last executing test programs: 3.41751573s ago: executing program 2 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="780000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000500012800b000100697036677265000040000280060010004e23000005000b003800000006000200040000000400120006000f003f00000008000c000900000008000c0044000000050017000000000008000a00", @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r9, &(0x7f0000000000)=""/45, 0x2d, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x200000000622c, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='syzkaller\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='sysSem.x']) 2.555459491s ago: executing program 3 (id=289): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\a\x00', 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x5, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280), &(0x7f00000003c0)=0x4) mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000029252c7569649caeac8486b8d40bc70a5ed413ff07b7445156df21edde6a10007f1d9bf18d"]) capget(&(0x7f0000000400)={0x19980330, r1}, &(0x7f0000000480)={0x6, 0x0, 0x5, 0x3, 0x8001, 0x4}) r3 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) timer_settime(r4, 0xe54aef35e9c2845d, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3fffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/35, 0x23}], 0x1}, 0x2000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) 2.330381784s ago: executing program 2 (id=291): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 2.281711887s ago: executing program 4 (id=293): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @empty, 0x407}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000040)="9e", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000380)="a732", 0x2, 0x3b00, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002080) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0xc]}, 0x8) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) pipe(0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x56c1828cbd56d490) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.281447696s ago: executing program 2 (id=294): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec00000010000108b000"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2.279641327s ago: executing program 2 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x101, 0xae3}, &(0x7f0000000240)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r5, 0x0, 0x0, 0x0) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x42, 0x1, {0x2, 0xb, 0x1}}}}]}, 0x40}}, 0xc0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\x90--!-\xdc@,'}], 0xa, "fdd32bd06e21d34be4ff43a194318c7c5a89666b97a0d867dcae7bcc65b3590309b8a7024ae37cce4e9c2890cabe5af3f7270dc75c9a173af66a239e060fc239d05265ed4839ea7c66c76518651b0a1b7a629f1a08e94333ed56e976e1b98ff3a21dec2ab4d090f26d1b7c53c5295ce6c821e61001b1a7137f9b228f13f955b7f1be4a9d68b685fdb9665d59e7b2e2cf9173cee800cc2d9a739c9e5219e57bad9ed66a4225144d15b461cbf6af41059cfbd5b41662d40eb801a9707725b62463957b9204d4e860623307cefffc94f7c28371ffb09928f6f10247c565f1fb0a38e78c923e2489db320455923ba00ae5470389e5805a8c4ecdf8bc21246d4514cdd1817bd3ece7a4324da675210e8fc6a7d6c9bbaf1a1f6bcf4f2ba2866586cbdeb486b96f25148694e8bb5d183da123ffaf5e18a473dcb0249c2d6f7c1644e5c11197ba3d228821a000809fb9243e608f84ef2cc59d7d9d16e5de3477e097c3a62beacc13dd7f7ea90c015109ae5b12567fe5b867bfdc36b82feb6d6793f5892a8b5daec2a6a580841f93202ee651fd89429a89016691204ab4960b643ab7e515034ed939b5c87d422f9dc2c763a0fdf1d27f22c76d9838cef4e3a40f498878749535091852b900c0318b99d99daf15c2a5db04aa574a6cf3f22c7385dfc1f6dec82d0d092454f8f18b2d04bd612cd07e2d95e6f2ae568b9ee53c7826020053ffedb35061136446dc4fdf339b37bfe16a801237335ca613030e4760d214d62a849fec399c627405f2b4588da282aff26eba398752692e3a60b7353416b24ed82fff9550e14b03082cd96d6aa7b9bb4ddb35ba85541916e816a528b897c833e75e62b0c09ae671c981162880c9a96d131d2f925663b4b5e65b5787cdb6bd075f1c0e26e8024a3cab8554577c3726eee9815299250a5cbee077ee4331263ea88acddca787d13b500d87121aae708045d26078a268e122f8fc6b981913a480f3949f0fbeaad797fe8aa5e970366938a56f40957b460acafacd7f5b541badd2f3660681ef796c60dd4725594f855a38c191875196160ed551ef6b8e297f1ea2dcd96f5497d80b06fb6c3f00b1322867079d4fd5a2cab335211c4886bf5659515c2276e613170c1cbd08460bdd475d670b98adf59e9dd2c45865073a79be7f9e8de7dafa4d77abdb44613eb64a70d5219896dcb9e515ab6e99d101e8fb92d7ecce881e5db18d713cbe4835bd1b49c7278edbbd281e60dbba524119acb9aee550744bc8a4e9017b783a4acf16b5a00b57e1060e7a26cb5bdffb6147b2c4d4927b0bb0fa190cd747937d5ee0f78efc55659f370fbd086d254fd867f26646928e0843ebfd4a44b64561a1a1086ce922c2ff93491384c72569b4ceb6b99156d8ca5ec2d0fa9e443eedb04b7eed137b8201fed07da9a00af1dffe8127fcbb65b4c0111ed794d62ad0cbd753931e0850f1e3be9fceabef775f45a33fc96023a4c07cb0e07b3285debb1c6d36e14ed41f98f408661fc752eabd6f5688b0fa727f63261e5de961db03a8c127bd4af1353e361fab6f0b1570e03f260266e3477b2f7172d5759784900946290fb57620e01c96c996ce38093195e5ea1750c1577d1ded5e9d51127aaa61bac34fc044f5713a5c319442e306012b3b6baab39b02044bcb535a301006a4cb08165fe7273ab51c6b8d4dc9e7e5b49e61f05d7b940308b025c4894cfd9abf7ea35496195a7e1be6103bfb1c611b8fa1a86afb48fcf9903aa0dfc95fb0583a6dca70a65f530b110d8efeb947432394c34e9aab90c26c3044a2c1a9899e595128dc2c2f0b0939166ad53405e37e4f373e0cf2c3d3be2c371cf572d6523fde6a994ff6442de4b3d15a0ef9221f2111aecbe985173bb53da2efcd6be86e6da0b7cb571e4c9eae094af8d99be8b0e53bf7f1117d131629d81bb45cd9fc84de60ac48ec46226fa6e4f8ae57d97a73c46d265abd7c4b2cfdfce03776e826b8451e1c48a101a82096cd34c47a546a36ff081947347f1bb4c77f6f2fbafabf7c1ddd5379d717b00bf1514d7520edebf00cc9ebba7677b030e8103547f4585bd6e84497420f9eaea6b1511f52774d52640a25b820595da6d7320737cacb60b047e40504911c21a5461713ae3146f8c0cf6e2a7f06c8a96b07a706cfe69f090a69425c306b0ae2170971bafa2c9a0760e1985c61be4d2b0597fe6f80a8f8de78f0e1c994ed846e9465db2b165adef5062066c4a5900303c4fae77609a9246cbbf31abf55ecb899d09628c8b825f1cb3b66180eaaa8aa559f749a6a6efeb8ebbabf44bb65c8bde9d1a73532290d981b79ca30cdd80b8e9085ecd0ca88b92b08b9f5a5494be1772ab22d7ad11c782c7e4f45809709d9b8f78a581b094c97ea98b25497db0bc1085b3d66a6fdbda64f656aca918dbe939fd97e93526d80bee8f66283759cd332e4862c2651c92ccb118a2694df19d97c2d27ee70fd2e6e0cb0159e65dfb48773e3a81eebcda44194fc60a2934de63140fcc6d440481c5f7a84a029d1d612f6881d289193415c233b74ecd2f14ff7fb915c685eab0d796a20f123545d7c58da0512e3455f16195590e4f4fad90c706a3d5880b6905e6c66b73aa854b678a0317000a9621806f98397a8ddb4ff16ae82a486642a9302590d5ae69b54d9bf693686d5da60a9adb0d54433bdcf380f7cfa72bb81bc8fd36c4f1e7f6f6db8a89a672702d2bd6a9fa12496b34d28db07541535668e66686a1dc1e9e314edbce5376360f80496396265012633d348978f8fcd1d3f1c71663ec1b21a7f4bea492a3ed5abd9c14925774b1cd897626a26f09bf690ae2fb22a223100a3b437436cb2fc627b7ed548843e32f2e8611a4c9e6df8fbbbf2ff5ce66a3cd4fc8ebbdcbf71a1600857acd2c69295917f676f91359bc2cd6dffcd587aa376a31793cfc3ba35e63a0a300b0e0ffc2ccbe16e43885e8334783363b9bb77674de421f0943bdfdf1002875efdc6cda40d9dacb0fa78c2e1f7a6fa196cb0091ed6df23a1b247f75c461a8d869e6d9b4dfd85a762467ced35212884b2db725f192e59cd23abaeb102a3697ee04fe697bbeac62d13868fd37d4e2b6a2ac7cda5e0a94b49036f40429a5c40cecf37248e312342b2b51f7a05ca90e00db5977830a4d164ba12ed938d53f5578b0610c3a69868ce4a35f8151b170349643b5ead19ef000547e051580f703c7c6ebb615d2dfc3fa92d21037cc303bbd61a73082e638e8acadd81146ee47a78ba04162f6503e327e22361f9856e4c303400e2d640253413547976c9f307d26ef4b1f32cf3aa43d042b4a2ba64a2d40f6367321e7b0b3d6b387cf70ca967120aa75bdb81a4881ca9e2e081932889c51150fe4e323e0fe90387214dd9cc4ed4d780c322ab00f1664111531074a496ee57d876f5e44a7b15b71e77cbb6a4f8450f263b68f73b88796ebf3dc21d85ba226de0c2ff96e0450421a100d6673c0874aebf2b138ddfd39e6441f427b76f56f11d01c732f9ca27e73e7d294d0af93a6e0116b6e7164126e179169777e126a20a4d67130cc29f9613e8864eb9a3b1beb67e2a4b36f9c94dbb1497b994082c5f648571e3fc21c9c74abd298d410ec061fb661cce1f094291c990b0feb0caacfd744796f9208896a4c49542616e4c42b0ac22db0dc12cfcb87050ebecdce0f0e3a2c9ffa3e0a65616db4473f6ebe627179f378ae13c7aa3b93e30539a9643ab16600ec69a5a38670ec4f0a5709b5e53992a261aa8ab20f9d0a57b83ef91df0f6710a2457f907b25a3680959a523d32fd97d2962088103f447a7e1998cbb5314272dbd438af4236fa2d65d90b0d2fdfd65ca24f43ebfc5648453a1ce51fb4e2a1d001ba8d898c497fea97e87e2a76eafcb9d0bab8865a09517256de6df70caf72f5c9785c99159755a553a4739432593294574cc4862f35a5a80da169ad449772e0de1e95513039ea9f6065d9a28d54ac7bca554411b21b0fbea8d70dfacbc148af1db74d1669739e6622e4ac2eb4458fff2ccd39c09e42f2f0c93df785a846859b4f686166c6f45ecb97698cb3d35f060201f37ba053ed45355847195fa67a92bd27552fdea6bde3144080dd5ae0428258e1a13dccac03b4b36a613076a21cc9fca5e26fd7feb452de3f9f5f9b984e6e2d6055338ab84256874abbefb60877603e9e0909427fd0f32b2e05d909964bb2732d5191e0b98ab8b4bb83e1143fa86c2761b224371fdd54e88dac31c2bc89cfff580dfcb8398b6fd3fbbd197564b049d227681a06db01babcf44e4b19614c33c3f82d2edc1cce2efc914780957c8e0b5962536cbdf42385e7c22dbec021051ecddcc0dfde3f2d73d0e37fa8552972c3ce4bd6c863be649983a68b6bee9a6f6838c08915ce8a7be1a5f79c6c1a412e6624c5adfdf5fa97a421793e1991b0c431ed8de42bd1036bd0000502f2dd36a9454e6920334dbcf051e117f12b3a4bac9a592ef4471062cfca8c2f506be9f5a029c6d251333656064ffe079088254acd278c2a56ce8297ba3b67ecfe5d1daaa6889acd5a934df029a00ade8a2a9e1879e153b73c2cd0fcbb74d62067af4d4457a1b35f86f745673a7707bf129d96f9694b0e991c4ce646ace7ac90bca54fb3b30ada13aff7046a93c1e079960f56b862581c7847f03a461f7c38d68d19f05aa3cf0fa820cc610306eb84c59c44a06542dabd98b64f59143c78b004a74d73a2c2e510786a5a5c17bf080bb951aa2f30262c9478f46d227d1fe6f0520482688e1d5521a11d223b65e021354a6b209e7373c2cd619a241d2ba04fb1d2d2db5e2933b50ffc13455c1afdfb3065eeb57021e3151fa3ad31e568ccaf0ac825ebf6fb845bb8106c0aa093f125fd60cb7f202f75af56840c21d18948f7093c0f16306bc06866f49bcd9576e675d2c169a2307cb0a88a8e390af72b356f0851f7d9c118bb2718b8d71ac38eefdfb5670db29f9fc6a083648d5393591bedd178ff893fb3c365e0f0f8e44b9aa98b274bf0584d9e21d06b3f473abf46c12b1cac594c07ce1890e625719a600b493aaa3eaf96b03c0d16ec514a0185fbcbcba708a6b08458d17a4c6fcced6f366924f66c3679f9fd62b24d1e651293e7779303b8d2d71edf8a08540c930b382437ccdb3ead2de3b4b1d14d5ecff93ef984dcb27ccaf0ad2c7edd2510ce482830b19801ef8192fc6337f191d0cbe184798edeeeb01e43eef2e5b160f66c10e049f24055962404865653cd1c31362a952c75a72d89cce5c05e95aa74f472021c792d7a60474590d704adade65b106cc0f156f68ad5c446e8d9c1ff11bab186b7e77d2676f97d22257da314460d0ff77d83596bff05c2e7b84fb98d82d4a7c3a9a99919e5620114c40ceb5f9047cf7b7bf5d6016815991df2e416bc9db5d2853ae8e6cbf9a6c6e76481bf7c58224252971b702f5b01edfceb07edc06663589f68b062d38ab9964db9fd93e00358bca3241c1e15b5a311862dbcf84cc5fd15698d27b9680c99c8299f7127a670abfccd4147a060a36858ad789773c1896e2b30fc45e509925ec17b65e0072c65eb60275c54b9719cb92d0535cf584879fc2b280933819a98305a4d84052f8a3a55539e8df020e2a25a189c9293ab857e29536180755daae188ba6b594411530c0f288f2dccb8ef4d331293ca0ab9bd9a09a06c77befc876c799b4468dbfed1a2beeca6ef849687ee9ce5741db9c96b24b217a08b7eb946dcba84f3173def00018f06794ce290a245f4883180846542442c0554f2627ba8d2d1c7d98aa38ca13ad6b"}, 0x1014) 2.257497898s ago: executing program 2 (id=297): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="800505047059bf682377040433903ed86be2e90fdfc4", 0x16}, {&(0x7f0000000180)="aa7c86e77e9396187262c84456d9440e5451990986383dd62720b039ef11f7b2698107cf00b6cbe9c918a71acadb2a49a63439394bf2c3576ef122d9a5cd0024c057af45dcfb550c9b5a33b4282eb24d58d36241f021d62a3fa1394c59781392fa938c98f60b4b9efc4aa0882429cb1241b82b2a65e44a4578017c26470645b945015e04655c02ee5e536fc42471a45311636f3b7391a5ea1bf7ae9e112b8ed8c8114a3ac5c5e44e3d4cc5944aab1a6dbda85a21ecb63ad5de32461e", 0xbc}], 0x2, 0x1ffd, 0xfffffffc, 0x3) 2.114981286s ago: executing program 2 (id=300): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) inotify_init1(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.701200981s ago: executing program 3 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={r0, r0, 0x9, 0x56, &(0x7f00000001c0)="618f9f51f142c0afb14fa25f7e149c10c3a899d5103990abbb233b35cb24158538cdfcb847045c6fed8da5a93c3ee22cc656d2367e58abaf8e751fcb338023df6e86da45076c91b02331841cfc110ee537e604d4006d", 0x3, 0x5, 0xa, 0x1, 0x4, 0x1, 0x3ff, 'syz0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40080) 1.641569454s ago: executing program 3 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x2b, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4}, 0x1c) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_open_dev$loop(&(0x7f00000001c0), 0x71, 0x2000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000100000000000000000000000000000000000000000000000000000feffffff0000000000000000000020000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 1.141508653s ago: executing program 4 (id=308): add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x2000414, &(0x7f0000000780)=ANY=[], 0x1, 0x2b8, &(0x7f0000000ac0)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x210, &(0x7f0000000200)="$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") lseek(r0, 0x10001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="f700000051000000080000000200000000d70000d90bba8193802567650df674fbf658a6676ace4f344a8c478d10eddd0116adee95a76466e51d3bbf7862924d10193cdeef6051d87a31b7cbe5eb9cf199bd3daef1a7d9bb41525a525402a5f12b073849ac9515cc090ddbaf7973713a308f790537442bbe552f3c94c163686b26ea2148cde0846aae6fe6a8f2109082b8bb6fe945d2454bb65d16bdd360168d6c82d2b07537", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB=',\x00'], 0x20) eventfd2(0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) io_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1d9) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x144, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) socket$key(0xf, 0x3, 0x2) 1.048666729s ago: executing program 1 (id=311): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) (async, rerun: 32) exit(0x0) (async, rerun: 32) close(0x3) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffffff, 0x0, 0x4000, 0x74) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x5}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x1}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async, rerun: 64) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008f745000070000000000001907864010100ac1414aa0b009078032c00004500000000000000038900000a010102ac1414aa863d007d814e3ff155bf14933582e90000000010b4f6db7ef939984b6ca70f000000000cdf61168c24ac88ad078c000a2189eaa200"/126], 0x0) (async, rerun: 64) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1}, 0x0) (async, rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) (async, rerun: 64) r9 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc4, 0x80012d58, 0x12d5c}}, 0x44) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x2) r11 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x6, 0x0) (async) mq_timedreceive(r11, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 976.174293ms ago: executing program 4 (id=314): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2f8d, &(0x7f0000010400)={0x0, 0x86e5, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x1e36, &(0x7f0000000040)={0x0, 0x5afe, 0x10000, 0x1001f, 0x31c}, &(0x7f0000000400)=0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, r6}, 0x14) syz_emit_ethernet(0x7d, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa810000000011aaaa"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x140, &(0x7f0000000000)=0x46f, 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r7, &(0x7f0000000180)=""/174, 0xae) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000003c0)=""/174) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a000006090002adc7fc32250324e456a90073797a31000000000900010073797a3100000000200003801c0000800c000180061c0100000000000c00044000000346747a72ac8d160000110001000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x10012, 0x0) 775.953164ms ago: executing program 3 (id=315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x264, 0xa, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x8c, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}}}, {0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1c93b73c}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_DESC={0x1a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x749c}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x98, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb33c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb1e}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x20004892}, 0x20008800) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@cswp={0x58, 0x114, 0x7, {{0x9, 0x3}, &(0x7f0000000480), &(0x7f0000000540)=0x7fff, 0x7fff, 0xa, 0x1800000000000, 0x2, 0x8, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x8}, 0x0, 0x0, 0x7, 0x3ff, 0x6, 0x36b, 0x6e, 0xf0}}], 0xb0, 0x4810}, 0x4004001) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x2, 0x80805, 0x0) bind$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000200000000000130000000c00098006000200"], 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 773.812665ms ago: executing program 1 (id=316): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$key(r0, 0x0, 0xc885) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x4, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0xfffffff9, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000a00)) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x20}}, 0x4040004) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) pwritev2(r1, 0x0, 0x0, 0xfff, 0xc, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) shmctl$IPC_RMID(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180200000ec5000000000000310e000071108100000000009580000000000000631d1f100a3a8e42a751a1c07a24c1092fa765e60c4dbeb17f4271630f979c5018f88c52fdda5dfacb2f7f1081fe72dea5c46fd026a59023ce72e8d9466c0c492b60df0c11820d2b0029c0088f91f9506d0cacb2df2e88c98f10a7216e46af268626fe1479bdc0c80eba77c5888ad74ae938be46f9fb26b868aa59d4ad19fc92045f58a0e817b79b4166b9c830ac883c47bf34e14954d5f70876f5c3b50ffeab3281c920aa42730b598319d200"/219], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x0, 0x1b8, 0x428, 0x428, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x20}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], 0x10}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x6, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000100), 0x1, 0x4bf, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r5, 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f00000026c0)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r6, 0x0, 0x4040014) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) 716.888688ms ago: executing program 3 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0xffe) 621.745424ms ago: executing program 3 (id=318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r2 = epoll_create(0x802) epoll_pwait(r2, &(0x7f0000000400)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x90000009}) ioctl$FS_IOC_GETFLAGS(r1, 0x5437, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xfffffff4, @loopback, 0x3}], 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setreuid(0x0, 0xee00) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xfffffff9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r6 = dup(r3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x8003, 0xbffc, 0xe654, 0xffffffff, 0x4, 0x48, 0xff}, 0x9c) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001040), 0x120600) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) shutdown(r6, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r8, 0xfffc, 0x5, 0xb, 0x4, 0x4}, &(0x7f0000000140)=0x14) socket$unix(0x1, 0x5, 0x0) getpeername(r6, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 596.857655ms ago: executing program 4 (id=319): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) r5 = epoll_create1(0x0) r6 = getpid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22400049, &(0x7f0000000180)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@data_err_abort}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x1, 0x471, &(0x7f0000000bc0)="$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") kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f0000000100)={r5, 0xffffffffffffffff, 0x3}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="5fa2d13cf47272a0692cb6a53d79303245120931fded3c24af79c6105d1300bbc734130eabbcb3d17fdf48f108d33774158a225e39467afab2641e311c5940916f19f9dec29be989aa9f2af9c28a39a1fffd5be59c79c41c5aa1", 0x5a}, {&(0x7f0000000140)="dab32add819dbf219fd71e5988fe42be19e936a13f0e6209036f7b4f54dec541510ff95059fd24711b6a17ffcbd4b372d6395ba6e3", 0x35}], 0x2, 0x6) process_vm_writev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) semget(0x2, 0x3, 0x80) 389.331637ms ago: executing program 0 (id=320): socket$packet(0x11, 0x2, 0x300) 325.72434ms ago: executing program 0 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40741, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0\x00', 0x800}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0x3) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000044b4f1962a32a016421e0db2c504008884025afc78381cc82e2e82d6594ce6913c4510c0e87bc74cdefb70ed09e5512b8a5c2fb0c3b0da772a8f7f0f01c7a7cd8d6271dfd8add300"/90, @ANYRES16=0x0, @ANYBLOB="21031fbd7000fddbdf2501000000080017012600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000004a000000"], 0x30}, 0x1, 0x0, 0x0, 0x40040d2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) 312.444392ms ago: executing program 0 (id=322): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=@newtfilter={0x468, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x43c, 0x2, [@TCA_FW_ACT={0x438, 0x4, [@m_police={0x434, 0x12, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x468}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (fail_nth: 2) 279.869984ms ago: executing program 1 (id=323): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900482f00fc020000000000000000000000000000ff020000000000000000000000000001242088"], 0x0) (fail_nth: 3) 279.126124ms ago: executing program 4 (id=324): add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x2000414, &(0x7f0000000780)=ANY=[], 0x1, 0x2b8, &(0x7f0000000ac0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x210, &(0x7f0000000200)="$eJzs3c9uEl0UAPADpcB8+RbdmZiYjHGhq0Z9Ao2piZHEpIaF7prYVVnBBti0j+Er+F4+gOmKjRlDhylIpwRJB/zz+y3aA2fO5V5uuLDhkEXu673P0W7Xov4ikpjU4iDqUbgIAOBvMsmy+Jblfr26UcWUAICKrfH+/33LUwIAKvb+w8e3Lzudo+M0bUdcXgy7w27+P8+/ftM5eppeOZhXXQ6H3b3r/LN0+bPDNL8f/83yz/P69DrdjIhuM548yvPT3Kt3nfTn+lZ8qnjtAAAAAAAAAAAAAAAAAAAAAACwKw8iLZT29zk8XM4ns3x+a6E/0FL/nkbcL9oDz9sDZefbWBQAAAAAAAAAAAAAAAAAAAD8YQaj8dlJr3fanwetiFi8p1Fyze1BbTbwWhfvPqjHZuXJbJkbPGht9hRVu8CkfHPXCaLxu+zOpkF6VwO2im2+mUqitqI8y6ZB+augaItxa3kzIlZP7PHxpuuaZFnW+/KwPxhFtvLi+RnRKj86mtWcSAAAAAAAAAAAAAAAAAAA8O9a+Nb3De29XcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALZvMBoXv/I/Pjvp9U77g9HawXlE/B+lqWRhwOng7YjYv/oLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd+9HAAAA//+TmBrH") lseek(r0, 0x10001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="f700000051000000080000000200000000d70000d90bba8193802567650df674fbf658a6676ace4f344a8c478d10eddd0116adee95a76466e51d3bbf7862924d10193cdeef6051d87a31b7cbe5eb9cf199bd3daef1a7d9bb41525a525402a5f12b073849ac9515cc090ddbaf7973713a308f790537442bbe552f3c94c163686b26ea2148cde0846aae6fe6a8f2109082b8bb6fe945d2454bb65d16bdd360168d6c82d2b07537", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB=',\x00'], 0x20) eventfd2(0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) io_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1d9) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x144, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) socket$key(0xf, 0x3, 0x2) 185.654769ms ago: executing program 1 (id=325): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 185.426849ms ago: executing program 0 (id=326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="df12c9f7b9a6000000020000000096fc36dc2f8741d451f4117d2a7e856d7783dd24c267235638bc9848dc2a4802eb8368252950343416c0cc5e97c1ad38221bbee42fa6889347a1142eb02d2082edef45e3e6c986b5ac38b4da20680e38cfb2654edde484745f8540011d9bbb54745dfa48054f466adddae71c126e89108ffcd3397aeb659b430910aee5cf2cfb1b2ea381441c09a0d2edc5c3cfbc2e5a73945b148d5609de2360726517cd100704031259b829b7f8201a02fc0278a61d1dfbfa5d8840ddf3271e47444e87e3400b3f291c695dbc4ef710b0429828c87229b506bd7893194745c04adf82b656cbafa7d5c64ddf8e9beb0991b60cfff30cd024686fc44699e925d7e58f5756bde679da2a71755539a5f0f8304a7c378afdc42aecd4b881f1cd91a5f038e4a6981088d7307dbe16ba236ce0e69af08025e6188f8f0f920741aa719c6f5d848eaa760443e50bc849d6891481a26ce7cf06eb91553bdb6f27b7dac817", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) 185.005269ms ago: executing program 1 (id=327): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0xee, 0x1, 0x3d3f, 0x0, 0xfff, 0x4003, 0x58f, [{0x200, 0x53b0, 0xb04, 0x800}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan0\x00'}]}}]}, 0x68}}, 0x24040084) 154.026241ms ago: executing program 1 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003180), 0x111882) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000031c0)={0x0, 0x0, 0x0, [0xfffffffffffffc00, 0x2, 0x0, 0x5, 0x8], [0x5, 0xfff, 0x93, 0x4, 0x91c6, 0x0, 0x2, 0x4, 0x6d, 0x1, 0x1, 0x757, 0x10000, 0x5, 0xfffffffffffffffc, 0xe, 0xfffffffffffffff8, 0x2, 0x1, 0xd, 0x6, 0x8, 0x5, 0x800, 0x100, 0x9441, 0x1400f27e, 0x3d80, 0x5, 0x9, 0x40, 0x8, 0x8, 0x2, 0x8b73, 0x1000, 0x695, 0x80000000, 0x6, 0x3, 0x3, 0x1, 0x4, 0x4, 0x5, 0x3, 0x4, 0x100000000, 0x6, 0x3, 0x4, 0x52d, 0x9, 0xffffffffffff0d45, 0x3f8, 0x0, 0x28d1fcd0, 0x9, 0x80000000, 0x5, 0x1fa, 0x0, 0x1ff, 0x100000000, 0x7, 0x4, 0x2, 0x7, 0x3, 0x81, 0x2fa8, 0x7fffffff, 0x6, 0x0, 0x80000001, 0xd18, 0x6, 0x5, 0x4, 0x2, 0x7, 0x0, 0x7, 0x6, 0x2, 0xffff, 0x48d4, 0xffffffffffffff00, 0xffff, 0x7, 0x8, 0x9, 0x3, 0x7, 0x63, 0x9, 0x7fffffffffffffff, 0x6e8, 0x1ff, 0x2, 0x2, 0x3, 0xb, 0x401, 0x6, 0x400000000000000, 0x5, 0x8, 0x2b8, 0x0, 0x5, 0xeba, 0x5, 0xffffffffffffffb7, 0x6, 0x89, 0x81, 0x0, 0x604, 0x4, 0x40]}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003600)={r3, 0x3, 0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) recvmmsg(r5, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x4000}], 0x1, 0x40000022, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) sendmmsg$sock(r1, &(0x7f0000003080)=[{{&(0x7f0000000000)=@ll={0x11, 0x17, 0x0, 0x1, 0x8, 0x6, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="b295e216ab226ab4c3228d50c3c8fb88c983ca04c8288805fae6c239c59600341182e8684ea2a06b800a", 0x2a}, {&(0x7f00000000c0)="6c79b21c09b64ac10be3150124a80cdb99b3", 0x12}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000100)="48c66f3e99ec7b", 0x7}, {&(0x7f0000000140)="f971985949388092e48f78345d7a5dff9db52b72f4ac6fea9f514abbee73c1", 0x1f}, {&(0x7f0000000180)="b5b52f035a9541268b8633fb5ebbfc0f9708f5bb825fd08c75f630ab7e9b5348ea54e887b9f4591b006b3b19264fd2075e96bcfe5d71", 0x36}, {&(0x7f00000001c0)="572f31b2b72d5ef822034b512624bf0e60233be349fcdb4cecdcd8ef070c4c8be34f4ed30bb1ec33beeac68f80c457db4833bcd4a2c16c244da8ab1805a237", 0x3f}], 0x7, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xf28}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xc0}}, {{&(0x7f00000003c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf033, 0x1}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)="890245b37186fa6657b7d71a9ec27895df04744da263f444021a6e4ecf3922894d53d5ac10eecc5372b7eabf1540af80bac846dff14b3558aa45ad9cb0a9e9745919d5ababccddff9d02f63c1d", 0x4d}, {&(0x7f00000007c0)="27762c9c72cedf0cc13877d9a07f3a0a7d54b389ed9202dca6f133382f203c90720b7ccd55beae5b46a443b0f11fe45d77b55a89c0ac999ab3e18983c663a31b83c74eea6dc647cef3bea7f644f3f778131980418cd1e5975907023d16c80bfed514032b6f0435eb2d3c1cff03ad3c02ccc4f73eaa83d8878967a010", 0x7c}, {&(0x7f0000001a40)="399d5c6cbe8fb7b31ae940e2420a5f7a4719215c4a7fb67766c798a36b1707b878a550fcf4b5330e4a583ad7e3aad75ade558a55c0060e06c6eaa554c627ffc8b1b1223fb15d2ee8e20ce88e8387749444ec5daad32f716bc262b03b328857febaaa49192e93fdf01239f9616c78559a78713bed65caff142b0d755bb8b08c413c4255195e42bd61edc3ca4352a84ae0f572e98097017a17a57c00d26454a5075904", 0xa2}, {&(0x7f0000000280)="d3261395c136696795aa7d3c2e", 0xd}, {&(0x7f0000001b00)="c1012d98fb98eefe9e64e1fd96ae6a10b8c3072edcd96c0fb7c2c15e18935e57e02848a69f80349e26ef7293cc5b04d529138bdaf074076e7930ee5bd0dc7299e86e62a7ec477c742e3460f42f2bbd1a41f6d4ffac48750033c0a9eb3678a8589b68a6bb2635cbc592583286f806551a354546f82b1f73ec9ed3db5a3a1275499c604b14ec8fada565b716886152c44d343807b1963c995803cb2aee84a032b22648b43b170923b38bd944e32b583b1d51ad03e099719c4a7450d869ed571371ea2ab95dd962f20170175058892ca3021c3a4f6a9ff4ec052e6dd9ca3f87088ae53c23b8a49be5e11520e0bff9e637", 0xef}, {&(0x7f0000001c00)="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", 0x1000}], 0x6}}, {{&(0x7f0000002c00)=@nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002c80)="928281c0bd6bc54aedc5b5e6839dc6fc78325695fa743f405fdc419c99f26bafc9ba82fa3beb2ac2367d963fd96544a1736e58e0b9b4b54845f538e5652fcafe7c92d100ce5047f383a84a801e544e2673989d4f935b2abdd9", 0x59}], 0x1, &(0x7f0000002d00)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}], 0x60}}, {{&(0x7f0000002d80)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000000580)="64543785cf8b534f154f72410e339088f6d0a5eaae6e8bf0f9cd4d28ce39245e3c188fe8", 0x24}, {&(0x7f0000000840)="f3218d7d6f5426651d77890fc4e37ed00dd7237f0840f7360bac9013ccbfa65f6c1265127ee97154fa6f829a7ba2a5f9386ba73c46f6a0fe", 0x38}, {&(0x7f0000002e00)="e72dddff04818b0cf3541b520821ba230bd61e6ba547b25bcdb9ceb00101b223355c8f285bf21ecacfc17cabc40ca9084234c00793137c827c3ad872a3655553b73f94e0f3c2a2bbbbeaba2de73aacedf4aad1e4752d6c6bd1ea391db7375259a8239c9a20da03737a29f5ea4fb36b1372802efe14c9eb37a79ef14b3e28eef59f26b1856081bfe70535c89ac54cf4e378eae023ef9b44568271313f5b9fe9b9f96a5c31f36840e3d98bef70d83610a3ae9e55f8dffc5d8445c85560ba", 0xbd}, {&(0x7f0000002ec0)="20340910028b2a9b0ffc3ca05dcac2854ca27f6910a858dd57f8c1cb5d1ec78487cdb7dbea3069040fb0341ad41798b4645ec837d0d1a67efd6c3b121ada0f83ac76edf69627675528965857d4a08ffb0aa6bde7", 0x54}, {&(0x7f0000002f40)="5276019eb7a24d5010a25f39e1cb5fbcfc9d1101b0f1eeefe0e59048d3e5b26adb940ed5ac2ace041f5c4ada863d5a9f766a05de54de0082f4852eb81bcfbc217d7d7d18a6898cc727a99eae1006", 0x4e}], 0x5, &(0x7f0000003040)=[@mark={{0x14, 0x1, 0x24, 0x500}}], 0x18}}], 0x4, 0x80) 89.346825ms ago: executing program 0 (id=329): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) (async) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', r2, 0x7800, 0x8, 0x2, 0x4, {{0x20, 0x4, 0x1, 0x33, 0x80, 0x66, 0x0, 0x80, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x33, 0x0, [{0x1, 0x4, "3cf5"}, {0x2, 0xf, "75fbb66fcf2cb46ef923a0cf2d"}, {0x0, 0x4, "c5be"}, {0x6, 0x2}, {0x6, 0xb, "769fbed55efa9d40aa"}, {0x2, 0x9, "6b684992989b38"}]}, @rr={0x7, 0x2b, 0x28, [@private=0xa010100, @empty, @rand_addr=0x64010102, @broadcast, @loopback, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0xe2, [@local, @rand_addr=0x64010101]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', r2, 0x7800, 0x8, 0x2, 0x4, {{0x20, 0x4, 0x1, 0x33, 0x80, 0x66, 0x0, 0x80, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x33, 0x0, [{0x1, 0x4, "3cf5"}, {0x2, 0xf, "75fbb66fcf2cb46ef923a0cf2d"}, {0x0, 0x4, "c5be"}, {0x6, 0x2}, {0x6, 0xb, "769fbed55efa9d40aa"}, {0x2, 0x9, "6b684992989b38"}]}, @rr={0x7, 0x2b, 0x28, [@private=0xa010100, @empty, @rand_addr=0x64010102, @broadcast, @loopback, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0xe2, [@local, @rand_addr=0x64010101]}]}}}}}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x2f4, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x20, 0x2f, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x2f4, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x20, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="180000002c000100020000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0xcc000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(r5) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 480.67µs ago: executing program 0 (id=330): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x1c}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000700000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x25) close(r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r5, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) 0s ago: executing program 4 (id=331): r0 = socket$inet(0x2, 0xa, 0x262) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, {0x0, @local}, 0x38, {0x2, 0xfffb, @multicast2}, 'dummy0\x00'}) kernel console output (not intermixed with test programs): [ 22.748468][ T29] audit: type=1400 audit(1770076417.467:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.770459][ T29] audit: type=1400 audit(1770076417.467:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.793043][ T29] audit: type=1400 audit(1770076417.467:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.815944][ T29] audit: type=1400 audit(1770076417.467:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.838930][ T29] audit: type=1400 audit(1770076417.467:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 29.561397][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.561413][ T29] audit: type=1400 audit(1770076424.277:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.590452][ T29] audit: type=1400 audit(1770076424.307:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.592626][ T3300] cgroup: Unknown subsys name 'net' [ 29.618228][ T29] audit: type=1400 audit(1770076424.337:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.754289][ T3300] cgroup: Unknown subsys name 'cpuset' [ 29.760561][ T3300] cgroup: Unknown subsys name 'rlimit' [ 29.901664][ T29] audit: type=1400 audit(1770076424.617:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.925113][ T29] audit: type=1400 audit(1770076424.617:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.945604][ T29] audit: type=1400 audit(1770076424.617:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.966064][ T29] audit: type=1400 audit(1770076424.617:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.988799][ T29] audit: type=1400 audit(1770076424.657:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.013728][ T29] audit: type=1400 audit(1770076424.657:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.018309][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.037161][ T29] audit: type=1400 audit(1770076424.697:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.100639][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.252207][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 31.354780][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.370704][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.377887][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.385212][ T3312] bridge_slave_0: entered allmulticast mode [ 31.391698][ T3312] bridge_slave_0: entered promiscuous mode [ 31.400995][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.408125][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.415356][ T3312] bridge_slave_1: entered allmulticast mode [ 31.421785][ T3312] bridge_slave_1: entered promiscuous mode [ 31.438565][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.461246][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.476246][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.516388][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.538923][ T3312] team0: Port device team_slave_0 added [ 31.547652][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.562231][ T3312] team0: Port device team_slave_1 added [ 31.600105][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.607115][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.633059][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.666151][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.673189][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.699133][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.709872][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.717110][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.724294][ T3318] bridge_slave_0: entered allmulticast mode [ 31.730806][ T3318] bridge_slave_0: entered promiscuous mode [ 31.737287][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.744376][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.751644][ T3313] bridge_slave_0: entered allmulticast mode [ 31.758101][ T3313] bridge_slave_0: entered promiscuous mode [ 31.772453][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.779715][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.786866][ T3318] bridge_slave_1: entered allmulticast mode [ 31.793262][ T3318] bridge_slave_1: entered promiscuous mode [ 31.799886][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.807113][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.814368][ T3313] bridge_slave_1: entered allmulticast mode [ 31.820945][ T3313] bridge_slave_1: entered promiscuous mode [ 31.867287][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.877601][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.905972][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.916186][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.925462][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.932603][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.939968][ T3315] bridge_slave_0: entered allmulticast mode [ 31.946712][ T3315] bridge_slave_0: entered promiscuous mode [ 31.955291][ T3312] hsr_slave_0: entered promiscuous mode [ 31.961333][ T3312] hsr_slave_1: entered promiscuous mode [ 31.967401][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.974490][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.981702][ T3320] bridge_slave_0: entered allmulticast mode [ 31.988411][ T3320] bridge_slave_0: entered promiscuous mode [ 32.000101][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.007234][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.014425][ T3320] bridge_slave_1: entered allmulticast mode [ 32.020765][ T3320] bridge_slave_1: entered promiscuous mode [ 32.041670][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.048783][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.056413][ T3315] bridge_slave_1: entered allmulticast mode [ 32.062922][ T3315] bridge_slave_1: entered promiscuous mode [ 32.080051][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.090151][ T3313] team0: Port device team_slave_0 added [ 32.101779][ T3318] team0: Port device team_slave_0 added [ 32.112651][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.122578][ T3318] team0: Port device team_slave_1 added [ 32.128990][ T3313] team0: Port device team_slave_1 added [ 32.145074][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.170208][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.179712][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.186710][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.212705][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.233050][ T3320] team0: Port device team_slave_0 added [ 32.243501][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.250480][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.276466][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.296727][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.303876][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.329836][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.347542][ T3320] team0: Port device team_slave_1 added [ 32.359138][ T3315] team0: Port device team_slave_0 added [ 32.372765][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.379778][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.405769][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.436620][ T3315] team0: Port device team_slave_1 added [ 32.455048][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.462131][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.488139][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.510460][ T3313] hsr_slave_0: entered promiscuous mode [ 32.516512][ T3313] hsr_slave_1: entered promiscuous mode [ 32.522330][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.528093][ T3313] Cannot create hsr debugfs directory [ 32.535800][ T3318] hsr_slave_0: entered promiscuous mode [ 32.541850][ T3318] hsr_slave_1: entered promiscuous mode [ 32.547977][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.553770][ T3318] Cannot create hsr debugfs directory [ 32.562436][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.569464][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.595444][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.628476][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.635516][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.661471][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.677991][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.685065][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.711077][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.757566][ T3315] hsr_slave_0: entered promiscuous mode [ 32.763753][ T3315] hsr_slave_1: entered promiscuous mode [ 32.769581][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.775427][ T3315] Cannot create hsr debugfs directory [ 32.808066][ T3320] hsr_slave_0: entered promiscuous mode [ 32.814150][ T3320] hsr_slave_1: entered promiscuous mode [ 32.820060][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.825875][ T3320] Cannot create hsr debugfs directory [ 32.937127][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.956598][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.972094][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.984015][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.018812][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.030866][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.045665][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.058248][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.075076][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.096833][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.105966][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.123808][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.142898][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.163355][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.184052][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.203320][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.210901][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.219811][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.231313][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.240770][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.254641][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.291675][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.312778][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.319953][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.335523][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.342670][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.352352][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.384166][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.393145][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.408780][ T2786] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.416009][ T2786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.434144][ T2786] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.441204][ T2786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.468940][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.495079][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.505614][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.526106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.533207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.546036][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.561659][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.571517][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.578671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.637261][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.651271][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.662940][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.681316][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.688510][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.697972][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.705126][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.714252][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.721300][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.739340][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.746526][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.761602][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.811620][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.850239][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.861899][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.942916][ T3313] veth0_vlan: entered promiscuous mode [ 33.960926][ T3312] veth0_vlan: entered promiscuous mode [ 33.974302][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.990040][ T3312] veth1_vlan: entered promiscuous mode [ 33.999196][ T3313] veth1_vlan: entered promiscuous mode [ 34.024137][ T3312] veth0_macvtap: entered promiscuous mode [ 34.041094][ T3312] veth1_macvtap: entered promiscuous mode [ 34.058408][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.071974][ T3313] veth0_macvtap: entered promiscuous mode [ 34.081753][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.092001][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.108067][ T3313] veth1_macvtap: entered promiscuous mode [ 34.120485][ T2786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.137184][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.158646][ T2786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.168865][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.208436][ T2786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.234961][ T2786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.249793][ T3315] veth0_vlan: entered promiscuous mode [ 34.260215][ T2786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.271725][ T3315] veth1_vlan: entered promiscuous mode [ 34.284906][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.301959][ T3318] veth0_vlan: entered promiscuous mode [ 34.312256][ T2786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.329992][ T3318] veth1_vlan: entered promiscuous mode [ 34.348437][ T2786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.377235][ T2786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.399234][ T3318] veth0_macvtap: entered promiscuous mode [ 34.435357][ T3315] veth0_macvtap: entered promiscuous mode [ 34.442805][ T3315] veth1_macvtap: entered promiscuous mode [ 34.454278][ T3318] veth1_macvtap: entered promiscuous mode [ 34.479159][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.509576][ T3320] veth0_vlan: entered promiscuous mode [ 34.526978][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.538469][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.570136][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.578029][ T3498] loop2: detected capacity change from 0 to 1024 [ 34.585758][ T3498] ======================================================= [ 34.585758][ T3498] WARNING: The mand mount option has been deprecated and [ 34.585758][ T3498] and is ignored by this kernel. Remove the mand [ 34.585758][ T3498] option from the mount to silence this warning. [ 34.585758][ T3498] ======================================================= [ 34.623060][ T3320] veth1_vlan: entered promiscuous mode [ 34.630024][ T2786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.663852][ T2786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.672685][ T2786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.682458][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 34.682473][ T29] audit: type=1400 audit(1770076429.407:120): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.701926][ T2786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.737244][ T3499] loop1: detected capacity change from 0 to 2048 [ 34.744675][ T3320] veth0_macvtap: entered promiscuous mode [ 34.770556][ T3498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.770592][ T2786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.814054][ T3499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.824847][ T2786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.841445][ T3320] veth1_macvtap: entered promiscuous mode [ 34.865624][ T3508] FAULT_INJECTION: forcing a failure. [ 34.865624][ T3508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.878771][ T3508] CPU: 1 UID: 0 PID: 3508 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.878812][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.878829][ T3508] Call Trace: [ 34.878839][ T3508] [ 34.878846][ T3508] __dump_stack+0x1d/0x30 [ 34.878874][ T3508] dump_stack_lvl+0x95/0xd0 [ 34.878979][ T3508] dump_stack+0x15/0x1b [ 34.879000][ T3508] should_fail_ex+0x263/0x280 [ 34.879089][ T3508] should_fail+0xb/0x20 [ 34.879121][ T3508] should_fail_usercopy+0x1a/0x20 [ 34.879160][ T3508] _copy_from_user+0x1c/0xb0 [ 34.879254][ T3508] ___sys_sendmsg+0xc1/0x1e0 [ 34.879359][ T3508] __x64_sys_sendmsg+0xd4/0x160 [ 34.879386][ T3508] x64_sys_call+0x17ba/0x3000 [ 34.879439][ T3508] do_syscall_64+0xc0/0x2a0 [ 34.879550][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.879579][ T3508] RIP: 0033:0x7f29fdfaaeb9 [ 34.879607][ T3508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.879630][ T3508] RSP: 002b:00007f29fca07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.879655][ T3508] RAX: ffffffffffffffda RBX: 00007f29fe225fa0 RCX: 00007f29fdfaaeb9 [ 34.879669][ T3508] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 34.879730][ T3508] RBP: 00007f29fca07090 R08: 0000000000000000 R09: 0000000000000000 [ 34.879743][ T3508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.879755][ T3508] R13: 00007f29fe226038 R14: 00007f29fe225fa0 R15: 00007ffc4b662418 [ 34.879822][ T3508] [ 34.933888][ T3499] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.967094][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.969967][ T29] audit: type=1400 audit(1770076429.577:121): avc: denied { mount } for pid=3497 comm="syz.2.10" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.044617][ T3510] loop4: detected capacity change from 0 to 1024 [ 35.092754][ T2786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.112375][ C1] hrtimer: interrupt took 26280 ns [ 35.134486][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.150830][ T3512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 35.169025][ T2786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.198344][ T2786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.198405][ T29] audit: type=1400 audit(1770076429.747:122): avc: denied { add_name } for pid=3497 comm="syz.2.10" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.218068][ T3510] EXT4-fs: Ignoring removed bh option [ 35.229400][ T29] audit: type=1400 audit(1770076429.747:123): avc: denied { create } for pid=3497 comm="syz.2.10" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.252034][ T2786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.256386][ T29] audit: type=1400 audit(1770076429.747:124): avc: denied { read append open } for pid=3497 comm="syz.2.10" path="/4/file1/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.290274][ T29] audit: type=1400 audit(1770076429.807:125): avc: denied { read write } for pid=3495 comm="syz.1.9" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.312588][ T29] audit: type=1400 audit(1770076429.807:126): avc: denied { open } for pid=3495 comm="syz.1.9" path="/1/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.335281][ T29] audit: type=1400 audit(1770076429.807:127): avc: denied { open } for pid=3497 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.354391][ T29] audit: type=1400 audit(1770076429.807:128): avc: denied { perfmon } for pid=3497 comm="syz.2.10" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.373174][ T3510] EXT4-fs: inline encryption not supported [ 35.375104][ T29] audit: type=1400 audit(1770076429.807:129): avc: denied { kernel } for pid=3497 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.406488][ T2786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.445029][ T2786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.471233][ T3496] netlink: 'syz.1.9': attribute type 41 has an invalid length. [ 35.479829][ T3510] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.490226][ T3510] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 35.525685][ T3523] dummy0: entered promiscuous mode [ 35.531948][ T3523] bond0: entered promiscuous mode [ 35.537103][ T3523] bond_slave_0: entered promiscuous mode [ 35.542866][ T3523] bond_slave_1: entered promiscuous mode [ 35.549861][ T3523] hsr1: entered allmulticast mode [ 35.555154][ T3523] dummy0: entered allmulticast mode [ 35.560394][ T3523] bond0: entered allmulticast mode [ 35.565562][ T3523] bond_slave_0: entered allmulticast mode [ 35.571305][ T3523] bond_slave_1: entered allmulticast mode [ 35.594080][ T3525] Zero length message leads to an empty skb [ 35.611109][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.679934][ T3530] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.798550][ T3540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 35.861781][ T3552] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 35.877811][ T3515] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9: bg 0: block 345: padding at end of block bitmap is not set [ 35.892339][ T3515] EXT4-fs (loop1): Remounting filesystem read-only [ 35.899083][ T3452] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 35.956102][ T3515] syz.1.9 (3515) used greatest stack depth: 9792 bytes left [ 35.983228][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.149698][ T3566] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure [ 36.162390][ T3566] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 36.170823][ T3571] netlink: 'syz.3.31': attribute type 2 has an invalid length. [ 36.182229][ T3569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.208805][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 36.258902][ T3581] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.338601][ T3588] loop2: detected capacity change from 0 to 2048 [ 36.359170][ T3591] netlink: 52 bytes leftover after parsing attributes in process `syz.1.38'. [ 36.370328][ T3591] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 36.380281][ T3588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.481159][ T3588] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.499414][ T3597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.41'. [ 36.619483][ T3601] Cannot find del_set index 2 as target [ 36.702217][ T3605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3605 comm=syz.1.41 [ 36.740165][ T3601] netlink: 91 bytes leftover after parsing attributes in process `syz.0.42'. [ 36.878086][ T3598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.36: bg 0: block 345: padding at end of block bitmap is not set [ 36.893720][ T3598] EXT4-fs (loop2): Remounting filesystem read-only [ 36.906473][ T52] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 36.966341][ T3610] loop4: detected capacity change from 0 to 128 [ 36.994660][ T3610] syz.4.44: attempt to access beyond end of device [ 36.994660][ T3610] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 37.023938][ T3610] syz.4.44: attempt to access beyond end of device [ 37.023938][ T3610] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 37.058811][ T3610] syz.4.44: attempt to access beyond end of device [ 37.058811][ T3610] loop4: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 37.072369][ T3610] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 37.092862][ T3610] syz.4.44: attempt to access beyond end of device [ 37.092862][ T3610] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 37.106861][ T3610] syz.4.44: attempt to access beyond end of device [ 37.106861][ T3610] loop4: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 37.120563][ T3610] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 37.131453][ T3610] syz.4.44: attempt to access beyond end of device [ 37.131453][ T3610] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 37.148642][ T3610] syz.4.44: attempt to access beyond end of device [ 37.148642][ T3610] loop4: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 37.162238][ T3610] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 37.174562][ T3610] syz.4.44: attempt to access beyond end of device [ 37.174562][ T3610] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 37.200970][ T3610] syz.4.44: attempt to access beyond end of device [ 37.200970][ T3610] loop4: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 37.214991][ T3610] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 37.281304][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.298358][ T3610] syz.4.44: attempt to access beyond end of device [ 37.298358][ T3610] loop4: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 37.321781][ T3628] batadv1: entered promiscuous mode [ 37.328223][ T3628] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 37.343743][ T3610] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 37.372276][ T3610] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 37.683122][ T3610] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 37.707346][ T3610] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 37.785232][ T3610] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 38.065519][ T3651] loop4: detected capacity change from 0 to 1024 [ 38.104278][ T3651] EXT4-fs: Ignoring removed bh option [ 38.135227][ T3651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.167496][ T3651] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.57: Allocating blocks 497-513 which overlap fs metadata [ 38.187033][ T3651] EXT4-fs (loop4): Remounting filesystem read-only [ 38.275097][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.327655][ T3658] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 38.335622][ T3658] netlink: 'syz.4.59': attribute type 2 has an invalid length. [ 38.345937][ T3656] loop2: detected capacity change from 0 to 2048 [ 38.515309][ T3647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.520572][ T3656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.540194][ T3647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.618629][ T3669] loop4: detected capacity change from 0 to 1024 [ 38.635500][ T3656] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.709874][ T3669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.848150][ T3673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 38.995785][ T3504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 39.028072][ T3504] EXT4-fs (loop2): Remounting filesystem read-only [ 39.038234][ T3452] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 39.072150][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.188382][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 39.221617][ T3678] vlan2: entered promiscuous mode [ 39.222430][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.328539][ T3683] loop3: detected capacity change from 0 to 512 [ 39.335629][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 39.356123][ T3683] ext4: Unknown parameter 'nouser_xattr' [ 39.389707][ T3689] vlan2: entered promiscuous mode [ 39.589823][ T3710] macvlan2: entered allmulticast mode [ 39.626351][ T3711] loop2: detected capacity change from 0 to 1024 [ 39.641472][ T3712] loop0: detected capacity change from 0 to 2048 [ 39.677359][ T3711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.690447][ T29] kauditd_printk_skb: 3927 callbacks suppressed [ 39.690485][ T29] audit: type=1326 audit(1770076434.397:4057): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.720504][ T29] audit: type=1326 audit(1770076434.397:4058): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.744252][ T29] audit: type=1326 audit(1770076434.397:4059): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.768269][ T29] audit: type=1326 audit(1770076434.397:4060): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.792281][ T29] audit: type=1326 audit(1770076434.397:4061): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.815954][ T29] audit: type=1326 audit(1770076434.397:4062): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.839619][ T29] audit: type=1326 audit(1770076434.397:4063): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.863990][ T29] audit: type=1326 audit(1770076434.397:4064): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.887909][ T29] audit: type=1326 audit(1770076434.397:4065): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.911517][ T29] audit: type=1326 audit(1770076434.397:4066): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3641 comm=")(%}:]),'" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb9b582c2d9 code=0x7ffc0000 [ 39.942310][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.963619][ T3712] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.141906][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.176932][ T3728] loop4: detected capacity change from 0 to 164 [ 40.197287][ T3725] loop3: detected capacity change from 0 to 2048 [ 40.224965][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.274783][ T3728] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 40.408191][ T3723] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.74: bg 0: block 345: padding at end of block bitmap is not set [ 40.439416][ T3723] EXT4-fs (loop0): Remounting filesystem read-only [ 40.439466][ T12] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 40.650956][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.708782][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.784723][ T3748] FAULT_INJECTION: forcing a failure. [ 40.784723][ T3748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.797981][ T3748] CPU: 0 UID: 0 PID: 3748 Comm: syz.1.86 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.798011][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.798026][ T3748] Call Trace: [ 40.798033][ T3748] [ 40.798051][ T3748] __dump_stack+0x1d/0x30 [ 40.798079][ T3748] dump_stack_lvl+0x95/0xd0 [ 40.798159][ T3748] dump_stack+0x15/0x1b [ 40.798182][ T3748] should_fail_ex+0x263/0x280 [ 40.798218][ T3748] should_fail+0xb/0x20 [ 40.798251][ T3748] should_fail_usercopy+0x1a/0x20 [ 40.798349][ T3748] _copy_from_user+0x1c/0xb0 [ 40.798373][ T3748] sock_do_ioctl+0xe5/0x230 [ 40.798410][ T3748] sock_ioctl+0x41b/0x610 [ 40.798432][ T3748] ? mutex_lock+0x57/0x90 [ 40.798478][ T3748] ? __pfx_sock_ioctl+0x10/0x10 [ 40.798506][ T3748] __se_sys_ioctl+0xce/0x140 [ 40.798572][ T3748] __x64_sys_ioctl+0x43/0x50 [ 40.798607][ T3748] x64_sys_call+0x14b0/0x3000 [ 40.798637][ T3748] do_syscall_64+0xc0/0x2a0 [ 40.798752][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.798785][ T3748] RIP: 0033:0x7fb9b588aeb9 [ 40.798804][ T3748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.798821][ T3748] RSP: 002b:00007fb9b42e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.798845][ T3748] RAX: ffffffffffffffda RBX: 00007fb9b5b05fa0 RCX: 00007fb9b588aeb9 [ 40.798875][ T3748] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 40.798976][ T3748] RBP: 00007fb9b42e7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.798988][ T3748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.799003][ T3748] R13: 00007fb9b5b06038 R14: 00007fb9b5b05fa0 R15: 00007ffec4e41d58 [ 40.799027][ T3748] [ 40.986722][ T3750] loop0: detected capacity change from 0 to 512 [ 41.012638][ T3752] __nla_validate_parse: 1 callbacks suppressed [ 41.012657][ T3752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.88'. [ 41.037114][ T3750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.054109][ T3750] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.072589][ T3737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.092760][ T3746] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 41.253684][ T3764] loop3: detected capacity change from 0 to 512 [ 41.287771][ T3764] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.300898][ T3764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.318870][ T3767] FAULT_INJECTION: forcing a failure. [ 41.318870][ T3767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.332151][ T3767] CPU: 0 UID: 0 PID: 3767 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.332261][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.332278][ T3767] Call Trace: [ 41.332285][ T3767] [ 41.332295][ T3767] __dump_stack+0x1d/0x30 [ 41.332383][ T3767] dump_stack_lvl+0x95/0xd0 [ 41.332409][ T3767] dump_stack+0x15/0x1b [ 41.332429][ T3767] should_fail_ex+0x263/0x280 [ 41.332462][ T3767] should_fail+0xb/0x20 [ 41.332519][ T3767] should_fail_usercopy+0x1a/0x20 [ 41.332552][ T3767] _copy_from_user+0x1c/0xb0 [ 41.332572][ T3767] ___sys_sendmsg+0xc1/0x1e0 [ 41.332664][ T3767] __x64_sys_sendmsg+0xd4/0x160 [ 41.332697][ T3767] x64_sys_call+0x17ba/0x3000 [ 41.332737][ T3767] do_syscall_64+0xc0/0x2a0 [ 41.332779][ T3767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.332868][ T3767] RIP: 0033:0x7fb4335caeb9 [ 41.332885][ T3767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.332908][ T3767] RSP: 002b:00007fb432027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.332980][ T3767] RAX: ffffffffffffffda RBX: 00007fb433845fa0 RCX: 00007fb4335caeb9 [ 41.332995][ T3767] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 41.333008][ T3767] RBP: 00007fb432027090 R08: 0000000000000000 R09: 0000000000000000 [ 41.333036][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.333050][ T3767] R13: 00007fb433846038 R14: 00007fb433845fa0 R15: 00007ffdacc51138 [ 41.333074][ T3767] [ 41.336665][ T3750] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 41.503042][ T3764] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.90: corrupted xattr entries [ 41.514617][ T3774] netlink: 'syz.0.87': attribute type 4 has an invalid length. [ 41.537307][ T3764] EXT4-fs (loop3): Remounting filesystem read-only [ 41.543914][ T3764] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.608197][ T3764] EXT4-fs (loop3): 1 truncate cleaned up [ 41.640334][ T3764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.773285][ T3786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 41.782212][ T3786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 41.791070][ T3786] netlink: 5 bytes leftover after parsing attributes in process `syz.4.95'. [ 41.815552][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.863889][ T3797] dummy0: entered promiscuous mode [ 41.870036][ T3797] bond0: entered promiscuous mode [ 41.875212][ T3797] bond_slave_0: entered promiscuous mode [ 41.881019][ T3797] bond_slave_1: entered promiscuous mode [ 41.887238][ T3797] debugfs: 'hsr1' already exists in 'hsr' [ 41.892971][ T3797] Cannot create hsr debugfs directory [ 41.898810][ T3797] hsr1: entered allmulticast mode [ 41.904009][ T3797] dummy0: entered allmulticast mode [ 41.909262][ T3797] bond0: entered allmulticast mode [ 41.914441][ T3797] bond_slave_0: entered allmulticast mode [ 41.920206][ T3797] bond_slave_1: entered allmulticast mode [ 42.021099][ T3803] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 42.062589][ T3807] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 42.167307][ T3812] FAULT_INJECTION: forcing a failure. [ 42.167307][ T3812] name failslab, interval 1, probability 0, space 0, times 0 [ 42.180029][ T3812] CPU: 0 UID: 0 PID: 3812 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.180064][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.180145][ T3812] Call Trace: [ 42.180153][ T3812] [ 42.180162][ T3812] __dump_stack+0x1d/0x30 [ 42.180239][ T3812] dump_stack_lvl+0x95/0xd0 [ 42.180276][ T3812] dump_stack+0x15/0x1b [ 42.180299][ T3812] should_fail_ex+0x263/0x280 [ 42.180380][ T3812] should_failslab+0x8c/0xb0 [ 42.180503][ T3812] kmem_cache_alloc_noprof+0x68/0x490 [ 42.180532][ T3812] ? audit_log_start+0x34c/0x730 [ 42.180566][ T3812] audit_log_start+0x34c/0x730 [ 42.180599][ T3812] ? kstrtouint+0x76/0xc0 [ 42.180670][ T3812] audit_seccomp+0x47/0x100 [ 42.180699][ T3812] ? __seccomp_filter+0x8db/0x1350 [ 42.180729][ T3812] __seccomp_filter+0x8ec/0x1350 [ 42.180770][ T3812] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.180803][ T3812] ? vfs_write+0x86e/0x9f0 [ 42.180882][ T3812] __secure_computing+0x81/0x150 [ 42.180906][ T3812] syscall_trace_enter+0xce/0x1e0 [ 42.180946][ T3812] do_syscall_64+0x9a/0x2a0 [ 42.181012][ T3812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.181037][ T3812] RIP: 0033:0x7f4d1efaaeb9 [ 42.181057][ T3812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.181077][ T3812] RSP: 002b:00007f4d1da07028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 42.181095][ T3812] RAX: ffffffffffffffda RBX: 00007f4d1f225fa0 RCX: 00007f4d1efaaeb9 [ 42.181185][ T3812] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 42.181274][ T3812] RBP: 00007f4d1da07090 R08: 0000000000000000 R09: 0000000000000000 [ 42.181289][ T3812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.181304][ T3812] R13: 00007f4d1f226038 R14: 00007f4d1f225fa0 R15: 00007ffd76a1a1a8 [ 42.181325][ T3812] [ 42.501802][ T3819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 43.930198][ T3750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.953804][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.059174][ T3831] tipc: Started in network mode [ 44.064243][ T3831] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 44.073709][ T3831] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 44.082094][ T3831] tipc: Enabled bearer , priority 10 [ 44.160921][ T3841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 44.256551][ T3853] loop0: detected capacity change from 0 to 512 [ 44.281772][ T3853] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.115: bg 0: block 393: padding at end of block bitmap is not set [ 44.297250][ T3853] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 44.306715][ T3853] EXT4-fs (loop0): 2 truncates cleaned up [ 44.313794][ T3853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.330957][ T3853] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.115: path /24/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 44.361616][ T3857] process 'syz.4.116' launched './file0' with NULL argv: empty string added [ 44.372032][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.412650][ T3864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 44.456293][ T3868] 9p: Bad value for 'rfdno' [ 44.694159][ T29] kauditd_printk_skb: 1160 callbacks suppressed [ 44.694182][ T29] audit: type=1326 audit(1770076439.417:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.724051][ T29] audit: type=1326 audit(1770076439.417:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.747502][ T29] audit: type=1326 audit(1770076439.417:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.770847][ T29] audit: type=1326 audit(1770076439.417:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.794284][ T29] audit: type=1326 audit(1770076439.417:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.817734][ T29] audit: type=1326 audit(1770076439.417:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.841159][ T29] audit: type=1326 audit(1770076439.417:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.864540][ T29] audit: type=1326 audit(1770076439.417:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.887991][ T29] audit: type=1326 audit(1770076439.417:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 44.911356][ T29] audit: type=1326 audit(1770076439.417:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 45.027870][ T3879] Cannot find del_set index 2 as target [ 45.036129][ T3879] netlink: 27 bytes leftover after parsing attributes in process `syz.1.123'. [ 45.073515][ T3395] tipc: Node number set to 1 [ 45.284759][ T3889] syzkaller0: entered promiscuous mode [ 45.290279][ T3889] syzkaller0: entered allmulticast mode [ 45.330958][ T3893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'. [ 45.626387][ T3909] netlink: 128 bytes leftover after parsing attributes in process `syz.2.134'. [ 45.865286][ T3915] loop0: detected capacity change from 0 to 512 [ 45.958971][ T3921] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 45.966825][ T3923] netlink: 'syz.0.137': attribute type 15 has an invalid length. [ 46.071422][ T3926] tls_set_device_offload: netdev not found [ 46.323005][ T3938] loop3: detected capacity change from 0 to 128 [ 46.347268][ T3938] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.360999][ T3941] loop4: detected capacity change from 0 to 512 [ 46.374501][ T3945] loop0: detected capacity change from 0 to 128 [ 46.397885][ T3941] EXT4-fs (loop4): 1 truncate cleaned up [ 46.424406][ T3941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.458686][ T3945] bio_check_eod: 9 callbacks suppressed [ 46.458774][ T3945] syz.0.147: attempt to access beyond end of device [ 46.458774][ T3945] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 46.478357][ T3949] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 46.500203][ T3945] syz.0.147: attempt to access beyond end of device [ 46.500203][ T3945] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 46.502821][ T3952] __nla_validate_parse: 1 callbacks suppressed [ 46.502858][ T3952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 46.530358][ T3945] syz.0.147: attempt to access beyond end of device [ 46.530358][ T3945] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 46.544489][ T3945] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 46.564860][ T3945] syz.0.147: attempt to access beyond end of device [ 46.564860][ T3945] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 46.587750][ T3945] syz.0.147: attempt to access beyond end of device [ 46.587750][ T3945] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 46.601813][ T3945] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 46.693991][ T3945] syz.0.147: attempt to access beyond end of device [ 46.693991][ T3945] loop0: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 46.708923][ T3945] syz.0.147: attempt to access beyond end of device [ 46.708923][ T3945] loop0: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 46.722595][ T3945] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 46.732981][ T3945] syz.0.147: attempt to access beyond end of device [ 46.732981][ T3945] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 46.747239][ T3945] syz.0.147: attempt to access beyond end of device [ 46.747239][ T3945] loop0: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 46.760955][ T3945] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 46.774022][ T3945] syz.0.147: attempt to access beyond end of device [ 46.774022][ T3945] loop0: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 46.788866][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.795083][ T3958] loop3: detected capacity change from 0 to 2048 [ 46.827417][ T3958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.827674][ T3945] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 46.866081][ T3958] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.924515][ T3945] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 46.942603][ T3945] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 46.977168][ T3945] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 46.997986][ T3945] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 47.034894][ T3945] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 47.361861][ T3965] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.149: bg 0: block 345: padding at end of block bitmap is not set [ 47.400521][ T3965] EXT4-fs (loop3): Remounting filesystem read-only [ 47.407725][ T3452] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 47.576952][ T3988] FAULT_INJECTION: forcing a failure. [ 47.576952][ T3988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.593084][ T3988] CPU: 0 UID: 0 PID: 3988 Comm: syz.1.157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.593111][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.593123][ T3988] Call Trace: [ 47.593128][ T3988] [ 47.593135][ T3988] __dump_stack+0x1d/0x30 [ 47.593221][ T3988] dump_stack_lvl+0x95/0xd0 [ 47.593244][ T3988] dump_stack+0x15/0x1b [ 47.593266][ T3988] should_fail_ex+0x263/0x280 [ 47.593302][ T3988] should_fail+0xb/0x20 [ 47.593368][ T3988] should_fail_usercopy+0x1a/0x20 [ 47.593406][ T3988] _copy_from_iter+0xcf/0xea0 [ 47.593428][ T3988] ? __build_skb_around+0x164/0x1c0 [ 47.593507][ T3988] ? __alloc_skb+0x397/0x4b0 [ 47.593536][ T3988] ? __alloc_skb+0x219/0x4b0 [ 47.593563][ T3988] pfkey_sendmsg+0x126/0x9b0 [ 47.593588][ T3988] ? avc_has_perm+0x101/0x190 [ 47.593634][ T3988] ? selinux_socket_sendmsg+0x192/0x1c0 [ 47.593660][ T3988] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 47.593699][ T3988] ____sys_sendmsg+0x5af/0x600 [ 47.593719][ T3988] ___sys_sendmsg+0x195/0x1e0 [ 47.593752][ T3988] __x64_sys_sendmsg+0xd4/0x160 [ 47.593781][ T3988] x64_sys_call+0x17ba/0x3000 [ 47.593857][ T3988] do_syscall_64+0xc0/0x2a0 [ 47.593904][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.593929][ T3988] RIP: 0033:0x7fb9b588aeb9 [ 47.593948][ T3988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.594044][ T3988] RSP: 002b:00007fb9b42e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.594065][ T3988] RAX: ffffffffffffffda RBX: 00007fb9b5b05fa0 RCX: 00007fb9b588aeb9 [ 47.594078][ T3988] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000006 [ 47.594091][ T3988] RBP: 00007fb9b42e7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.594103][ T3988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.594116][ T3988] R13: 00007fb9b5b06038 R14: 00007fb9b5b05fa0 R15: 00007ffec4e41d58 [ 47.594192][ T3988] [ 47.802137][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.811576][ T3986] netlink: 388 bytes leftover after parsing attributes in process `syz.0.154'. [ 47.886272][ T3996] loop0: detected capacity change from 0 to 256 [ 47.950883][ T3996] SELinux: failed to load policy [ 47.960388][ T3999] Illegal XDP return value 692310766 on prog (id 34) dev N/A, expect packet loss! [ 48.008045][ T4003] loop1: detected capacity change from 0 to 128 [ 48.099780][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'. [ 48.496557][ T4047] Cannot find del_set index 2 as target [ 48.515708][ T4047] netlink: 59 bytes leftover after parsing attributes in process `syz.1.174'. [ 48.661514][ T4057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 48.762206][ T4064] loop0: detected capacity change from 0 to 512 [ 48.795336][ T4064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.808205][ T4064] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.875343][ T4067] loop1: detected capacity change from 0 to 8192 [ 48.959475][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.052184][ T4073] netlink: 'syz.0.182': attribute type 10 has an invalid length. [ 49.068602][ T4073] 9pnet_fd: Insufficient options for proto=fd [ 49.095982][ T4079] loop4: detected capacity change from 0 to 128 [ 49.106369][ T4076] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' CDX [ 49.106369][ T4076] s0dnph5L0|qD81A{ꈆnK P) failed with errno=-22 [ 49.143873][ T4079] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.176982][ T4084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 49.186161][ T4079] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.202371][ T4071] 9pnet_fd: Insufficient options for proto=fd [ 49.295193][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.336913][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.344203][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.401198][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.418264][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.498977][ T4097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.191'. [ 49.508114][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.517279][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.538189][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.557391][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.698514][ T4111] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 49.707723][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 49.707739][ T29] audit: type=1326 audit(1770076444.437:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb43358b78e code=0x7ffc0000 [ 49.737524][ T29] audit: type=1326 audit(1770076444.437:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4335cab4b code=0x7ffc0000 [ 49.761043][ T29] audit: type=1326 audit(1770076444.437:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb43358b78e code=0x7ffc0000 [ 49.784614][ T29] audit: type=1326 audit(1770076444.437:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb43358b78e code=0x7ffc0000 [ 49.807926][ T29] audit: type=1326 audit(1770076444.437:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb4335c9d97 code=0x7ffc0000 [ 49.808251][ T4111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.831347][ T29] audit: type=1326 audit(1770076444.437:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb4335cc14a code=0x7ffc0000 [ 49.851781][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.875034][ T29] audit: type=1326 audit(1770076444.597:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb43358b78e code=0x7ffc0000 [ 49.898381][ T29] audit: type=1326 audit(1770076444.597:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb4335c9367 code=0x7ffc0000 [ 49.921642][ T29] audit: type=1326 audit(1770076444.597:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb43358b78e code=0x7ffc0000 [ 49.945149][ T29] audit: type=1326 audit(1770076444.597:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4335caeb9 code=0x7ffc0000 [ 49.975474][ T4111] vlan1: entered allmulticast mode [ 49.980686][ T4111] veth0_to_bond: entered allmulticast mode [ 50.013791][ T4108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 50.048562][ T4111] bond1: (slave vlan1): making interface the new active one [ 50.076660][ T4111] bond1: (slave vlan1): Enslaving as an active interface with an up link [ 50.145632][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.488608][ T4135] Cannot find del_set index 2 as target [ 50.534513][ T4137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.605757][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 50.618088][ T4131] sctp: [Deprecated]: syz.2.202 (pid 4131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.618088][ T4131] Use struct sctp_sack_info instead [ 50.678399][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.702538][ T4147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.205'. [ 50.724214][ T4143] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.735166][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.854797][ T4150] xt_hashlimit: size too large, truncated to 1048576 [ 51.168808][ T4169] set_capacity_and_notify: 3 callbacks suppressed [ 51.168827][ T4169] loop0: detected capacity change from 0 to 8192 [ 51.209300][ T4171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.216704][ T4171] IPv6: NLM_F_CREATE should be set when creating new route [ 51.491266][ T4149] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.204: bg 0: block 345: padding at end of block bitmap is not set [ 51.514823][ T4149] EXT4-fs (loop1): Remounting filesystem read-only [ 51.525160][ T2447] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 51.582592][ T4181] loop4: detected capacity change from 0 to 128 [ 51.688115][ T4181] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.045900][ T4191] __nla_validate_parse: 1 callbacks suppressed [ 52.045920][ T4191] netlink: 48 bytes leftover after parsing attributes in process `syz.3.218'. [ 52.090082][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.149872][ T4203] netlink: 52 bytes leftover after parsing attributes in process `syz.4.220'. [ 52.177371][ T4203] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 52.254716][ T4207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 52.304738][ T4214] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.336077][ T4213] loop1: detected capacity change from 0 to 512 [ 52.350213][ T4217] Cannot find del_set index 2 as target [ 52.378268][ T4217] netlink: 59 bytes leftover after parsing attributes in process `syz.0.226'. [ 52.387252][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bba0a00: rx timeout, send abort [ 52.511392][ T4229] loop0: detected capacity change from 0 to 2048 [ 52.534872][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.547586][ T4229] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.882119][ T4234] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.229: bg 0: block 345: padding at end of block bitmap is not set [ 52.884810][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bba0e00: rx timeout, send abort [ 52.898841][ T4234] EXT4-fs (loop0): Remounting filesystem read-only [ 52.911273][ T2447] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 52.913563][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bba0a00: abort rx timeout. Force session deactivation [ 53.323905][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.404716][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bba0e00: abort rx timeout. Force session deactivation [ 53.593790][ T4265] : renamed from bond0 [ 53.605189][ T4267] loop0: detected capacity change from 0 to 256 [ 53.611941][ T4267] vfat: Unknown parameter '00000000000000000000005' [ 53.654256][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 53.735056][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 53.779640][ T4277] loop3: detected capacity change from 0 to 512 [ 53.796878][ T4277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.811373][ T4277] EXT4-fs error (device loop3): ext4_readdir:224: inode #12: comm syz.3.248: path /52/file0/file0: directory fails checksum at offset 0 [ 53.844433][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.866445][ T4281] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 53.907761][ T4283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.915033][ T4283] IPv6: NLM_F_CREATE should be set when creating new route [ 53.922384][ T4283] IPv6: NLM_F_CREATE should be set when creating new route [ 53.929643][ T4283] IPv6: NLM_F_CREATE should be set when creating new route [ 53.932817][ T4281] bond1: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 53.948705][ T4283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.983692][ T4281] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 53.995738][ T4281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.163748][ T4304] loop1: detected capacity change from 0 to 1024 [ 54.188831][ T4304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.225121][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.247625][ T4313] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.413023][ T4320] ip6tnl2: entered promiscuous mode [ 54.450333][ T4320] IPVS: Error connecting to the multicast addr [ 54.510129][ T4320] loop1: detected capacity change from 0 to 512 [ 54.540265][ T4320] EXT4-fs: Ignoring removed oldalloc option [ 54.621820][ T4320] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.260: Parent and EA inode have the same ino 15 [ 54.675214][ T4320] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.260: Parent and EA inode have the same ino 15 [ 54.688264][ T4320] EXT4-fs (loop1): 1 orphan inode deleted [ 54.695802][ T4320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.714334][ T4320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'. [ 54.730582][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 54.730613][ T29] audit: type=1326 audit(1770076449.447:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18e406b78e code=0x7ffc0000 [ 54.760169][ T29] audit: type=1326 audit(1770076449.447:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.783554][ T29] audit: type=1326 audit(1770076449.447:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.807238][ T29] audit: type=1326 audit(1770076449.447:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.830503][ T29] audit: type=1326 audit(1770076449.447:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.853885][ T29] audit: type=1326 audit(1770076449.447:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.877206][ T29] audit: type=1326 audit(1770076449.447:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.900970][ T29] audit: type=1326 audit(1770076449.447:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.924410][ T29] audit: type=1326 audit(1770076449.447:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18e40aaeb9 code=0x7ffc0000 [ 54.967956][ T29] audit: type=1400 audit(1770076449.687:5901): avc: denied { listen } for pid=4326 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.026037][ T4329] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 55.084163][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 55.101114][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.187777][ T4343] ip6gre1: entered promiscuous mode [ 55.213376][ T4345] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 55.220155][ T4338] loop0: detected capacity change from 0 to 8192 [ 55.245486][ T4338] loop0: p4 < > [ 55.292919][ T4353] netlink: 'syz.0.271': attribute type 21 has an invalid length. [ 55.300917][ T4353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.271'. [ 55.309947][ T4353] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 55.320814][ T4348] netlink: 1304 bytes leftover after parsing attributes in process `syz.2.268'. [ 55.354873][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 55.442079][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 55.449664][ T3394] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 55.461446][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.469008][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.476519][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.484001][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.491411][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.498861][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.506353][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.513774][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.521191][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.529729][ T3394] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 55.540108][ T4370] loop0: detected capacity change from 0 to 1024 [ 55.565978][ T4370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.594159][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.610249][ T4371] fido_id[4371]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.810763][ T4387] Cannot find del_set index 2 as target [ 55.833822][ T4392] netlink: 'syz.3.283': attribute type 10 has an invalid length. [ 55.841702][ T4392] bond0: option arp_all_targets: invalid value (196616) [ 55.959108][ T4407] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.083201][ T4410] capability: warning: `syz.3.289' uses 32-bit capabilities (legacy support in use) [ 56.094952][ T4412] FAULT_INJECTION: forcing a failure. [ 56.094952][ T4412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.108172][ T4412] CPU: 1 UID: 0 PID: 4412 Comm: syz.4.290 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.108243][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.108260][ T4412] Call Trace: [ 56.108268][ T4412] [ 56.108278][ T4412] __dump_stack+0x1d/0x30 [ 56.108308][ T4412] dump_stack_lvl+0x95/0xd0 [ 56.108361][ T4412] dump_stack+0x15/0x1b [ 56.108386][ T4412] should_fail_ex+0x263/0x280 [ 56.108452][ T4412] should_fail+0xb/0x20 [ 56.108526][ T4412] should_fail_usercopy+0x1a/0x20 [ 56.108744][ T4412] _copy_from_iter+0xcf/0xea0 [ 56.108769][ T4412] ? __alloc_skb+0x397/0x4b0 [ 56.108807][ T4412] ? __alloc_skb+0x219/0x4b0 [ 56.108841][ T4412] netlink_sendmsg+0x4ae/0x6f0 [ 56.108986][ T4412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.109010][ T4412] ____sys_sendmsg+0x5af/0x600 [ 56.109033][ T4412] ___sys_sendmsg+0x195/0x1e0 [ 56.109066][ T4412] __x64_sys_sendmsg+0xd4/0x160 [ 56.109097][ T4412] x64_sys_call+0x17ba/0x3000 [ 56.109203][ T4412] do_syscall_64+0xc0/0x2a0 [ 56.109238][ T4412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.109265][ T4412] RIP: 0033:0x7fb4335caeb9 [ 56.109284][ T4412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.109336][ T4412] RSP: 002b:00007fb432027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.109357][ T4412] RAX: ffffffffffffffda RBX: 00007fb433845fa0 RCX: 00007fb4335caeb9 [ 56.109375][ T4412] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 56.109429][ T4412] RBP: 00007fb432027090 R08: 0000000000000000 R09: 0000000000000000 [ 56.109444][ T4412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.109455][ T4412] R13: 00007fb433846038 R14: 00007fb433845fa0 R15: 00007ffdacc51138 [ 56.109475][ T4412] [ 56.360654][ T4418] xt_hashlimit: size too large, truncated to 1048576 [ 56.480789][ T4436] set_capacity_and_notify: 1 callbacks suppressed [ 56.480868][ T4436] loop0: detected capacity change from 0 to 128 [ 56.680201][ T4443] loop0: detected capacity change from 0 to 512 [ 56.687041][ T4443] EXT4-fs: inline encryption not supported [ 56.716230][ T4443] EXT4-fs (loop0): 1 orphan inode deleted [ 56.722419][ T4443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.736151][ T4443] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.736411][ T2447] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 56.984878][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.353988][ T4458] loop1: detected capacity change from 0 to 512 [ 57.361101][ T4458] msdos: Unknown parameter 'umYsk' [ 57.487265][ T4460] sctp: [Deprecated]: syz.0.307 (pid 4460) Use of int in max_burst socket option deprecated. [ 57.487265][ T4460] Use struct sctp_assoc_value instead [ 57.507771][ T4462] loop4: detected capacity change from 0 to 128 [ 57.517523][ T4462] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.617068][ T4477] loop0: detected capacity change from 0 to 128 [ 57.644412][ T4477] bio_check_eod: 42 callbacks suppressed [ 57.644427][ T4477] syz.0.313: attempt to access beyond end of device [ 57.644427][ T4477] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 57.678616][ T4477] syz.0.313: attempt to access beyond end of device [ 57.678616][ T4477] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 57.715517][ T4477] syz.0.313: attempt to access beyond end of device [ 57.715517][ T4477] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 57.716113][ T4481] __nla_validate_parse: 5 callbacks suppressed [ 57.716154][ T4481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.314'. [ 57.729171][ T4477] buffer_io_error: 14 callbacks suppressed [ 57.729187][ T4477] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 57.759626][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 57.768507][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 57.811195][ T4477] syz.0.313: attempt to access beyond end of device [ 57.811195][ T4477] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 57.827141][ T4477] syz.0.313: attempt to access beyond end of device [ 57.827141][ T4477] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 57.840880][ T4477] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 57.860646][ T4485] netlink: 'syz.3.315': attribute type 2 has an invalid length. [ 57.871762][ T4477] syz.0.313: attempt to access beyond end of device [ 57.871762][ T4477] loop0: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 57.887483][ T4477] syz.0.313: attempt to access beyond end of device [ 57.887483][ T4477] loop0: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 57.901193][ T4477] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 57.910943][ T4477] syz.0.313: attempt to access beyond end of device [ 57.910943][ T4477] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 57.935255][ T4477] syz.0.313: attempt to access beyond end of device [ 57.935255][ T4477] loop0: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 57.949008][ T4477] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 57.964910][ T4487] loop1: detected capacity change from 0 to 512 [ 57.983938][ T4477] syz.0.313: attempt to access beyond end of device [ 57.983938][ T4477] loop0: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 58.006584][ T4477] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 58.016318][ T4487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.043270][ T4487] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.056285][ T4477] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 58.066553][ T4477] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 58.076168][ T4477] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 58.086400][ T4477] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 58.095942][ T4477] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 58.110421][ T4487] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.316: corrupted inode contents [ 58.122398][ T4487] EXT4-fs (loop1): Remounting filesystem read-only [ 58.129067][ T4487] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 58.164680][ T4498] loop4: detected capacity change from 0 to 512 [ 58.171417][ T4498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.179938][ T4498] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.187920][ T4498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 58.196122][ T4498] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 58.205670][ T4498] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 58.214994][ T4498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.287510][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 58.336085][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.348519][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.400931][ T4514] loop4: detected capacity change from 0 to 128 [ 58.429224][ T4514] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.635069][ T3001] ================================================================== [ 58.643217][ T3001] BUG: KCSAN: data-race in set_nlink / set_nlink [ 58.649580][ T3001] [ 58.651929][ T3001] read to 0xffff8881078f2048 of 4 bytes by task 3301 on cpu 1: [ 58.659505][ T3001] set_nlink+0x29/0xb0 [ 58.663622][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 58.668945][ T3001] inode_permission+0x2de/0x3c0 [ 58.673825][ T3001] link_path_walk+0x779/0xe30 [ 58.678530][ T3001] path_openat+0x1bf/0x23c0 [ 58.683077][ T3001] do_filp_open+0x15d/0x280 [ 58.687615][ T3001] do_sys_openat2+0xa6/0x150 [ 58.692246][ T3001] __x64_sys_openat+0xf2/0x120 [ 58.697039][ T3001] x64_sys_call+0x2b07/0x3000 [ 58.701765][ T3001] do_syscall_64+0xc0/0x2a0 [ 58.706312][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.712241][ T3001] [ 58.714586][ T3001] write to 0xffff8881078f2048 of 4 bytes by task 3001 on cpu 0: [ 58.722348][ T3001] set_nlink+0x99/0xb0 [ 58.726489][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 58.731813][ T3001] inode_permission+0x2de/0x3c0 [ 58.736703][ T3001] link_path_walk+0x779/0xe30 [ 58.741410][ T3001] path_lookupat+0x8c/0x500 [ 58.745936][ T3001] filename_lookup+0x190/0x390 [ 58.750721][ T3001] vfs_statx+0x96/0x170 [ 58.754898][ T3001] vfs_fstatat+0x115/0x170 [ 58.759348][ T3001] __se_sys_newfstatat+0x55/0x3e0 [ 58.764399][ T3001] __x64_sys_newfstatat+0x55/0x70 [ 58.769453][ T3001] x64_sys_call+0x111f/0x3000 [ 58.774150][ T3001] do_syscall_64+0xc0/0x2a0 [ 58.778689][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.784606][ T3001] [ 58.786938][ T3001] value changed: 0x00000009 -> 0x00000008 [ 58.792662][ T3001] [ 58.795000][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 58.801166][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.810464][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.820533][ T3001] ==================================================================