 51.466175][ T4722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.486211][ T4722] RSP: 002b:00007f396a967048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.494684][ T4722] RAX: ffffffffffffffda RBX: 00007f396be75f60 RCX: 00007f396bce5f19 [ 51.502789][ T4722] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000008 [ 51.510786][ T4722] RBP: 00007f396a9670a0 R08: 0000000000000000 R09: 0000000000000000 [ 51.518747][ T4722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.526728][ T4722] R13: 000000000000000b R14: 00007f396be75f60 R15: 00007ffc7e3be358 [ 51.534702][ T4722] [ 51.536531][ T4724] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 51.702404][ T4739] loop2: detected capacity change from 0 to 1764 [ 51.710922][ T4739] ISOFS: Unable to identify CD-ROM format. [ 51.818141][ T4754] sctp: [Deprecated]: syz.1.433 (pid 4754) Use of int in maxseg socket option. [ 51.818141][ T4754] Use struct sctp_assoc_value instead [ 51.980398][ T4769] FAULT_INJECTION: forcing a failure. [ 51.980398][ T4769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.993539][ T4769] CPU: 1 UID: 0 PID: 4769 Comm: syz.4.439 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 52.003827][ T4769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.013870][ T4769] Call Trace: [ 52.017261][ T4769] [ 52.020183][ T4769] dump_stack_lvl+0xf2/0x150 [ 52.024858][ T4769] dump_stack+0x15/0x20 [ 52.029069][ T4769] should_fail_ex+0x229/0x230 [ 52.033744][ T4769] should_fail+0xb/0x10 [ 52.037937][ T4769] should_fail_usercopy+0x1a/0x20 [ 52.043024][ T4769] _copy_to_user+0x1e/0xa0 [ 52.047513][ T4769] simple_read_from_buffer+0xa0/0x110 [ 52.052888][ T4769] proc_fail_nth_read+0xfc/0x140 [ 52.057820][ T4769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.063364][ T4769] vfs_read+0x1a2/0x6e0 [ 52.067512][ T4769] ? __rcu_read_unlock+0x4e/0x70 [ 52.072455][ T4769] ? __fget_files+0x1da/0x210 [ 52.077177][ T4769] ksys_read+0xeb/0x1b0 [ 52.081388][ T4769] __x64_sys_read+0x42/0x50 [ 52.085902][ T4769] x64_sys_call+0x2a36/0x2e00 [ 52.090702][ T4769] do_syscall_64+0xc9/0x1c0 [ 52.095191][ T4769] ? clear_bhb_loop+0x55/0xb0 [ 52.099849][ T4769] ? clear_bhb_loop+0x55/0xb0 [ 52.104529][ T4769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.110440][ T4769] RIP: 0033:0x7fe626bb49fc [ 52.114832][ T4769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 52.134523][ T4769] RSP: 002b:00007fe625837040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.142918][ T4769] RAX: ffffffffffffffda RBX: 00007fe626d45f60 RCX: 00007fe626bb49fc [ 52.150870][ T4769] RDX: 000000000000000f RSI: 00007fe6258370b0 RDI: 0000000000000004 [ 52.158853][ T4769] RBP: 00007fe6258370a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.166834][ T4769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.174831][ T4769] R13: 000000000000000b R14: 00007fe626d45f60 R15: 00007fffb5291568 [ 52.182829][ T4769] [ 52.193160][ T4770] loop1: detected capacity change from 0 to 512 [ 52.203346][ T4770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.217891][ T4770] mmap: syz.1.438 (4770) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.282334][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 52.295018][ T4785] FAULT_INJECTION: forcing a failure. [ 52.295018][ T4785] name failslab, interval 1, probability 0, space 0, times 0 [ 52.307708][ T4785] CPU: 0 UID: 0 PID: 4785 Comm: syz.3.444 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 52.318032][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 52.328149][ T4785] Call Trace: [ 52.331415][ T4785] [ 52.334332][ T4785] dump_stack_lvl+0xf2/0x150 [ 52.338936][ T4785] dump_stack+0x15/0x20 [ 52.343079][ T4785] should_fail_ex+0x229/0x230 [ 52.347777][ T4785] ? __alloc_skb+0x10b/0x310 [ 52.352407][ T4785] should_failslab+0x8f/0xb0 [ 52.356991][ T4785] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 52.362789][ T4785] __alloc_skb+0x10b/0x310 [ 52.367231][ T4785] netlink_alloc_large_skb+0xad/0xe0 [ 52.372662][ T4785] netlink_sendmsg+0x3b4/0x6e0 [ 52.377425][ T4785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.382826][ T4785] __sock_sendmsg+0x140/0x180 [ 52.387505][ T4785] ____sys_sendmsg+0x312/0x410 [ 52.392261][ T4785] __sys_sendmsg+0x1e9/0x280 [ 52.396889][ T4785] __x64_sys_sendmsg+0x46/0x50 [ 52.401650][ T4785] x64_sys_call+0x26f8/0x2e00 [ 52.406349][ T4785] do_syscall_64+0xc9/0x1c0 [ 52.410837][ T4785] ? clear_bhb_loop+0x55/0xb0 [ 52.415499][ T4785] ? clear_bhb_loop+0x55/0xb0 [ 52.420160][ T4785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.426161][ T4785] RIP: 0033:0x7fe1b8b45f19 [ 52.430614][ T4785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.450217][ T4785] RSP: 002b:00007fe1b77c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.458688][ T4785] RAX: ffffffffffffffda RBX: 00007fe1b8cd5f60 RCX: 00007fe1b8b45f19 [ 52.466650][ T4785] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 52.474695][ T4785] RBP: 00007fe1b77c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.482708][ T4785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.490888][ T4785] R13: 000000000000000b R14: 00007fe1b8cd5f60 R15: 00007ffdf21b29c8 [ 52.498853][ T4785] [ 52.512202][ T4727] syz.0.422 (4727) used greatest stack depth: 9224 bytes left [ 52.560074][ T4796] loop0: detected capacity change from 0 to 512 [ 52.567614][ T4796] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 52.578023][ T4796] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 52.586359][ T4796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.598009][ T4799] loop2: detected capacity change from 0 to 512 [ 52.598445][ C1] eth0: bad gso: type: 1, size: 1408 [ 52.614728][ T4796] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.449: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.629067][ T4799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.629886][ T4796] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.449: error -117 reading directory block [ 52.640462][ T4799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 52.660822][ T4796] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 3: comm syz.0.449: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.665999][ T4799] System zones: 1-12 [ 52.678051][ T4796] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.449: error -117 reading directory block [ 52.694246][ T4799] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.707613][ T4799] EXT4-fs (loop2): 1 truncate cleaned up [ 52.713637][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.743848][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.753260][ T3998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.763358][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.806419][ T4810] loop0: detected capacity change from 0 to 2048 [ 52.821392][ T4815] ALSA: seq fatal error: cannot create timer (-19) [ 52.840122][ T4810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.856499][ T4824] loop1: detected capacity change from 0 to 128 [ 52.858923][ T4826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 52.965890][ T4835] loop2: detected capacity change from 0 to 512 [ 52.974388][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.988278][ T4835] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.459: iget: special inode unallocated [ 53.001813][ T4835] EXT4-fs (loop2): get root inode failed [ 53.007529][ T4835] EXT4-fs (loop2): mount failed [ 53.026438][ T4839] loop0: detected capacity change from 0 to 1024 [ 53.034913][ T4839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.060357][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.150376][ T4853] loop3: detected capacity change from 0 to 1024 [ 53.165487][ T4853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.182282][ T4853] syz_tun: entered allmulticast mode [ 53.193791][ T4097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.245871][ T4861] loop0: detected capacity change from 0 to 256 [ 53.258867][ T4861] FAT-fs (loop0): Directory bread(block 64) failed [ 53.265666][ T4861] FAT-fs (loop0): Directory bread(block 65) failed [ 53.272315][ T4861] FAT-fs (loop0): Directory bread(block 66) failed [ 53.278977][ T4861] FAT-fs (loop0): Directory bread(block 67) failed [ 53.285738][ T4861] FAT-fs (loop0): Directory bread(block 68) failed [ 53.292288][ T4861] FAT-fs (loop0): Directory bread(block 69) failed [ 53.298920][ T4861] FAT-fs (loop0): Directory bread(block 70) failed [ 53.305452][ T4861] FAT-fs (loop0): Directory bread(block 71) failed [ 53.312013][ T4861] FAT-fs (loop0): Directory bread(block 72) failed [ 53.318652][ T4861] FAT-fs (loop0): Directory bread(block 73) failed [ 53.386120][ T4864] netlink: 'syz.0.472': attribute type 7 has an invalid length. [ 53.394605][ T4864] netlink: 'syz.0.472': attribute type 39 has an invalid length. [ 53.409856][ T4864] bridge1: port 1(gretap1) entered blocking state [ 53.416350][ T4864] bridge1: port 1(gretap1) entered disabled state [ 53.422959][ T4864] gretap1: entered allmulticast mode [ 53.428829][ T4864] gretap1: entered promiscuous mode [ 53.436491][ T4864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4864 comm=syz.0.472 [ 53.448953][ T4864] netlink: 'syz.0.472': attribute type 7 has an invalid length. [ 53.456598][ T4864] netlink: 'syz.0.472': attribute type 39 has an invalid length. [ 53.481932][ T4871] loop0: detected capacity change from 0 to 1024 [ 53.490446][ T4871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.513376][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.557599][ T4878] loop0: detected capacity change from 0 to 512 [ 53.564266][ T4878] /dev/loop0: Can't open blockdev [ 53.581317][ T4880] loop0: detected capacity change from 0 to 164 [ 53.592751][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 53.592763][ T29] audit: type=1400 audit(2000000000.000:729): avc: denied { create } for pid=4879 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.751457][ T4887] loop2: detected capacity change from 0 to 164 [ 53.758703][ T4887] Unable to read rock-ridge attributes [ 53.780060][ T29] audit: type=1326 audit(2000000000.179:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.1.481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b4abe5f19 code=0x0 [ 53.816548][ T4890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4890 comm=syz.2.480 [ 53.881138][ T4891] loop1: detected capacity change from 0 to 128 [ 54.056226][ T4896] FAULT_INJECTION: forcing a failure. [ 54.056226][ T4896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.069287][ T4896] CPU: 0 UID: 0 PID: 4896 Comm: syz.3.482 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 54.079520][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.089561][ T4896] Call Trace: [ 54.092877][ T4896] [ 54.095795][ T4896] dump_stack_lvl+0xf2/0x150 [ 54.100432][ T4896] dump_stack+0x15/0x20 [ 54.104606][ T4896] should_fail_ex+0x229/0x230 [ 54.109301][ T4896] should_fail+0xb/0x10 [ 54.113438][ T4896] should_fail_usercopy+0x1a/0x20 [ 54.118444][ T4896] _copy_from_user+0x1e/0xd0 [ 54.123019][ T4896] do_ip_vs_set_ctl+0x191/0x810 [ 54.128320][ T4896] ? path_openat+0x19bc/0x1f10 [ 54.133102][ T4896] nf_setsockopt+0x195/0x1b0 [ 54.137685][ T4896] ip_setsockopt+0xea/0x100 [ 54.142210][ T4896] tcp_setsockopt+0x93/0xb0 [ 54.146708][ T4896] sock_common_setsockopt+0x64/0x80 [ 54.151922][ T4896] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.157877][ T4896] smc_setsockopt+0x182/0x7a0 [ 54.162536][ T4896] ? __pfx_smc_setsockopt+0x10/0x10 [ 54.167716][ T4896] __sys_setsockopt+0x1d8/0x250 [ 54.172578][ T4896] __x64_sys_setsockopt+0x66/0x80 [ 54.177815][ T4896] x64_sys_call+0x2a0e/0x2e00 [ 54.182478][ T4896] do_syscall_64+0xc9/0x1c0 [ 54.186964][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 54.191732][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 54.196387][ T4896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.202273][ T4896] RIP: 0033:0x7fe1b8b45f19 [ 54.206671][ T4896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.226355][ T4896] RSP: 002b:00007fe1b77c7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.226375][ T4896] RAX: ffffffffffffffda RBX: 00007fe1b8cd5f60 RCX: 00007fe1b8b45f19 [ 54.226388][ T4896] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000007 [ 54.250678][ T4896] RBP: 00007fe1b77c70a0 R08: 0000000000000018 R09: 0000000000000000 [ 54.258674][ T4896] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.266629][ T4896] R13: 000000000000000b R14: 00007fe1b8cd5f60 R15: 00007ffdf21b29c8 [ 54.274756][ T4896] [ 54.568515][ T4918] loop0: detected capacity change from 0 to 1024 [ 54.585005][ T4918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.602837][ T4918] syz_tun: entered allmulticast mode [ 54.645274][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.645570][ T4928] loop2: detected capacity change from 0 to 2048 [ 54.667766][ T29] audit: type=1400 audit(2000000001.069:731): avc: denied { write } for pid=4926 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.672079][ T4937] loop0: detected capacity change from 0 to 256 [ 54.688590][ T29] audit: type=1400 audit(2000000001.089:732): avc: denied { nlmsg_read } for pid=4926 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.716852][ T4937] vfat: Bad value for 'dmask' [ 54.748849][ T4944] loop1: detected capacity change from 0 to 512 [ 54.751408][ T29] audit: type=1400 audit(2000000001.161:733): avc: denied { nlmsg_write } for pid=4945 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.796160][ T4944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.816105][ T4944] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.816175][ T4953] loop0: detected capacity change from 0 to 2048 [ 54.839857][ T29] audit: type=1400 audit(2000000001.251:734): avc: denied { write } for pid=4945 comm="syz.0.498" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.844602][ T4946] loop0: detected capacity change from 0 to 1024 [ 54.869393][ T4946] ext4: Unknown parameter 'nouser_xattr' [ 54.879041][ T4956] loop2: detected capacity change from 0 to 2048 [ 54.893090][ T4959] loop0: detected capacity change from 0 to 164 [ 54.900445][ T4959] Unable to read rock-ridge attributes [ 54.914629][ T4956] loop2: p1 < > p4 [ 54.919075][ T4956] loop2: p4 size 8388608 extends beyond EOD, truncated [ 54.956235][ T3998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.966701][ T4962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=4962 comm=syz.0.501 [ 54.998877][ T29] audit: type=1400 audit(2000000001.411:735): avc: denied { setopt } for pid=4965 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.213642][ T29] audit: type=1400 audit(2000000001.621:736): avc: denied { mount } for pid=4975 comm="syz.3.507" name="/" dev="ramfs" ino=11392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.311057][ T4993] loop4: detected capacity change from 0 to 2048 [ 55.330144][ T4995] loop2: detected capacity change from 0 to 2048 [ 55.352858][ T4995] loop2: detected capacity change from 0 to 1024 [ 55.360662][ T4993] loop4: p1 < > p4 [ 55.364913][ T4995] ext4: Unknown parameter 'nouser_xattr' [ 55.372166][ T4993] loop4: p4 size 8388608 extends beyond EOD, truncated [ 55.409882][ T4997] loop2: detected capacity change from 0 to 256 [ 55.419730][ T5000] FAULT_INJECTION: forcing a failure. [ 55.419730][ T5000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.432836][ T5000] CPU: 0 UID: 0 PID: 5000 Comm: syz.4.516 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 55.443242][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 55.453287][ T5000] Call Trace: [ 55.456551][ T5000] [ 55.459466][ T5000] dump_stack_lvl+0xf2/0x150 [ 55.464047][ T5000] dump_stack+0x15/0x20 [ 55.468186][ T5000] should_fail_ex+0x229/0x230 [ 55.472889][ T5000] should_fail+0xb/0x10 [ 55.477110][ T5000] should_fail_usercopy+0x1a/0x20 [ 55.482151][ T5000] _copy_from_user+0x1e/0xd0 [ 55.486740][ T5000] io_submit_one+0x54/0x1240 [ 55.491468][ T5000] ? __rcu_read_unlock+0x4e/0x70 [ 55.496417][ T5000] __se_sys_io_submit+0xf5/0x280 [ 55.501345][ T5000] __x64_sys_io_submit+0x43/0x50 [ 55.506285][ T5000] x64_sys_call+0xa8b/0x2e00 [ 55.510988][ T5000] do_syscall_64+0xc9/0x1c0 [ 55.515480][ T5000] ? clear_bhb_loop+0x55/0xb0 [ 55.520217][ T5000] ? clear_bhb_loop+0x55/0xb0 [ 55.524897][ T5000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.530922][ T5000] RIP: 0033:0x7fe626bb5f19 [ 55.535339][ T5000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.555017][ T5000] RSP: 002b:00007fe625837048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 55.563432][ T5000] RAX: ffffffffffffffda RBX: 00007fe626d45f60 RCX: 00007fe626bb5f19 [ 55.571475][ T5000] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 00007fe627881000 [ 55.579444][ T5000] RBP: 00007fe6258370a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.587526][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.595504][ T5000] R13: 000000000000000b R14: 00007fe626d45f60 R15: 00007fffb5291568 [ 55.603510][ T5000] [ 55.626901][ T4997] syzkaller0: entered promiscuous mode [ 55.632401][ T4997] syzkaller0: entered allmulticast mode [ 55.761109][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 55.771323][ T5015] netlink: 'syz.4.522': attribute type 10 has an invalid length. [ 55.780593][ T5019] netlink: 76 bytes leftover after parsing attributes in process `syz.0.524'. [ 55.794932][ T5015] team0: Port device netdevsim1 added [ 55.812619][ T5023] FAULT_INJECTION: forcing a failure. [ 55.812619][ T5023] name failslab, interval 1, probability 0, space 0, times 0 [ 55.825431][ T5023] CPU: 0 UID: 0 PID: 5023 Comm: syz.3.525 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 55.835675][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 55.845732][ T5023] Call Trace: [ 55.849030][ T5023] [ 55.851956][ T5023] dump_stack_lvl+0xf2/0x150 [ 55.856570][ T5023] dump_stack+0x15/0x20 [ 55.860735][ T5023] should_fail_ex+0x229/0x230 [ 55.865413][ T5023] ? skb_clone+0x154/0x1f0 [ 55.869901][ T5023] should_failslab+0x8f/0xb0 [ 55.874054][ T29] audit: type=1400 audit(2000000002.291:737): avc: denied { read } for pid=5014 comm="syz.4.522" path="socket:[10831]" dev="sockfs" ino=10831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.874496][ T5023] kmem_cache_alloc_noprof+0x4c/0x290 [ 55.903276][ T5023] skb_clone+0x154/0x1f0 [ 55.907629][ T5023] dev_queue_xmit_nit+0x149/0x620 [ 55.912691][ T5023] dev_hard_start_xmit+0xcc/0x3f0 [ 55.917753][ T5023] sch_direct_xmit+0x1b0/0x580 [ 55.922547][ T5023] ? __rcu_read_unlock+0x34/0x70 [ 55.927589][ T5023] __dev_queue_xmit+0xf3d/0x1fe0 [ 55.932532][ T5023] ? __dev_queue_xmit+0x161/0x1fe0 [ 55.937648][ T5023] ? hash_by_src+0xcf/0x170 [ 55.942199][ T5023] ? _raw_spin_unlock_bh+0x36/0x40 [ 55.947295][ T5023] ? ip_copy_metadata+0x580/0x620 [ 55.952309][ T5023] ? ip_neigh_gw4+0x161/0x170 [ 55.956978][ T5023] ip_finish_output2+0x73d/0x8b0 [ 55.962040][ T5023] ip_do_fragment+0xb86/0xd40 [ 55.966712][ T5023] ? __pfx_ip_finish_output2+0x10/0x10 [ 55.972261][ T5023] ip_fragment+0xd2/0x140 [ 55.976662][ T5023] ip_finish_output+0x223/0x2a0 [ 55.981512][ T5023] ip_output+0xab/0x170 [ 55.985716][ T5023] ? __pfx_ip_finish_output+0x10/0x10 [ 55.991266][ T5023] ? __pfx_ip_output+0x10/0x10 [ 55.996047][ T5023] ip_send_skb+0x116/0x140 [ 56.000624][ T5023] udp_send_skb+0x680/0x9d0 [ 56.005186][ T5023] udp_sendmsg+0x1257/0x12f0 [ 56.009822][ T5023] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 56.015435][ T5023] ? __pfx_udp_sendmsg+0x10/0x10 [ 56.020455][ T5023] inet_sendmsg+0xaf/0xd0 [ 56.024806][ T5023] __sock_sendmsg+0x102/0x180 [ 56.029474][ T5023] ____sys_sendmsg+0x312/0x410 [ 56.034232][ T5023] __sys_sendmmsg+0x269/0x500 [ 56.038983][ T5023] __x64_sys_sendmmsg+0x57/0x70 [ 56.043826][ T5023] x64_sys_call+0x2b4e/0x2e00 [ 56.048609][ T5023] do_syscall_64+0xc9/0x1c0 [ 56.053127][ T5023] ? clear_bhb_loop+0x55/0xb0 [ 56.057861][ T5023] ? clear_bhb_loop+0x55/0xb0 [ 56.062523][ T5023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.068439][ T5023] RIP: 0033:0x7fe1b8b45f19 [ 56.073043][ T5023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.092646][ T5023] RSP: 002b:00007fe1b77c7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.101482][ T5023] RAX: ffffffffffffffda RBX: 00007fe1b8cd5f60 RCX: 00007fe1b8b45f19 [ 56.109596][ T5023] RDX: 0000000000000003 RSI: 0000000020004540 RDI: 0000000000000003 [ 56.117558][ T5023] RBP: 00007fe1b77c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.125533][ T5023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.133511][ T5023] R13: 000000000000000b R14: 00007fe1b8cd5f60 R15: 00007ffdf21b29c8 [ 56.141543][ T5023] [ 56.156351][ T29] audit: type=1400 audit(2000000002.561:738): avc: denied { setopt } for pid=5014 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.169191][ T5032] loop3: detected capacity change from 0 to 128 [ 56.189457][ T5032] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 56.201888][ T5032] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 56.208804][ T5034] loop2: detected capacity change from 0 to 2048 [ 56.217944][ T5032] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.528: checksumming directory block 0 [ 56.248418][ T5034] loop2: detected capacity change from 0 to 1024 [ 56.255248][ T4097] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.257555][ T5034] ext4: Unknown parameter 'nouser_xattr' [ 56.299159][ T5041] loop3: detected capacity change from 0 to 512 [ 56.320828][ T5041] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 56.336137][ T5046] loop4: detected capacity change from 0 to 164 [ 56.346583][ T5041] block device autoloading is deprecated and will be removed. [ 56.356216][ T5046] Unable to read rock-ridge attributes [ 56.374388][ T5041] syz.3.530: attempt to access beyond end of device [ 56.374388][ T5041] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 56.407633][ T5041] EXT4-fs (loop3): couldn't read superblock of external journal [ 56.416194][ T5054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=5054 comm=syz.4.534 [ 56.445255][ T5041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'. [ 56.480139][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 56.481197][ T5066] loop0: detected capacity change from 0 to 128 [ 56.512011][ T5066] syz.0.540: attempt to access beyond end of device [ 56.512011][ T5066] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.525588][ T5066] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.530566][ T5070] SET target dimension over the limit! [ 56.536531][ T5071] FAULT_INJECTION: forcing a failure. [ 56.536531][ T5071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.543405][ T5066] syz.0.540: attempt to access beyond end of device [ 56.543405][ T5066] loop0: rw=2049, sector=129, nr_sectors = 256 limit=128 [ 56.552826][ T5071] CPU: 1 UID: 0 PID: 5071 Comm: syz.2.542 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 56.576497][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 56.586543][ T5071] Call Trace: [ 56.589805][ T5071] [ 56.592729][ T5071] dump_stack_lvl+0xf2/0x150 [ 56.597310][ T5071] dump_stack+0x15/0x20 [ 56.601449][ T5071] should_fail_ex+0x229/0x230 [ 56.606175][ T5071] should_fail+0xb/0x10 [ 56.610363][ T5071] should_fail_usercopy+0x1a/0x20 [ 56.615434][ T5071] _copy_from_user+0x1e/0xd0 [ 56.620027][ T5071] move_addr_to_kernel+0x82/0x120 [ 56.625145][ T5071] copy_msghdr_from_user+0x271/0x2a0 [ 56.630431][ T5071] __sys_sendmmsg+0x22a/0x500 [ 56.635130][ T5071] __x64_sys_sendmmsg+0x57/0x70 [ 56.639975][ T5071] x64_sys_call+0x2b4e/0x2e00 [ 56.644642][ T5071] do_syscall_64+0xc9/0x1c0 [ 56.649271][ T5071] ? clear_bhb_loop+0x55/0xb0 [ 56.653934][ T5071] ? clear_bhb_loop+0x55/0xb0 [ 56.658660][ T5071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.664627][ T5071] RIP: 0033:0x7f2164c55f19 [ 56.669068][ T5071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.688801][ T5071] RSP: 002b:00007f21638d7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.697210][ T5071] RAX: ffffffffffffffda RBX: 00007f2164de5f60 RCX: 00007f2164c55f19 [ 56.705165][ T5071] RDX: 0000000000000002 RSI: 0000000020002300 RDI: 0000000000000003 [ 56.713134][ T5071] RBP: 00007f21638d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.721239][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.729196][ T5071] R13: 000000000000000b R14: 00007f2164de5f60 R15: 00007ffdd9427088 [ 56.737194][ T5071] [ 56.742923][ T5066] syz.0.540: attempt to access beyond end of device [ 56.742923][ T5066] loop0: rw=2049, sector=385, nr_sectors = 1 limit=128 [ 56.756311][ T5066] Buffer I/O error on dev loop0, logical block 385, lost async page write [ 56.766453][ T5066] syz.0.540: attempt to access beyond end of device [ 56.766453][ T5066] loop0: rw=2049, sector=386, nr_sectors = 1 limit=128 [ 56.779916][ T5066] Buffer I/O error on dev loop0, logical block 386, lost async page write [ 56.794993][ T5066] syz.0.540: attempt to access beyond end of device [ 56.794993][ T5066] loop0: rw=2049, sector=387, nr_sectors = 1 limit=128 [ 56.808331][ T5066] Buffer I/O error on dev loop0, logical block 387, lost async page write [ 56.818021][ T5066] syz.0.540: attempt to access beyond end of device [ 56.818021][ T5066] loop0: rw=2049, sector=388, nr_sectors = 1 limit=128 [ 56.831335][ T5066] Buffer I/O error on dev loop0, logical block 388, lost async page write [ 56.848986][ T5075] loop2: detected capacity change from 0 to 512 [ 56.859560][ T5075] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.543: bad orphan inode 17 [ 56.869878][ T5075] ext4_test_bit(bit=16, block=4) = 1 [ 56.875199][ T5075] is_bad_inode(inode)=0 [ 56.879414][ T5075] NEXT_ORPHAN(inode)=0 [ 56.883477][ T5075] max_ino=32 [ 56.886743][ T5075] i_nlink=1 [ 56.896293][ T5075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.911328][ T5075] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.543: bg 0: block 7: invalid block bitmap [ 56.952308][ T3087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.969875][ T5081] netlink: 132 bytes leftover after parsing attributes in process `syz.1.545'. [ 56.971280][ T5083] netlink: 76 bytes leftover after parsing attributes in process `syz.2.546'. [ 57.207925][ T5102] loop4: detected capacity change from 0 to 1764 [ 57.215218][ T5102] ISOFS: Unable to identify CD-ROM format. [ 57.258911][ T5108] 9pnet_fd: Insufficient options for proto=fd [ 57.288308][ T5111] FAULT_INJECTION: forcing a failure. [ 57.288308][ T5111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.301498][ T5111] CPU: 1 UID: 0 PID: 5111 Comm: syz.2.554 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 57.311737][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 57.321871][ T5111] Call Trace: [ 57.325136][ T5111] [ 57.328089][ T5111] dump_stack_lvl+0xf2/0x150 [ 57.332757][ T5111] dump_stack+0x15/0x20 [ 57.336892][ T5111] should_fail_ex+0x229/0x230 [ 57.341568][ T5111] should_fail+0xb/0x10 [ 57.345710][ T5111] should_fail_usercopy+0x1a/0x20 [ 57.350803][ T5111] _copy_to_user+0x1e/0xa0 [ 57.355309][ T5111] simple_read_from_buffer+0xa0/0x110 [ 57.360761][ T5111] proc_fail_nth_read+0xfc/0x140 [ 57.365679][ T5111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.371207][ T5111] vfs_read+0x1a2/0x6e0 [ 57.375437][ T5111] ? __rcu_read_unlock+0x4e/0x70 [ 57.380408][ T5111] ? __fget_files+0x1da/0x210 [ 57.385060][ T5111] ksys_read+0xeb/0x1b0 [ 57.389259][ T5111] __x64_sys_read+0x42/0x50 [ 57.393793][ T5111] x64_sys_call+0x2a36/0x2e00 [ 57.398473][ T5111] do_syscall_64+0xc9/0x1c0 [ 57.403091][ T5111] ? clear_bhb_loop+0x55/0xb0 [ 57.407752][ T5111] ? clear_bhb_loop+0x55/0xb0 [ 57.412408][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.418294][ T5111] RIP: 0033:0x7f2164c549fc [ 57.422691][ T5111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 57.442288][ T5111] RSP: 002b:00007f21638b6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.450716][ T5111] RAX: ffffffffffffffda RBX: 00007f2164de6038 RCX: 00007f2164c549fc [ 57.458690][ T5111] RDX: 000000000000000f RSI: 00007f21638b60b0 RDI: 0000000000000008 [ 57.466643][ T5111] RBP: 00007f21638b60a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.474604][ T5111] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 57.482562][ T5111] R13: 000000000000006e R14: 00007f2164de6038 R15: 00007ffdd9427088 [ 57.490588][ T5111] [ 57.595204][ T5131] loop3: detected capacity change from 0 to 164 [ 57.602590][ T5131] Unable to read rock-ridge attributes [ 57.663756][ T5133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=5133 comm=syz.3.561 [ 58.084741][ T5145] FAULT_INJECTION: forcing a failure. [ 58.084741][ T5145] name failslab, interval 1, probability 0, space 0, times 0 [ 58.097499][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: syz.4.566 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 58.107833][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.117949][ T5145] Call Trace: [ 58.121224][ T5145] [ 58.124197][ T5145] dump_stack_lvl+0xf2/0x150 [ 58.128784][ T5145] dump_stack+0x15/0x20 [ 58.132929][ T5145] should_fail_ex+0x229/0x230 [ 58.137592][ T5145] ? __kvmalloc_node_noprof+0x72/0x170 [ 58.143038][ T5145] should_failslab+0x8f/0xb0 [ 58.147650][ T5145] __kmalloc_node_noprof+0xa8/0x380 [ 58.152850][ T5145] __kvmalloc_node_noprof+0x72/0x170 [ 58.158139][ T5145] rhashtable_init_noprof+0x312/0x450 [ 58.163509][ T5145] rhltable_init_noprof+0x1e/0x40 [ 58.168707][ T5145] nf_tables_newtable+0x54d/0xec0 [ 58.173727][ T5145] nfnetlink_rcv+0xb1d/0x15b0 [ 58.178471][ T5145] netlink_unicast+0x593/0x670 [ 58.183270][ T5145] netlink_sendmsg+0x5cc/0x6e0 [ 58.188089][ T5145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.193361][ T5145] __sock_sendmsg+0x140/0x180 [ 58.198027][ T5145] ____sys_sendmsg+0x312/0x410 [ 58.202801][ T5145] __sys_sendmsg+0x1e9/0x280 [ 58.207407][ T5145] __x64_sys_sendmsg+0x46/0x50 [ 58.212174][ T5145] x64_sys_call+0x26f8/0x2e00 [ 58.216846][ T5145] do_syscall_64+0xc9/0x1c0 [ 58.221415][ T5145] ? clear_bhb_loop+0x55/0xb0 [ 58.226073][ T5145] ? clear_bhb_loop+0x55/0xb0 [ 58.230873][ T5145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.236790][ T5145] RIP: 0033:0x7fe626bb5f19 [ 58.241269][ T5145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.260868][ T5145] RSP: 002b:00007fe625837048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.269298][ T5145] RAX: ffffffffffffffda RBX: 00007fe626d45f60 RCX: 00007fe626bb5f19 [ 58.277293][ T5145] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 58.285255][ T5145] RBP: 00007fe6258370a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.293209][ T5145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.301164][ T5145] R13: 000000000000000b R14: 00007fe626d45f60 R15: 00007fffb5291568 [ 58.309175][ T5145] [ 58.312468][ T5145] netlink: 68 bytes leftover after parsing attributes in process `syz.4.566'. [ 58.321493][ T5145] netlink: 68 bytes leftover after parsing attributes in process `syz.4.566'. [ 58.364871][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 58.378305][ T5151] vcan0: tx drop: invalid da for name 0x00f0000000000000 [ 58.417306][ T5163] loop2: detected capacity change from 0 to 128 [ 58.424308][ T5163] ext4: Unknown parameter 'func' [ 58.518013][ T5172] netlink: 76 bytes leftover after parsing attributes in process `syz.0.576'. [ 58.600216][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 58.600230][ T29] audit: type=1400 audit(2000000005.011:829): avc: denied { shutdown } for pid=5176 comm="syz.3.577" lport=60839 faddr=172.30.0.4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.630319][ T29] audit: type=1400 audit(2000000005.041:830): avc: denied { name_bind } for pid=5176 comm="syz.3.577" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.654198][ T29] audit: type=1400 audit(2000000005.041:831): avc: denied { node_bind } for pid=5176 comm="syz.3.577" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 58.687775][ T29] audit: type=1400 audit(2000000005.101:832): avc: denied { execute } for pid=5171 comm="syz.0.576" path="/107/cpu.stat" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.710551][ T29] audit: type=1400 audit(2000000005.101:833): avc: denied { create } for pid=5171 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.729795][ T29] audit: type=1400 audit(2000000005.101:834): avc: denied { create } for pid=5171 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.812748][ T29] audit: type=1400 audit(2000000005.221:835): avc: denied { write } for pid=5188 comm="syz.0.580" name="001" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.878450][ T5191] loop0: detected capacity change from 0 to 1024 [ 58.906129][ T5191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.909176][ T5197] loop1: detected capacity change from 0 to 1024 [ 58.921036][ T29] audit: type=1400 audit(2000000005.331:836): avc: denied { mount } for pid=5190 comm="syz.0.581" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.925807][ T5197] EXT4-fs: Ignoring removed orlov option [ 58.946038][ T29] audit: type=1400 audit(2000000005.331:837): avc: denied { write } for pid=5190 comm="syz.0.581" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.951657][ T5197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.980312][ T29] audit: type=1400 audit(2000000005.331:838): avc: denied { add_name } for pid=5190 comm="syz.0.581" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.997452][ T5199] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 59.015670][ T5199] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 59.028073][ T5199] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.028073][ T5199] [ 59.037741][ T5199] EXT4-fs (loop0): Total free blocks count 0 [ 59.043724][ T5199] EXT4-fs (loop0): Free/Dirty block details [ 59.049648][ T5199] EXT4-fs (loop0): free_blocks=68451041280 [ 59.055466][ T5199] EXT4-fs (loop0): dirty_blocks=16 [ 59.060566][ T5199] EXT4-fs (loop0): Block reservation details [ 59.066538][ T5199] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 59.075692][ T5197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.100712][ T3998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.117326][ T5204] loop1: detected capacity change from 0 to 164 [ 59.124623][ T5204] Unable to read rock-ridge attributes [ 59.186247][ T5205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=125 sclass=netlink_route_socket pid=5205 comm=syz.1.584 [ 59.186404][ T3095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.272325][ T5213] loop0: detected capacity change from 0 to 2048 [ 59.304446][ T5213] loop0: p1 < > p4 [ 59.309404][ T5213] loop0: p4 size 8388608 extends beyond EOD, truncated [ 59.333361][ T5220] loop0: detected capacity change from 0 to 256 [ 59.586926][ T5238] loop3: detected capacity change from 0 to 512 [ 59.615508][ T5238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.628265][ T5238] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.649598][ T4097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.665334][ T5243] FAULT_INJECTION: forcing a failure. [ 59.665334][ T5243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.678417][ T5243] CPU: 0 UID: 0 PID: 5243 Comm: syz.3.596 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 59.688641][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 59.698688][ T5243] Call Trace: [ 59.701948][ T5243] [ 59.704944][ T5243] dump_stack_lvl+0xf2/0x150 [ 59.709653][ T5243] dump_stack+0x15/0x20 [ 59.713798][ T5243] should_fail_ex+0x229/0x230 [ 59.718496][ T5243] should_fail+0xb/0x10 [ 59.722632][ T5243] should_fail_usercopy+0x1a/0x20 [ 59.727654][ T5243] strncpy_from_user+0x25/0x270 [ 59.732499][ T5243] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 59.738198][ T5243] getname_flags+0xb0/0x3b0 [ 59.742735][ T5243] user_path_at+0x26/0x110 [ 59.747149][ T5243] __se_sys_mount+0x248/0x2d0 [ 59.751810][ T5243] __x64_sys_mount+0x67/0x80 [ 59.756443][ T5243] x64_sys_call+0xd11/0x2e00 [ 59.761015][ T5243] do_syscall_64+0xc9/0x1c0 [ 59.765547][ T5243] ? clear_bhb_loop+0x55/0xb0 [ 59.770204][ T5243] ? clear_bhb_loop+0x55/0xb0 [ 59.774958][ T5243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.780907][ T5243] RIP: 0033:0x7fe1b8b45f19 [ 59.785362][ T5243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.805041][ T5243] RSP: 002b:00007fe1b77c7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.813473][ T5243] RAX: ffffffffffffffda RBX: 00007fe1b8cd5f60 RCX: 00007fe1b8b45f19 [ 59.821423][ T5243] RDX: 000000002015bffc RSI: 0000000020000240 RDI: 0000000000000000 [ 59.829413][ T5243] RBP: 00007fe1b77c70a0 R08: 0000000020000000 R09: 0000000000000000 [ 59.837362][ T5243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.845309][ T5243] R13: 000000000000000b R14: 00007fe1b8cd5f60 R15: 00007ffdf21b29c8 [ 59.853278][ T5243] [ 59.979192][ T5251] loop1: detected capacity change from 0 to 2048 [ 60.024360][ T5251] loop1: p1 < > p4 [ 60.032537][ T5251] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.096429][ T5254] loop1: detected capacity change from 0 to 1024 [ 60.270670][ T5275] loop4: detected capacity change from 0 to 512 [ 60.285009][ T5273] loop2: detected capacity change from 0 to 2048 [ 60.285900][ T5275] ext4: Unknown parameter 'fowner>00000000000000000000' [ 60.311236][ T5275] FAULT_INJECTION: forcing a failure. [ 60.311236][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 60.324200][ T5275] CPU: 0 UID: 0 PID: 5275 Comm: syz.4.608 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 60.334506][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 60.344633][ T5275] Call Trace: [ 60.347910][ T5275] [ 60.350881][ T5275] dump_stack_lvl+0xf2/0x150 [ 60.355553][ T5275] dump_stack+0x15/0x20 [ 60.359770][ T5275] should_fail_ex+0x229/0x230 [ 60.364514][ T5275] ? __alloc_skb+0x10b/0x310 [ 60.369110][ T5275] should_failslab+0x8f/0xb0 [ 60.373726][ T5275] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 60.379680][ T5275] ? __rtnl_unlock+0x99/0xb0 [ 60.384305][ T5275] __alloc_skb+0x10b/0x310 [ 60.388808][ T5275] netlink_ack+0xef/0x4f0 [ 60.393236][ T5275] ? __dev_queue_xmit+0x161/0x1fe0 [ 60.398355][ T5275] netlink_rcv_skb+0x19c/0x230 [ 60.403186][ T5275] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 60.408672][ T5275] rtnetlink_rcv+0x1c/0x30 [ 60.413101][ T5275] netlink_unicast+0x593/0x670 [ 60.417896][ T5275] netlink_sendmsg+0x5cc/0x6e0 [ 60.422736][ T5275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.428078][ T5275] __sock_sendmsg+0x140/0x180 [ 60.432758][ T5275] ____sys_sendmsg+0x312/0x410 [ 60.437540][ T5275] __sys_sendmsg+0x1e9/0x280 [ 60.442168][ T5275] __x64_sys_sendmsg+0x46/0x50 [ 60.446984][ T5275] x64_sys_call+0x26f8/0x2e00 [ 60.451691][ T5275] do_syscall_64+0xc9/0x1c0 [ 60.456216][ T5275] ? clear_bhb_loop+0x55/0xb0 [ 60.461072][ T5275] ? clear_bhb_loop+0x55/0xb0 [ 60.465805][ T5275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.471717][ T5275] RIP: 0033:0x7fe626bb5f19 [ 60.476202][ T5275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.495888][ T5275] RSP: 002b:00007fe625837048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.504356][ T5275] RAX: ffffffffffffffda RBX: 00007fe626d45f60 RCX: 00007fe626bb5f19 [ 60.512388][ T5275] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 60.520361][ T5275] RBP: 00007fe6258370a0 R08: 0000000000000000 R09: 0000000000000000 [ 60.528370][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.536350][ T5275] R13: 000000000000000b R14: 00007fe626d45f60 R15: 00007fffb5291568 [ 60.544334][ T5275] [ 60.553953][ T5273] loop2: p1 < > p4 [ 60.574745][ T5273] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.659597][ T5285] loop2: detected capacity change from 0 to 2048 [ 60.680738][ T5285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.824580][ T5303] loop3: detected capacity change from 0 to 256 [ 60.964837][ T5308] loop0: detected capacity change from 0 to 512 [ 60.971588][ T5308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.982529][ T5308] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.617: corrupted in-inode xattr: e_name out of bounds [ 60.996773][ T5308] EXT4-fs (loop0): 1 truncate cleaned up [ 61.506970][ T5338] loop4: detected capacity change from 0 to 512 [ 61.513584][ T5338] EXT4-fs: Ignoring removed orlov option [ 61.520559][ T5338] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.532139][ T5338] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 61.542319][ T5338] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.628: Corrupt directory, running e2fsck is recommended [ 61.568721][ T5338] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 61.577179][ T5338] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.628: corrupted in-inode xattr: overlapping e_value [ 61.591257][ T5338] EXT4-fs (loop4): Remounting filesystem read-only [ 61.598134][ T5338] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 61.669960][ T5350] loop0: detected capacity change from 0 to 512 [ 61.676691][ T5350] EXT4-fs: Ignoring removed orlov option [ 61.683908][ T5350] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.695465][ T5350] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 61.705594][ T5350] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.631: Corrupt directory, running e2fsck is recommended [ 61.728558][ T5350] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 61.736700][ T5350] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.631: corrupted in-inode xattr: overlapping e_value [ 61.750753][ T5350] EXT4-fs (loop0): Remounting filesystem read-only [ 61.757610][ T5350] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 61.805054][ T5348] FAULT_INJECTION: forcing a failure. [ 61.805054][ T5348] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.818347][ T5348] CPU: 1 UID: 0 PID: 5348 Comm: syz.4.628 Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 61.828595][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 61.838796][ T5348] Call Trace: [ 61.842089][ T5348] [ 61.845023][ T5348] dump_stack_lvl+0xf2/0x150 [ 61.849621][ T5348] dump_stack+0x15/0x20 [ 61.853854][ T5348] should_fail_ex+0x229/0x230 [ 61.858571][ T5348] should_fail_alloc_page+0xfd/0x110 [ 61.864082][ T5348] __alloc_pages_noprof+0x109/0x360 [ 61.869301][ T5348] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 61.874768][ T5348] alloc_pages_noprof+0xe1/0x100 [ 61.879788][ T5348] get_free_pages_noprof+0xc/0x30 [ 61.884889][ T5348] do_proc_control+0x174/0x850 [ 61.889665][ T5348] ? should_fail_ex+0xd7/0x230 [ 61.894558][ T5348] usbdev_ioctl+0x1bbf/0x3e10 [ 61.899257][ T5348] ? do_vfs_ioctl+0x99e/0x1560 [ 61.904089][ T5348] ? selinux_file_ioctl+0x2f7/0x380 [ 61.909372][ T5348] ? __fget_files+0x1da/0x210 [ 61.914049][ T5348] ? __pfx_usbdev_ioctl+0x10/0x10 [ 61.919121][ T5348] __se_sys_ioctl+0xd3/0x150 [ 61.923911][ T5348] __x64_sys_ioctl+0x43/0x50 [ 61.928534][ T5348] x64_sys_call+0x1688/0x2e00 [ 61.933388][ T5348] do_syscall_64+0xc9/0x1c0 [ 61.937902][ T5348] ? clear_bhb_loop+0x55/0xb0 [ 61.942573][ T5348] ? clear_bhb_loop+0x55/0xb0 [ 61.947291][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.953282][ T5348] RIP: 0033:0x7fe626bb5f19 [ 61.957690][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.977452][ T5348] RSP: 002b:00007fe625816048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.985956][ T5348] RAX: ffffffffffffffda RBX: 00007fe626d46038 RCX: 00007fe626bb5f19 [ 61.993911][ T5348] RDX: 0000000020000240 RSI: 00000000c0185500 RDI: 0000000000000008 [ 62.001863][ T5348] RBP: 00007fe6258160a0 R08: 0000000000000000 R09: 0000000000000000 [ 62.009819][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.017859][ T5348] R13: 000000000000006e R14: 00007fe626d46038 R15: 00007fffb5291568 [ 62.025851][ T5348] [ 62.229908][ T5365] __nla_validate_parse: 3 callbacks suppressed [ 62.229989][ T5365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.636'. [ 62.427378][ T5375] loop1: detected capacity change from 0 to 164 [ 62.434792][ T5375] Unable to read rock-ridge attributes [ 63.295474][ T5396] loop1: detected capacity change from 0 to 1764 [ 63.337444][ T5398] syzkaller1: entered promiscuous mode [ 63.342991][ T5398] syzkaller1: entered allmulticast mode [ 63.388718][ T5403] loop0: detected capacity change from 0 to 128 [ 63.395704][ T5403] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 63.465912][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 63.962555][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 63.962570][ T29] audit: type=1400 audit(2000000010.371:911): avc: denied { map } for pid=5423 comm="syz.3.652" path="socket:[12244]" dev="sockfs" ino=12244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 63.964016][ T5424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.652'. [ 64.095540][ T29] audit: type=1400 audit(2000000010.511:912): avc: denied { create } for pid=5426 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.135825][ T29] audit: type=1400 audit(2000000010.551:913): avc: denied { cpu } for pid=5426 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.159096][ T5427] loop3: detected capacity change from 0 to 512 [ 64.166128][ T5427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.178490][ T5427] EXT4-fs (loop3): 1 orphan inode deleted [ 64.184262][ T5427] EXT4-fs (loop3): 1 truncate cleaned up [ 64.217672][ T4097] ================================================================== [ 64.225872][ T4097] BUG: KCSAN: data-race in munlock_folio / need_mlock_drain [ 64.233175][ T4097] [ 64.235491][ T4097] read-write to 0xffff888237d2b3b0 of 1 bytes by task 5416 on cpu 1: [ 64.243546][ T4097] munlock_folio+0x42/0x130 [ 64.248051][ T4097] folio_remove_rmap_ptes+0x214/0x220 [ 64.253428][ T4097] unmap_page_range+0x1028/0x2210 [ 64.258440][ T4097] unmap_single_vma+0x142/0x1d0 [ 64.263302][ T4097] unmap_vmas+0x18d/0x2b0 [ 64.267719][ T4097] exit_mmap+0x18f/0x710 [ 64.271971][ T4097] __mmput+0x28/0x1b0 [ 64.275953][ T4097] mmput+0x4c/0x60 [ 64.279680][ T4097] exit_mm+0xe4/0x190 [ 64.283665][ T4097] do_exit+0x55e/0x1720 [ 64.287910][ T4097] do_group_exit+0x102/0x150 [ 64.292512][ T4097] get_signal+0xf2f/0x1080 [ 64.296945][ T4097] arch_do_signal_or_restart+0x95/0x4b0 [ 64.302497][ T4097] syscall_exit_to_user_mode+0x59/0x130 [ 64.308067][ T4097] do_syscall_64+0xd6/0x1c0 [ 64.312574][ T4097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.318474][ T4097] [ 64.320785][ T4097] read to 0xffff888237d2b3b0 of 1 bytes by task 4097 on cpu 0: [ 64.328318][ T4097] need_mlock_drain+0x30/0x50 [ 64.332997][ T4097] __lru_add_drain_all+0x235/0x410 [ 64.338119][ T4097] lru_add_drain_all+0x10/0x20 [ 64.342888][ T4097] invalidate_bdev+0x47/0x70 [ 64.347474][ T4097] ext4_put_super+0x571/0x840 [ 64.352163][ T4097] generic_shutdown_super+0xde/0x210 [ 64.357443][ T4097] kill_block_super+0x2a/0x70 [ 64.362111][ T4097] ext4_kill_sb+0x44/0x80 [ 64.366436][ T4097] deactivate_locked_super+0x7d/0x1c0 [ 64.371808][ T4097] deactivate_super+0x9f/0xb0 [ 64.376486][ T4097] cleanup_mnt+0x268/0x2e0 [ 64.380981][ T4097] __cleanup_mnt+0x19/0x20 [ 64.385397][ T4097] task_work_run+0x13a/0x1a0 [ 64.389984][ T4097] syscall_exit_to_user_mode+0xbe/0x130 [ 64.395537][ T4097] do_syscall_64+0xd6/0x1c0 [ 64.400017][ T4097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.405895][ T4097] [ 64.408193][ T4097] value changed: 0x00 -> 0x1f [ 64.412841][ T4097] [ 64.415146][ T4097] Reported by Kernel Concurrency Sanitizer on: [ 64.421278][ T4097] CPU: 0 UID: 0 PID: 4097 Comm: syz-executor Not tainted 6.10.0-syzkaller-12261-gd1e9a63dcd72 #0 [ 64.431753][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.441784][ T4097] ================================================================== [ 64.494341][ T29] audit: type=1326 audit(2000000010.911:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626bb5f19 code=0x7fc00000 [ 64.615391][ T5435] netlink: 72 bytes leftover after parsing attributes in process `syz.3.655'. [ 64.627138][ T29] audit: type=1400 audit(2000000011.041:915): avc: denied { create } for pid=5434 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1