last executing test programs: 11.020144255s ago: executing program 2 (id=528): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c84, &(0x7f0000000040)={[{}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb212) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000015c0)="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", 0xa41}], 0x1, 0x800, 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x3fee, 0x7, {{0x1d, 0x4, 0x1, 0x7, 0x74, 0x66, 0x0, 0xe, 0x2f, 0x0, @multicast2, @broadcast, {[@generic={0x44, 0x6, "5f609194"}, @generic={0x82, 0xc, "1800dd136a73e6ca7c85"}, @timestamp={0x44, 0x8, 0xf2, 0x0, 0x1, [0x6181]}, @timestamp_prespec={0x44, 0x4, 0xa9}, @timestamp_addr={0x44, 0x14, 0x71, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x8}, {@broadcast, 0x89c}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x4}, @timestamp_addr={0x44, 0x24, 0xe5, 0x1, 0x3, [{@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x1000}, {@empty, 0x554}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="080003000000000008000300020000001400020070696d726567300000000000000000001400020076657468315f746f5f687372000000001800018014000200767863616e31000000000000000000001400018008000300010000000800030002000000"], 0x424}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x80) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000004c0), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000002040)="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", &(0x7f0000003040)=""/4096, &(0x7f0000000140)="829e3648283fb1f72a1a7bcc423934cad3ce5633df77cf484964ceab596dabf968ff12839e566e1fa408e30b7dfd97ddc63f2804b586a2a2e857cae4584aa3450f973f309a11a1ec78359101b87d25679895adf90e32a0997c39159e4b101d16dbe4a3f91f674424086a7aabafff52b706b456e46edf04fd50b5e23d64cd5b682c229d10f3a73b3ee86b3b1cca441ed88ec9e25367c3fd6ea1e685a683a7eec0acaa712ab5d46d2c43971ba7", &(0x7f0000000280)="be8d398b93686600265ff781801f6eacaa50b81055128410d2eb25a03cbc44a7a4f4be0254e8d4d550a12705bc44089f51ec9c63c2af4d059fcce852ebe945fa8d57c4dc5ba6c2eceedbb6f800279f8ead122c9f431f3a81bf30b7b23bdddf4dde34ec7c7561f3b3d40064f740ec1185e77ceb644fe8808ddbd6cddcf2b30322c93c600070c09581bf53977c3c4b048c3e84f0f6a1cddcc0c694308720eac6dab5a16b37a2e584764d3bb86e12ce8be51296d2d27401165826e85b4d0017f07bb8d409b8781e7ee8735138cc4be4d7f99d22cfc8d65ca9b975f295a9cf45", 0x3, r1}, 0x38) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 10.579703101s ago: executing program 2 (id=532): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/113, 0x71}], 0x1, 0x9, 0x9) preadv(r2, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) 10.301109177s ago: executing program 2 (id=540): socket(0x2, 0x3, 0xff7fff01) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000002b40), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x34, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}, [{0x8}, {0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x297) 9.795806167s ago: executing program 2 (id=551): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) setns(r3, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000000)={0x2, 0x364f, 0x6, 0x10000, 0x3}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0xffffffff, 0x10000, 0x1, 0x0, 0x4dbb}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r10, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106000f0001"], 0x40}}, 0x0) sendto$packet(r7, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x48880, &(0x7f0000000200)={0x11, 0x3, r10, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$RTC_VL_CLR(r6, 0x7014) io_uring_setup(0x7c41, &(0x7f0000000440)={0x0, 0x5065, 0x800, 0x0, 0x99}) 9.143214005s ago: executing program 2 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @multicast1, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @remote, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12120) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r6 = gettid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10b85, 0x49060}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_MTU={0x8, 0x4, 0xfffffff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) 8.254555847s ago: executing program 2 (id=576): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x5, 0x0, "f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r6, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) sendfile(r4, r4, 0x0, 0x3fffff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 8.247118418s ago: executing program 32 (id=576): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x5, 0x0, "f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r6, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) sendfile(r4, r4, 0x0, 0x3fffff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 5.429286102s ago: executing program 5 (id=605): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4082, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xed26}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000280)=""/176, 0xb0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 4.583406742s ago: executing program 5 (id=614): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020400) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/49, 0x4f, 0x31, 0x0, 0x81}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x8000000, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x50) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r4, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000240)="abff49a07b0069dbf6c2c7d9b96f17623b", &(0x7f0000000280)=@udp6=r5, 0x2}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ec, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4.346152266s ago: executing program 1 (id=617): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/61, &(0x7f0000000040)=0x3d) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000140)) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0xa, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040000) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x103002, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000002c0)=0xff, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xc62d}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x4, 0xe455, {{0x2c, 0x4, 0x0, 0x4, 0xb0, 0x66, 0x0, 0x8, 0x0, 0x0, @multicast2, @loopback, {[@generic={0x44, 0xf, "f472c6c9ead89b05ed53049e7a"}, @timestamp_prespec={0x44, 0x4c, 0xab, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd86}, {@remote, 0x6}, {@remote, 0x2}, {@local, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x3}, 0x3}, {@remote, 0x3}, {@multicast1, 0x28eb}, {@private=0xa010101, 0x8}, {@multicast2, 0x2}]}, @rr={0x7, 0xb, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @noop, @ssrr={0x89, 0xf, 0xc0, [@dev={0xac, 0x14, 0x14, 0xf}, @remote, @dev={0xac, 0x14, 0x14, 0xc}]}, @rr={0x7, 0x1f, 0x6f, [@empty, @rand_addr=0x64010101, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}, @generic={0x82, 0x4, "a1de"}]}}}}}) r5 = accept$phonet_pipe(r2, &(0x7f00000004c0), &(0x7f0000000500)=0x10) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000540)=@newtclass={0x580, 0x28, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xd, 0xfff2}, {0x1, 0x2}, {0xfff1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xe}}}, @c_atm={{0x8}, {0x5c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0x3f, 0x3, "4453c58119278bfa8a9df45364c096d9655bf1bf6532fbdecdb6effec3d7fef9a343867b4548a160951cdf64f3b375c26c87d1cb1d5dac7840fc18"}]}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xb}}}, @c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0xb}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xfff2}}, @TCA_ATM_HDR={0x5, 0x3, 'h'}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0x1}}]}}, @c_atm={{0x8}, {0x60, 0x2, [@TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x21, 0x3, "a77e002ec5572d4e1298d073690ce4408a1ba71960040d6ca5cfa366c2"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x7}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x5}}]}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x7, 0x5, 0x8, 0x65, 0x9, 0x636, 0x3, 0x5, 0x10001, 0x8001, 0xf, 0x800, 0x4, 0x2, 0xc, 0x37, 0x61a8, 0x80, 0x4, 0xf, 0x101, 0x0, 0xffff, 0x4, 0x7, 0x7d, 0x9, 0xff, 0x9, 0x5, 0x1, 0x7, 0x8, 0xa2d, 0x6, 0x5, 0x6, 0x0, 0x1, 0x4, 0x8, 0x401, 0x63, 0x88a2, 0x0, 0x2, 0x1, 0x80000000, 0x1, 0x6, 0x400, 0x800, 0x5, 0x1, 0x4, 0x9, 0x3adc, 0x9, 0x6, 0x3ab1, 0x10000, 0x2, 0x2, 0x9, 0x3ff, 0x80000000, 0x80000001, 0x2, 0x1, 0xf, 0xb, 0x5a, 0x7, 0x6, 0xfeecb454, 0x2, 0x5, 0x7, 0x2, 0x1000, 0x8001, 0x80, 0x101, 0x9, 0x2f48, 0xfc, 0x9, 0x9a4, 0xe, 0x0, 0xffff, 0x0, 0x8, 0x3, 0x2, 0x80000000, 0x2, 0x4, 0xc, 0x1, 0x0, 0xc675, 0xe8, 0x4, 0x2, 0x800, 0xd7e0, 0x6, 0x7fff, 0x7ff, 0x9, 0x4262, 0x3b1e0ac0, 0x3ff, 0x6, 0x14, 0x9, 0xf4, 0x19bcfb02, 0x5, 0x1, 0x400, 0x1ff, 0x9c50, 0xd, 0x2, 0x6, 0x80000001, 0x7, 0x2, 0x6, 0x7, 0x0, 0xf77, 0x2, 0x6, 0x7781, 0x2b, 0x6, 0x7, 0xfff, 0x1ff, 0x10000, 0x0, 0x7c8, 0x81, 0x2, 0x5, 0xff, 0x28000000, 0x7, 0x2b9, 0x8, 0x5, 0xa1, 0x2, 0xffffffff, 0xd, 0x5, 0x2000, 0x8, 0x7, 0x2, 0x8, 0x1, 0x7f00, 0x6, 0x3, 0x4, 0x8, 0x7f, 0x0, 0x5, 0xb, 0x7, 0x4, 0xfffffffe, 0x9, 0xf3, 0x4, 0x72f8b0f4, 0x800, 0x0, 0x0, 0xc2a, 0x6, 0x7f00000, 0xfffffffb, 0xb177, 0xb, 0xf, 0x6, 0x2, 0x9af8, 0x7, 0x2, 0x4, 0xe, 0x2, 0x80000000, 0x101, 0x401, 0x8, 0xfffffffa, 0x0, 0xffff8000, 0xd0, 0x4, 0x1, 0x9e, 0x9, 0x200, 0x3c, 0x1e323c99, 0x0, 0x0, 0x6, 0x0, 0x5, 0x6, 0x10000, 0xdf, 0x0, 0x3446, 0x7, 0x7fff, 0x7, 0x7, 0xb, 0x2, 0x7, 0xca44, 0x1000, 0xffff6f5a, 0x60, 0x9, 0x2, 0xa8, 0xeb8, 0x6, 0x800, 0x7fffffff, 0x200, 0x8, 0x0, 0x9, 0x10001, 0x8, 0xd, 0x73, 0x80000000, 0x3, 0x3, 0x9, 0xffffffff]}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x2, 0x3, 0x0, 0x5509, 0x4}}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x40050}, 0x24009885) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72533395}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc755}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x805fcc8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b307ce8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12608fa6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x90aca4e}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000040}, 0x2004c004) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)="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") ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000001cc0)) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000001d00)=0x2, 0x4) inotify_add_watch(r2, &(0x7f0000001d40)='./file0\x00', 0x22000000) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001dc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001e00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001e40)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000001f40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x54, 0x0, 0x1, 0x70bd25, 0x58000000, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x40040) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffffff29}}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x2) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002100), r3) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x28, r11, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x9891) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r12, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x68, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004800}, 0x4c080) r13 = syz_open_dev$vcsa(&(0x7f0000002380), 0x0, 0x2) accept(r13, &(0x7f00000023c0)=@caif, &(0x7f0000002440)=0x80) 4.256215231s ago: executing program 1 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x2d9}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000500)={0x1001, 0x3ffffffc}, 0x8) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) chroot(&(0x7f0000000000)='./bus\x00') sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010027bd7004ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="104e06000100000028001280130001006272696467650010000580050006000100000004001800"/48], 0x48}, 0x1, 0x0, 0x0, 0x400c080}, 0x2004c8c2) 3.726664062s ago: executing program 5 (id=624): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x4000010) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="400404d9"], 0x7) 3.697851764s ago: executing program 5 (id=625): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x32, r1, r2}, {0x4, 0x9, 0xdd, 0x4, 0xd92f, 0x1240, 0x100000001, 0x9}, {0x869, 0x10001, 0x200, 0x3}, 0xfffffffb, 0x6e6bbe, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x3c}, 0x0, @in6=@local, 0x3500, 0x3, 0x2, 0x1, 0x7c7af0bd, 0x8, 0xf5}}, 0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000240)={@private0, r1}, 0x14) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e23, 0x800, 0x2, 0x0, 0xa0, 0x78, 0x0, r2}, {0x0, 0x4, 0x2, 0xa1c5, 0x8, 0x7506, 0x62, 0x7}, {0xffff, 0x3, 0x9, 0x8}, 0x7ff, 0x6e6bb7, 0x2, 0x1, 0x2}, {{@in=@multicast2, 0x4d4, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x1, 0x3, 0xa, 0x3, 0x3}}, 0xe8) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) recvfrom$unix(r0, &(0x7f0000000380)=""/78, 0x4e, 0x2000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xffffffff, 0x7, 0x10, 0x200, r0, 0x200, '\x00', 0x0, r0, 0x0, 0x4, 0x2}, 0x50) (async) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000480)=@srh={0xca, 0x2, 0x4, 0x1, 0x7, 0x38, 0xb, [@dev={0xfe, 0x80, '\x00', 0x24}]}, 0x18) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000500)={0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x7f}]}, 0x10) fsopen(&(0x7f0000000540)='ramfs\x00', 0x1) sendto(r4, &(0x7f0000000580), 0x0, 0x14, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x4}}, 0x80) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000640)=r0, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=@getsa={0x238, 0x12, 0x409, 0x70bd26, 0x25dfdbfe, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0xa, 0xff}, [@user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x0, 0x2}}, @migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, @in6=@private1, @in6=@local, 0x3c, 0x0, 0x0, 0x3500, 0x8, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x3c, 0x8, 0x0, 0x3506, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x32, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@loopback, 0x33, 0x4, 0x0, 0x3505, 0x8, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@mcast2, 0x6c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @tfcpad={0x8, 0x16, 0x3ff}, @tfcpad={0x8, 0x16, 0x9}, @tfcpad={0x8, 0x16, 0xd46}]}, 0x238}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0/file0\x00'}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000a00)) (async) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) sendmsg$nl_route(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@dellink={0x40, 0x11, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x4000, 0x210c1}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xca6}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x17c7}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x30c1d}, @IFLA_OPERSTATE={0x5, 0x10, 0xf9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x1c4111, r0, 0x0) syz_io_uring_setup(0x27de, &(0x7f0000000b40)={0x0, 0x888c, 0x100, 0x0, 0xdc, 0x0, r0}, &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000c40)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x2007, @fd_index=0x1, 0x10000, 0x0, 0x6, 0x0, 0x1, {0x2, r9}}) (async) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000c80), &(0x7f0000000cc0)=0x8) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000d00)=0x1000, 0x4) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x6, &(0x7f0000000d40)=0x1) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000e00)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r6, &(0x7f0000000d80)={0x442, 0xdd97338cd01bfc50, 0xe6c65c85dfc8d2b5}, &(0x7f0000000dc0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}) 3.636360528s ago: executing program 5 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x20280, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x9c8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRESHEX=r3], 0xa8}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a34001280110001006272696467655f736c617665000000001c00058005001b000100000005001e00000000000500091700000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.544165383s ago: executing program 5 (id=627): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5ee, &(0x7f0000000c40)="$eJzs3V2IXGcdB+D/zOwm2WRrPmzV1tishtpA6M5mswmJeNESP2pMakXxIhTCkp3uhszurNkNdKeCLd6IggjeiCBE7IUV0UBuKqW2Fy3eKCj1g4rGgBVEKFopiKCOnJlzNpPuNFu6mzl2z/PAmX3Pe87M+84OvznnzPkKoLBGkodSxHBEXI6I7Z3R62cY6fxpHrw0kwylaLU+87dSe76pg5dmslmz521LHgYitkTErmOl2Du4st2Fpea5yXq9dj4dry7OzlcXlpr3nJ2dnK5N1+YOHZk4On544sjE+r3XsZ9vve3Pdz1w9Ynn//nvb//28A+T/g6n07rfx3oZiZH0fzIYO7vqB0oRx9e7sZxUOh913NVVVxrIsUO8aa3Wrh8kn987I2JvO//boxKdD++lpx/6x/b49f159xG4eVqZ3pNfbQEbVrm9DjzUDnunXC6PjnbW4W+NreV6Y2Fx/8ONC3NTnXXlHTFYfvhsvTaWbivsiMFSMn6gXb42Pv668YMR7XXgL1eG2uOjZxr1qf5+1QGp4Ygrlz9/ZtO2drlUHk3z/5dKJ//AxpXk/1cvPPVsUn6tkndvgH5K8v/912Y/GfIPhSP/UFzyD8Ul/1Bcq+d/U9/7BPSH5T8U11vP/8s3rU9Af1j+Q3HJPxSX/ENxZfl/8OTJePDkyVYzPf99rjF99tzM/NHxsdHZC2dGzzTOz49ONxrT7TN2Zld/3XqjMX9gPC48Ul2sLSxWF5aap2cbF+YWT7fP6z9d63EpACAHp65uOb5zz3MvlSLisQ8NtYfo2vMnq7CxtVqlyPscZCAfNv2huFyqDYrLNj5QWmX6ljeaUF//vgD9Uc67A0Bu7r7d/j8oqhv9/u8MYNjY/P4PxWUdH/D7PxSP3/+huIZfd/+f7P5ft3Tdu2ssIt4RET+rDG7O7vUFvK1ct6k/HHHlync/V12+D7eCwoYoHG/9X3TjbV/I74sK6I9roc+7J0Bepg5emsmGfrX5zHS/WgJ6eeW+zkFASe6b6dCZMrC8b2BwfY4TWvESO+9MHn/8h4v7ZirJEOn30NqbAt6Mxx6PiPd0Lf/vjTR/pfa+gR3pfLs6s8WtEXFbRLwrIt69xra/+emIkXih1l0n/9A/K/K/nL/r8397RCSL6zsi4r0RsTsi3rfGtn95Ocn/b4a66+QfiuELz+fdAyAvn3gq7x4AeTnlGAMorO89mncPgLw8/aO8ewDk5Wsv5t0DKLbn7ouIsV77/8rt/f2ZwfR6YJvTawEMRcTWiNiWnkN4S3qO4PaufYarOf2piJG48yfddfb/Qf9kx/81Vxz/V14+/q8SEXvW0MYzHx7+aq/6yd1J/p94NDv+7+K+zemUGbclgj545fGIO3rmv7R8wG4pkpxGvP8ttjHyxatP9qp/8YHkdQd/cS3/M5Wk/exYYODman0n4oPRO/+ZpFRdnJ2vLiw172nfx3u6NnfoyMTR8cMTRyaq7UuEVLMLhfRw4u+v7u9V//vxJP/fOiT/kI9k+b/1DfLfvf7/gTW0cewbXznVq374T0n+dz974/yX/7qp9Nn2eHY98kcmFxfPH4jYVDqxsn58DR2FDS7LSJahJP/79vbe/t+VPidZ/h+LiI8k6wsR8Z+I+G9EfDQiPhYRH4+I+2/Q5tfvnr7aq/6PTyb5v3jO8h/ykeR/apXlf/L3X2toY/++n36pV/29e5L8j/7u5RMPDSSD/AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsv4Wl5rnJer12/iYW8n6PAAAAAAAAUBT/CwAA//9jWDE+") (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5ee, &(0x7f0000000c40)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4], 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 2.416130799s ago: executing program 0 (id=638): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000f5ffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r1 = gettid() tkill(r1, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095", @ANYRES16=r1, @ANYRES16=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES64=r4, @ANYRES8=r2, @ANYBLOB="77c388438d6778c72ebf7a476549bbce8afda61930406e9bd1aa33a91558ca0e9240c96c58fc5120ca0b6fee5dbe15a8287f4bcc1ef85b1c8458245bf2d6922751893d77d0b8d063f92a6b801b8ef46406d28506581ac465ea61dd91e02409f7d1fda75203d75912e3f2ba00918a4919b3dc4ed31b02b73e9b5a3546eb116e4d98922a763bc25c46739accb60a8f6256458a989f456fde40e1f4b821f9c33ffc32012bee092c3dd886b268fd39cea5b0127715b60ef77c58a9d18aabd5398bf5ff96d43e06f011533b36ae1c54", @ANYRES32=r0, @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES64=r0], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xcbbb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close(r5) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x2, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x7) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0xfe, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x1) r10 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(r10, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="100000000000000029000000340000110008000001000000"], 0x10}, 0x40c4) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0xff58, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x4c040) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x40000d0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x40, &(0x7f00000003c0)=ANY=[], 0x0) r12 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x0, 0x2) fchdir(r13) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x1) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.365852171s ago: executing program 3 (id=639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3a0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) creat(0x0, 0x1) iopl(0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{r2, 0x0, 0x1, &(0x7f0000000040)={@align=0x8, {0x5, 0x1, 0x5, 0xb5}}, 0x400, &(0x7f0000000140), 0x0}, 0x1, &(0x7f00000004c0)=[{0x1, 0xe03, &(0x7f00000001c0)='g\x00\x00', &(0x7f0000000200)="9c49b61bcc07e1ef8082200baa0fea", 0xf, 0x20}]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) sendto$inet6(r0, &(0x7f00000000c0)="0002", 0xfffffffffffffc94, 0x24000000, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x1) write$char_usb(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r5, &(0x7f0000000100), 0xa, 0x0, 0x0) 2.288956716s ago: executing program 0 (id=640): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c051, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x5212, 0x10000, 0xa, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f006e409000000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd4e32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733", 0xbd) 2.288030286s ago: executing program 0 (id=641): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$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") syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) process_mrelease(r1, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVdkZAPDvvvyxxqRJS4uttiXQYhXbF5NoVCjFrAqipa2FLvpHYhITMckL5gVUCjWIRQqVLrqwuOrGLroJ3RWZQRgYmNUsXMwsRMHVIOPIyLiQWWS4L/fpMz6TiYm5w/P3g8u757zkne++j3vfOY9zzwvgjdUdEYcioikiihHRmdUXsi0uLG7p353onx9PtyQWFo49TCKJiMP98+PV10qyxy3ZC3wnfbgUsbv5xXZnzp0/PTQxMXomK/eUJ6d7Zs6d/+mpyaGx0bHRqYH9+w8e2Dew7+D6HevmrVevf/dfR25deXfu+9/eMjyZxtuePVd7HOulO7qz96QlOmqfSCJOrHdjOfta3gGwah8Xtt/IOwYAYOMVsr5/c6X/3xlNsdhZv3v7D4864y9teccHAAAArN3CQlP2CAAAADSuxNgfAAAAGlx1HsDh/vnx6rZRcw/u/2KjWuJlHgxGRNdi/qv3dy8+0/z0nt6W13R/75+fRHRHx+OPfv7Nd9ItXtN92Hw1zd/LOwLy1Lo37wjI07Zf5x0BeXr/ct4RcGEuIm4eqtP/T9bc52tfUk6WlI8Opv2/v8/U1un/vTl+cyzvCMjTLwfyjoA8XXuYdwTcHIyIPfW+/ytU1u+r2hwRbdW1/dbJgfb08/9/d2vrXvz8L9xfxyZZ4sFgxM9q1nY8UZP/TFdTVuqofFXYkpw8NTG6JyK+HhE7o2VTWu5dpo3egWv/qFf/vcdp/v+TVL//S7e0/ep3gVkc95s3Pf9/I0PlobUeN4sezEVsa66X/2f9/yTL9at6q3Tlb/XqB3ZV1hXdsXz+eZ0W/h2xo+75/2y0liy7PmtP5XLQU70o1PHfDz+9VK/+R39K8396l/znJz3/25bPf+X6/3S93pnVt3Hx7euP69U/uZHm/58XXuX635r8thJga1Z3dqhcPtMb0ZocebG+b/UxN6rq+1F9v9L87/xh/c//av8vydaF7oqIb7xCm3N3pm/Vq79aSPN/7Y/O//yk+R9Z4fxPnjv/V78z/8FPflyv7e2X0/x3/W7l839vJZidWY3+38q+bILyjhMAAAAAAACA9VGo3KeTFIpP9wuFYnFxnu+3oq0wUZop7z5Zmp0aWbyfpytaCtWpXp0180F7s/kh1XLfknJ/NnfkcufmSrk4XJoYyfvgAQAAoMG1R9z5/cX/b93ykvF/6nZn3lECAAAAa5GO/zvutFWW8/rMOB8AAAAaUjr+f/TXT94L438AAABoWLXjfwAAAKCx/ero0XS7V/3dv6nS2KnT49MH+/YUJ2eHi8OlM9PFsVJprLJi3+TKrzdRKk339sXs2Z7y6Ey5Z+bc+eOTpdmp8vHK78YeH23ZgGMCVnb48x9syzsGAABg46zld/3t2LHTqDt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiLLwIAAP//KaX9jA==") (async) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVdkZAPDvvvyxxqRJS4uttiXQYhXbF5NoVCjFrAqipa2FLvpHYhITMckL5gVUCjWIRQqVLrqwuOrGLroJ3RWZQRgYmNUsXMwsRMHVIOPIyLiQWWS4L/fpMz6TiYm5w/P3g8u757zkne++j3vfOY9zzwvgjdUdEYcioikiihHRmdUXsi0uLG7p353onx9PtyQWFo49TCKJiMP98+PV10qyxy3ZC3wnfbgUsbv5xXZnzp0/PTQxMXomK/eUJ6d7Zs6d/+mpyaGx0bHRqYH9+w8e2Dew7+D6HevmrVevf/dfR25deXfu+9/eMjyZxtuePVd7HOulO7qz96QlOmqfSCJOrHdjOfta3gGwah8Xtt/IOwYAYOMVsr5/c6X/3xlNsdhZv3v7D4864y9teccHAAAArN3CQlP2CAAAADSuxNgfAAAAGlx1HsDh/vnx6rZRcw/u/2KjWuJlHgxGRNdi/qv3dy8+0/z0nt6W13R/75+fRHRHx+OPfv7Nd9ItXtN92Hw1zd/LOwLy1Lo37wjI07Zf5x0BeXr/ct4RcGEuIm4eqtP/T9bc52tfUk6WlI8Opv2/v8/U1un/vTl+cyzvCMjTLwfyjoA8XXuYdwTcHIyIPfW+/ytU1u+r2hwRbdW1/dbJgfb08/9/d2vrXvz8L9xfxyZZ4sFgxM9q1nY8UZP/TFdTVuqofFXYkpw8NTG6JyK+HhE7o2VTWu5dpo3egWv/qFf/vcdp/v+TVL//S7e0/ep3gVkc95s3Pf9/I0PlobUeN4sezEVsa66X/2f9/yTL9at6q3Tlb/XqB3ZV1hXdsXz+eZ0W/h2xo+75/2y0liy7PmtP5XLQU70o1PHfDz+9VK/+R39K8396l/znJz3/25bPf+X6/3S93pnVt3Hx7euP69U/uZHm/58XXuX635r8thJga1Z3dqhcPtMb0ZocebG+b/UxN6rq+1F9v9L87/xh/c//av8vydaF7oqIb7xCm3N3pm/Vq79aSPN/7Y/O//yk+R9Z4fxPnjv/V78z/8FPflyv7e2X0/x3/W7l839vJZidWY3+38q+bILyjhMAAAAAAACA9VGo3KeTFIpP9wuFYnFxnu+3oq0wUZop7z5Zmp0aWbyfpytaCtWpXp0180F7s/kh1XLfknJ/NnfkcufmSrk4XJoYyfvgAQAAoMG1R9z5/cX/b93ykvF/6nZn3lECAAAAa5GO/zvutFWW8/rMOB8AAAAaUjr+f/TXT94L438AAABoWLXjfwAAAKCx/ero0XS7V/3dv6nS2KnT49MH+/YUJ2eHi8OlM9PFsVJprLJi3+TKrzdRKk339sXs2Z7y6Ey5Z+bc+eOTpdmp8vHK78YeH23ZgGMCVnb48x9syzsGAABg46zld/3t2LHTqDt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiLLwIAAP//KaX9jA==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 2.200194101s ago: executing program 0 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 2.192393892s ago: executing program 3 (id=643): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0x20000023896) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) (async) 2.111489816s ago: executing program 4 (id=644): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0/file0\x00', 0x100008a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio}, {@resuid}, {@nodiscard}, {@journal_checksum}, {@noinit_itable}]}, 0x1, 0x47d, &(0x7f0000000440)="$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") syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT], 0x3, 0x7dc, &(0x7f0000000d80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0xfd, 0x0, &(0x7f0000000000)) 2.04414622s ago: executing program 4 (id=645): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x284ba, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x20d, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, '\x00', "03e08b113c0af5000000000000008000", "d5a8948b", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) 1.7093019s ago: executing program 3 (id=646): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020400) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/49, 0x4f, 0x31, 0x0, 0x81}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x8000000, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x50) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r4, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000240)="abff49a07b0069dbf6c2c7d9b96f17623b", &(0x7f0000000280)=@udp6=r5, 0x2}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ec, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.357636451s ago: executing program 0 (id=647): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020400) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/49, 0x4f, 0x31, 0x0, 0x81}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x8000000, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x50) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x75, 0x4, 0x7ff}, 0x0) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000240)="abff49a07b0069dbf6c2c7d9b96f17623b", &(0x7f0000000280)=@udp6=r5, 0x2}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ec, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.239843288s ago: executing program 1 (id=648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000001380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, 'memory.swap.current\x00'}, {0x20, '#\r\x00\xa2\x0f#7F\t\x1e\xf6\x85'}, {0x20, 'memory.swap.current\x00'}, {0x20, '2eS\xf7\f\xfb\xb1&\xa0\x80B:\xf6\xb4\x1amemory.swap.current\x00'}], 0xa, "4cf1878377b8a78e8500bce1e21b10cb5a950db36773baa2e969b3016ecd46ef0bd8e015fb603b9647f7009314ad16c829534ec6b9023f82754199faef869db8f811c6b52340b69ce9b1c58839faf4679b1e7ce60f013e168d4e4e238e72762aefb5ceeba163d655e9f025157adc25d2dbeccf28a934b919ebf74f1ccab0fd576e4df078c9c3e44d76e7d215ad57d40f7391254b9889c4dd8200f32afc5443111180ece083b024126b765bd1a627b1c2a25744cdd2b61a30800ccad0036471e7f02ac5ca467d40b15b412854577148eb5c868e7a3c2d72d878a558c3c7c8e80efa99147cf241dd5ba29e"}, 0xfffffffffffffdec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) 1.180337371s ago: executing program 1 (id=649): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110b4000000000095001b0000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) 1.179687051s ago: executing program 1 (id=650): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000100009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xfe5b, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400ecff1100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x9, 0x0, 0x0, 0x0, 0xc, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0xac86, 0x6, 0x7, 0x1, 0x8, 0x11002, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.140746263s ago: executing program 4 (id=651): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8000000009}, 0x100210, 0x10000, 0x8, 0x1, 0x8, 0x7, 0xb, 0x0, 0x2, 0x0, 0x2012000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_GET_DUMPABLE(0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") socket$nl_rdma(0x10, 0x3, 0x14) 1.103463085s ago: executing program 1 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @multicast1, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @remote, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12120) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r7 = gettid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10b85, 0x49060}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_MTU={0x8, 0x4, 0xfffffff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.099554566s ago: executing program 4 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @multicast1, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @remote, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12120) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare(0x6a040000) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r7 = gettid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10b85, 0x49060}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_MTU={0x8, 0x4, 0xfffffff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) 963.754843ms ago: executing program 4 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000840900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014000380100000800800034000000002"], 0xd4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 794.828154ms ago: executing program 3 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r0, 0x8, 0xb3, 0x5}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000200)={0x49db, 0x0, 0x7, 0x201, 0x19, "089ea164f13d7607"}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d022b00000000dbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}}, 0x4000) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x37}]}, 0x24}}, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x6, 0xffffff7f, 0x7, 0x1, 0x3, "516b81a561a9e376edd19405cf7fa0282354df", 0x3, 0x3}) (async) r6 = syz_open_pts(r1, 0x20800) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x44) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc000000000105050000000000000000010000003c0002"], 0xcc}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 515.99311ms ago: executing program 3 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e22, 0xbebe, @local, 0x6}}, 0x973d, 0x1, 0x19b, 0x4, 0x2, 0x39c, 0x6}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e22, 0xbebe, @local, 0x6}}, 0x973d, 0x1, 0x19b, 0x4, 0x2, 0x39c, 0x6}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$MRT6(r6, 0x29, 0x1f, 0x0, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7WimlTpS56HmqVGTmdnMaoZFJUQlNiCVkLghxImj2ClN1EUCuy5YIBBIiAV7/gI2dEWFhFjDHrFARVCCBEhIRvfabhM3DhakMc39/aTbnPuwv3NifafnHt+bG0BmnU3+yUUMRsRHEXG0vrr9gLP1H5t3b0wnSy5qtctf5tLjkvXmoc3XHYmI9Yjoi4gn/hfxbO7BuJXVtfmpUqm43Fgfri4sDVdW1y7MLUzNFmeLi6MTFycnJ0bGxyb3rK03X37+5qV3H+t959uX7tx+5f33kmoNNvZtbcdeqje9J45v2XYoIv7zMIJ1QaHRnv5uV4SfJfn8fhcR59L8PxqF9NMEsqBWq9V+qB1ut3u9BhxY+XQMnMsPRUS9nM8PDdXH8L+PgXypXKn+42p5ZXGmPlY+Fj35q3Ol4kjjXOFY9OSS9dG0fH99rGV9PCIdA79a6E/Xh6bLpZn97eqAFkda8v+bQj3/gYxwyg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9lV6HYFgK7x/z9k0uOXLiVLrXn/+8y11ZX58rULM8XK/NDCyvTQdHl5aWi2XJ5N79lZ+Kn3K5XLS6P/jJXrw9VipTpcWV27slBeWaxeSe/rv1Ls2ZdWAZ04fubWJ7mIWP9Xf7okehv75CocbLVaLrp9DzLQHab+ILtM/UF2OccHWv9Eb+u4oK/dC5fuzxcCj5Z8tysAdM35U77/g6wy/w/ZZf4fsssYH9jhEX3b7Db/DzyazP9Ddg22ef7Xb7Y8u2skIn4bER8Xeg43n/UFHAT5z3ON8f/5o38ZbN3bm/su/YqgNyJeePPy69enqtXl0WT7V/e2V99obB/b8sK2JwxAtzTztJnHAEB2bd69Md1c9jPuF/+tX4TwYPxDjbnJvvQ7yoHN3LZrFXJ7dO3C+kZEnNwpfq7xvPP6iczAZuGB+CcaP3P1t0jreyh9bvr+xD+1Jf6ft8Q//Yt/K5ANt5L+Z2Sn/MunOR338m97/zO4R9dOtO//8vf6v0Kb/u9MhzGee+vFz9rG34g4vWP8Zry+NFZr/KRu5zuMf+fpJ//Qbl/t7fr77BS/KSkNVxeWhiuraxfmFjZmi7PFxdGJi5OTEyPjY5PDV+dKxT8daR//3yc/vL1b+wca8Xui8/Yn2/7WYfu//+MHT53dJf5fz+38+Z/YJX5/RPy9w/hfj336TLt9SfyZNr///C7xk23jHcavvPb/wx0eCgDsg8rq2vxUqVRcVlBQ6Eph49dRjZZCt3sm4GGrrCan5knSd7smAAAAAAAAAAAAQKf243LibrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg+DEAAP//KbnRCQ==") socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107c42, 0x20) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107c42, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000100)={0x3920e, r8, 0x3, 0x1, 0x6, 0x6}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000811179000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r10 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a7886fba7f4e169edb30", 0x1c}], 0x1}, 0x0) (async) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a7886fba7f4e169edb30", 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x7}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 468.171162ms ago: executing program 0 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001e0001244c6bc846a910502507000040"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x24, 0xfffffffffffffffd, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) 115.613393ms ago: executing program 3 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3b0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) creat(0x0, 0x1) iopl(0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{r2, 0x0, 0x1, &(0x7f0000000040)={@align=0x8, {0x5, 0x1, 0x5, 0xb5}}, 0x400, &(0x7f0000000140), 0x0}, 0x1, &(0x7f00000004c0)=[{0x1, 0xe03, &(0x7f00000001c0)='g\x00\x00', &(0x7f0000000200)="9c49b61bcc07e1ef8082200baa0fea", 0xf, 0x20}]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) sendto$inet6(r0, &(0x7f00000000c0)="0002", 0xfffffffffffffc94, 0x24000000, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x1) write$char_usb(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r5, &(0x7f0000000100), 0xa, 0x0, 0x0) 0s ago: executing program 4 (id=659): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a80016000a00014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) unshare(0x20060400) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20002894) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20002894) kernel console output (not intermixed with test programs): 076341][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.102279][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.137515][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.144468][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.170414][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.188628][ T3310] hsr_slave_0: entered promiscuous mode [ 32.194684][ T3310] hsr_slave_1: entered promiscuous mode [ 32.200758][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 32.206562][ T3310] Cannot create hsr debugfs directory [ 32.229492][ T3304] hsr_slave_0: entered promiscuous mode [ 32.235621][ T3304] hsr_slave_1: entered promiscuous mode [ 32.241673][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.247705][ T3304] Cannot create hsr debugfs directory [ 32.260837][ T3308] hsr_slave_0: entered promiscuous mode [ 32.266868][ T3308] hsr_slave_1: entered promiscuous mode [ 32.272732][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 32.278539][ T3308] Cannot create hsr debugfs directory [ 32.330920][ T3311] hsr_slave_0: entered promiscuous mode [ 32.337083][ T3311] hsr_slave_1: entered promiscuous mode [ 32.343203][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.349052][ T3311] Cannot create hsr debugfs directory [ 32.514689][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.531358][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.542756][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.557109][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.575602][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.584999][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.595977][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.605239][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.635092][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.646230][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.663656][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.672940][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.710935][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.720731][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.730342][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.740188][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.773921][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.799930][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.821665][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.832147][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.841233][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.850912][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.862612][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.869807][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.880534][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.894053][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.909521][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.916657][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.942900][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.950016][ T832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.965975][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.973064][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.985997][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.004982][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.023904][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.033335][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.040513][ T2531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.063044][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.070137][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.084171][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.129528][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.150437][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.157558][ T832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.170912][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.186143][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.199672][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.206853][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.218316][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.229899][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.256794][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.264023][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.274054][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.281255][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.329829][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.359997][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.370682][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.420078][ T3306] veth0_vlan: entered promiscuous mode [ 33.427695][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.450080][ T3306] veth1_vlan: entered promiscuous mode [ 33.476479][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.521454][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.530805][ T3306] veth0_macvtap: entered promiscuous mode [ 33.547896][ T3306] veth1_macvtap: entered promiscuous mode [ 33.580588][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.604931][ T3308] veth0_vlan: entered promiscuous mode [ 33.634520][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.656582][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.665709][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.682107][ T3308] veth1_vlan: entered promiscuous mode [ 33.688811][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.698698][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.711001][ T3310] veth0_vlan: entered promiscuous mode [ 33.725772][ T3304] veth0_vlan: entered promiscuous mode [ 33.746897][ T3304] veth1_vlan: entered promiscuous mode [ 33.759087][ T3310] veth1_vlan: entered promiscuous mode [ 33.798901][ T3308] veth0_macvtap: entered promiscuous mode [ 33.814444][ T3304] veth0_macvtap: entered promiscuous mode [ 33.824209][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.842295][ T3308] veth1_macvtap: entered promiscuous mode [ 33.856823][ T3304] veth1_macvtap: entered promiscuous mode [ 33.866302][ T3310] veth0_macvtap: entered promiscuous mode [ 33.878172][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.910484][ T3310] veth1_macvtap: entered promiscuous mode [ 33.918612][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.929805][ T3472] team_slave_0: entered promiscuous mode [ 33.935504][ T3472] team_slave_1: entered promiscuous mode [ 33.942364][ T3472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 33.953272][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.963059][ T3311] veth0_vlan: entered promiscuous mode [ 33.991920][ T1668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.002409][ T1668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.021203][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.028971][ T1668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.039376][ T3311] veth1_vlan: entered promiscuous mode [ 34.060395][ T1668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.077866][ T3311] veth0_macvtap: entered promiscuous mode [ 34.088355][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.102328][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 34.102346][ T28] audit: type=1400 audit(1770989841.810:115): avc: denied { prog_load } for pid=3478 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.143710][ T28] audit: type=1400 audit(1770989841.810:116): avc: denied { bpf } for pid=3478 comm="syz.3.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.171901][ T28] audit: type=1400 audit(1770989841.810:117): avc: denied { perfmon } for pid=3478 comm="syz.3.8" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.199042][ T3311] veth1_macvtap: entered promiscuous mode [ 34.204866][ T28] audit: type=1400 audit(1770989841.810:118): avc: denied { prog_run } for pid=3478 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.210860][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.224087][ T28] audit: type=1400 audit(1770989841.840:119): avc: denied { open } for pid=3478 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.237668][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.261907][ T3484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 34.284538][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.286145][ T28] audit: type=1400 audit(1770989841.840:120): avc: denied { kernel } for pid=3478 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.300418][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.312163][ T28] audit: type=1400 audit(1770989841.840:121): avc: denied { create } for pid=3478 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.342382][ T28] audit: type=1400 audit(1770989841.840:122): avc: denied { map } for pid=3478 comm="syz.3.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.369107][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.392926][ T28] audit: type=1400 audit(1770989841.840:123): avc: denied { read write } for pid=3478 comm="syz.3.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.403573][ T3489] Zero length message leads to an empty skb [ 34.434404][ T28] audit: type=1400 audit(1770989841.840:124): avc: denied { execute } for pid=3478 comm="syz.3.8" path="/3/cpu.stat" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.446627][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.466771][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.483260][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.521100][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.535962][ T3494] loop3: detected capacity change from 0 to 2048 [ 34.543031][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.561368][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.573828][ T3494] Alternate GPT is invalid, using primary GPT. [ 34.580469][ T3494] loop3: p1 p2 p3 [ 34.590573][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.630009][ T2993] Alternate GPT is invalid, using primary GPT. [ 34.637224][ T2993] loop3: p1 p2 p3 [ 34.654471][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.683784][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.721563][ T3494] pim6reg: entered allmulticast mode [ 34.733333][ T1668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.887256][ T3500] pim6reg: left allmulticast mode [ 35.075184][ T3506] loop4: detected capacity change from 0 to 512 [ 35.111134][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 35.121609][ T3506] ======================================================= [ 35.121609][ T3506] WARNING: The mand mount option has been deprecated and [ 35.121609][ T3506] and is ignored by this kernel. Remove the mand [ 35.121609][ T3506] option from the mount to silence this warning. [ 35.121609][ T3506] ======================================================= [ 35.158058][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 35.299203][ C0] hrtimer: interrupt took 26091 ns [ 35.492891][ T3517] loop4: detected capacity change from 0 to 1024 [ 35.558870][ T3517] EXT4-fs: Ignoring removed oldalloc option [ 35.593648][ T3517] EXT4-fs: Ignoring removed bh option [ 35.617505][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.618767][ T3522] vlan2: entered allmulticast mode [ 35.636909][ T3522] bond0: entered allmulticast mode [ 35.645431][ T3522] bond_slave_0: entered allmulticast mode [ 35.651540][ T3526] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17'. [ 35.666250][ T3522] bond_slave_1: entered allmulticast mode [ 35.678666][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.687975][ T3526] bond_slave_0: left allmulticast mode [ 35.697092][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.706572][ T3526] bond_slave_1: left allmulticast mode [ 35.716543][ T3526] bond0 (unregistering): Released all slaves [ 35.739685][ T3517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3517 comm=syz.4.15 [ 35.839846][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.867702][ T3537] capability: warning: `syz.2.19' uses 32-bit capabilities (legacy support in use) [ 35.938996][ T3537] sctp: [Deprecated]: syz.2.19 (pid 3537) Use of int in maxseg socket option. [ 35.938996][ T3537] Use struct sctp_assoc_value instead [ 35.985982][ T3537] program syz.2.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.082843][ T3549] loop4: detected capacity change from 0 to 512 [ 36.112306][ T3549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.186093][ T3549] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.211706][ T3549] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 36.252731][ T3549] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.262744][ T3554] ieee802154 phy0 wpan0: encryption failed: -90 [ 36.278870][ T3549] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 36.900599][ T3559] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure [ 36.919580][ T3565] loop0: detected capacity change from 0 to 1024 [ 36.931077][ T3565] EXT4-fs: Ignoring removed bh option [ 36.977691][ T3565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.001759][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.108085][ T3572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 37.227289][ T3579] loop2: detected capacity change from 0 to 256 [ 37.339121][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.574326][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 37.719095][ T3589] loop3: detected capacity change from 0 to 512 [ 37.817000][ T3593] loop0: detected capacity change from 0 to 256 [ 38.018170][ T3605] netlink: 'syz.3.38': attribute type 16 has an invalid length. [ 38.025925][ T3605] netlink: 'syz.3.38': attribute type 17 has an invalid length. [ 38.088063][ T3598] loop3: detected capacity change from 0 to 512 [ 38.096238][ T3598] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.130607][ T3614] serio: Serial port pts0 [ 38.135317][ T3598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.186185][ T3616] netlink: 'syz.1.44': attribute type 2 has an invalid length. [ 38.195611][ T3605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.211291][ T3616] netlink: 'syz.1.44': attribute type 8 has an invalid length. [ 38.226244][ T3616] netlink: 132 bytes leftover after parsing attributes in process `syz.1.44'. [ 38.227916][ T3598] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.245524][ T3598] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 38.253999][ T3598] System zones: 0-1, 15-15, 18-18, 34-34 [ 38.259991][ T3598] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.266629][ T3598] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz.3.38: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.284675][ T3598] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 38.297192][ T3598] EXT4-fs error (device loop3): ext4_quota_enable:7192: comm syz.3.38: Bad quota inode: 4, type: 1 [ 38.367470][ T3598] loop3: lost filesystem error report for type 5 error -117 [ 38.367737][ T3598] EXT4-fs warning (device loop3): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.397816][ T3598] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 38.414782][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.422525][ T3623] netlink: 'syz.0.45': attribute type 12 has an invalid length. [ 38.465782][ T3598] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.38: iget: bad i_size value: 360287970189639690 [ 38.573573][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.658121][ T3638] netlink: 52 bytes leftover after parsing attributes in process `syz.3.50'. [ 38.783849][ T3642] loop0: detected capacity change from 0 to 256 [ 38.993117][ T3634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 39.002922][ T3634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 39.094114][ T3634] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 39.272042][ T3664] netlink: 'syz.3.58': attribute type 12 has an invalid length. [ 39.297687][ T3668] Illegal XDP return value 488505380 on prog (id 20) dev N/A, expect packet loss! [ 39.311882][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 39.311898][ T28] audit: type=1400 audit(1770989847.020:245): avc: denied { ioctl } for pid=3663 comm="syz.3.58" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.357921][ T28] audit: type=1400 audit(1770989847.060:246): avc: denied { name_bind } for pid=3665 comm="syz.1.60" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.399137][ T3672] 9p: Bad value for 'wfdno' [ 39.404514][ T28] audit: type=1400 audit(1770989847.110:247): avc: denied { mounton } for pid=3665 comm="syz.1.60" path="/7/file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.427507][ T3666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.475028][ T3684] EXT4-fs: Invalid want_extra_isize 1025 [ 39.502246][ T28] audit: type=1400 audit(1770989847.210:248): avc: denied { create } for pid=3674 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.519531][ T3684] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 39.540198][ T3684] EXT4-fs: Ignoring removed oldalloc option [ 39.556886][ T3684] EXT4-fs (loop4): 1 truncate cleaned up [ 39.565096][ T3684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.580325][ T28] audit: type=1400 audit(1770989847.230:249): avc: denied { bind } for pid=3683 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.580541][ T3680] bridge_slave_0: left allmulticast mode [ 39.605222][ T28] audit: type=1400 audit(1770989847.250:250): avc: denied { bpf } for pid=3690 comm="syz.1.67" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.625974][ T28] audit: type=1400 audit(1770989847.260:251): avc: denied { perfmon } for pid=3690 comm="syz.1.67" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.646890][ T28] audit: type=1400 audit(1770989847.270:252): avc: denied { ioctl } for pid=3688 comm="syz.3.66" path="socket:[5035]" dev="sockfs" ino=5035 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.671556][ T3680] bridge_slave_0: left promiscuous mode [ 39.677347][ T3680] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.684611][ T28] audit: type=1400 audit(1770989847.390:253): avc: denied { create } for pid=3690 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 39.704178][ T28] audit: type=1400 audit(1770989847.390:254): avc: denied { bind } for pid=3690 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 39.737406][ T3680] bridge_slave_1: left allmulticast mode [ 39.743170][ T3680] bridge_slave_1: left promiscuous mode [ 39.749347][ T3680] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.762098][ T3686] set_capacity_and_notify: 2 callbacks suppressed [ 39.762112][ T3686] loop0: detected capacity change from 0 to 8192 [ 39.779166][ T3680] bond0: (slave bond_slave_0): Releasing backup interface [ 39.790347][ T3686] vfat: Unknown parameter '"l"œD£†]Âë¯?Vmøéñé›ñÍ—@l5We¥“?ÓœÎK1¬‡1”³ú‚]÷Ÿeöuý¿ïeÖñ¥½ß*(R:Gª* [ 39.790347][ T3686] KRYBþ|ž¾´z“–ßÚ#¹”BýÅGÏ(@•Å!oþXȃwç’Õ¿p—Å„TJ¨¨_V?«Ÿ$xÚ6é •tGÌbð [ 39.790347][ T3686] G†ì‚^ÉIm—èËßHê¬ñþ²øzrÔ§Rx™—H³„aåkçŠ]BExzA’j™Ààs|£›ç³ËÅ<Ž‘PY'/1¯\' [ 39.822093][ T3680] bond0: (slave bond_slave_1): Releasing backup interface [ 39.837135][ T3680] team0: Port device team_slave_0 removed [ 39.860809][ T3680] team0: Port device team_slave_1 removed [ 39.868159][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.875658][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.896950][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.947699][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.968904][ T3680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.137967][ T3691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.166839][ T3702] __nla_validate_parse: 1 callbacks suppressed [ 40.166855][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'. [ 40.204080][ T3691] syz.1.67 (3691) used greatest stack depth: 10248 bytes left [ 40.225275][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.244002][ T3708] loop1: detected capacity change from 0 to 1024 [ 40.266628][ T3708] EXT4-fs: Ignoring removed bh option [ 40.272121][ T3708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.283731][ T3709] netlink: 'syz.0.73': attribute type 12 has an invalid length. [ 40.312652][ T3708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 40.321565][ T3708] System zones: 0-1, 3-36 [ 40.329164][ T3708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.427044][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.460455][ T3727] loop0: detected capacity change from 0 to 512 [ 40.488782][ T3727] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.509382][ T3729] loop4: detected capacity change from 0 to 1024 [ 40.514492][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 40.526091][ T3727] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.533072][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 40.536819][ T3729] EXT4-fs: inline encryption not supported [ 40.546465][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.79: corrupted inode contents [ 40.560528][ T3731] netlink: 'syz.1.77': attribute type 7 has an invalid length. [ 40.568334][ T3727] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.568479][ T3727] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.79: mark_inode_dirty error [ 40.589312][ T3727] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.590436][ T3729] ext4: Bad value for 'commit' [ 40.604520][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.79: corrupted inode contents [ 40.616441][ T3727] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.617166][ T3727] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.79: mark_inode_dirty error [ 40.648250][ T3727] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.653085][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.79: corrupted inode contents [ 40.674797][ T3727] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.675075][ T3727] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 40.693080][ T3727] loop0: lost filesystem error report for type 5 error -117 [ 40.693235][ T3727] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.79: corrupted inode contents [ 40.712672][ T3727] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.712897][ T3727] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.79: mark_inode_dirty error [ 40.733527][ T3727] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 40.735793][ T3727] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 40.756333][ T3727] loop0: lost filesystem error report for type 5 error -117 [ 40.756781][ T3727] EXT4-fs (loop0): 1 truncate cleaned up [ 40.787928][ T58] EXT4-fs error (device loop0): ext4_release_dquot:7034: comm kworker/u8:4: Failed to release dquot type 1 [ 40.817371][ T58] loop0: lost filesystem error report for type 5 error -117 [ 40.819553][ T3727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.882899][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 40.894043][ T3727] syz.0.79 (3727) used greatest stack depth: 10208 bytes left [ 40.898642][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.915801][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 40.935561][ T3731] netlink: 'syz.1.77': attribute type 7 has an invalid length. [ 40.960205][ T3744] loop2: detected capacity change from 0 to 512 [ 40.973469][ T3733] loop3: detected capacity change from 0 to 256 [ 40.996936][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.006549][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.020327][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.094589][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.147086][ T3749] loop4: detected capacity change from 0 to 8192 [ 41.337119][ T3775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 41.349210][ T3772] loop1: detected capacity change from 0 to 512 [ 41.355600][ T3775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.87'. [ 41.381063][ T3772] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.389527][ T3777] loop0: detected capacity change from 0 to 2048 [ 41.396677][ T3772] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 41.398678][ T3775] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 41.406038][ T3777] EXT4-fs: Ignoring removed orlov option [ 41.426487][ T3772] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 41.442676][ T3777] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 64 [ 41.484807][ T3772] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.86: attempt to clear invalid blocks 2 len 1 [ 41.501028][ T3772] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.503009][ T3772] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.86: invalid indirect mapped block 1819239214 (level 0) [ 41.539446][ T3783] loop0: detected capacity change from 0 to 512 [ 41.559052][ T3783] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.574126][ T3772] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.574348][ T3772] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.86: invalid indirect mapped block 1819239214 (level 1) [ 41.601140][ T3772] EXT4-fs (loop1): 1 truncate cleaned up [ 41.610186][ T3783] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.623671][ T3772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.644316][ T3783] EXT4-fs (loop0): 1 truncate cleaned up [ 41.658104][ T3764] EXT4-fs error (device loop1): ext4_lookup:1782: inode #2: comm syz.1.86: 'file1' linked to parent dir [ 41.676547][ T3783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.759538][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.776971][ T3803] SELinux: failed to load policy [ 41.806973][ T3802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.832836][ T3798] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.96: corrupted inode contents [ 41.870018][ T3798] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.96: mark_inode_dirty error [ 41.881711][ T3798] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.96: corrupted inode contents [ 41.893988][ T3798] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.96: mark_inode_dirty error [ 41.906752][ T3798] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.96: corrupted inode contents [ 41.919893][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.929787][ T3798] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.96: mark_inode_dirty error [ 41.942294][ T3812] vfat: Unknown parameter 'ÿÿÿÿ' [ 41.982121][ T3798] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.96: corrupted inode contents [ 42.008414][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.023531][ T3798] EXT4-fs error (device loop2): ext4_truncate:4635: inode #15: comm syz.2.96: mark_inode_dirty error [ 42.045269][ T3820] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.046067][ T3413] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.067163][ T3798] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem [ 42.068378][ T3818] netlink: 60 bytes leftover after parsing attributes in process `syz.0.102'. [ 42.078278][ T3802] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.96: corrupted inode contents [ 42.106265][ T3818] unsupported nlmsg_type 40 [ 42.181069][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.201380][ T3804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.227362][ T3804] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.253857][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.282132][ T3829] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.311878][ T3829] netlink: 'syz.4.105': attribute type 10 has an invalid length. [ 42.312513][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.320726][ T3828] netlink: 2 bytes leftover after parsing attributes in process `syz.4.105'. [ 42.340757][ T3828] bond0: entered promiscuous mode [ 42.346143][ T3828] bond_slave_0: entered promiscuous mode [ 42.352359][ T3828] bond_slave_1: entered promiscuous mode [ 42.358443][ T3828] bridge0: port 3(bond0) entered blocking state [ 42.364954][ T3828] bridge0: port 3(bond0) entered disabled state [ 42.371633][ T3828] bond0: entered allmulticast mode [ 42.376993][ T3828] bond_slave_0: entered allmulticast mode [ 42.382896][ T3828] bond_slave_1: entered allmulticast mode [ 42.391008][ T3828] bridge0: port 3(bond0) entered blocking state [ 42.397396][ T3828] bridge0: port 3(bond0) entered forwarding state [ 42.404731][ T3829] netlink: 2 bytes leftover after parsing attributes in process `syz.4.105'. [ 42.659352][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.680344][ T3843] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 42.796373][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.839043][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.873140][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.905398][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.216125][ T3877] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.223061][ T3877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.231901][ T3877] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 43.241734][ T3877] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 43.251446][ T3877] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.263293][ T3877] EXT4-fs error (device loop3): ext4_get_journal_inode:5861: inode #32: comm syz.3.119: iget: special inode unallocated [ 43.276060][ T3877] EXT4-fs (loop3): no journal found [ 43.330913][ T3860] EXT4-fs: Ignoring removed nobh option [ 43.354657][ T3860] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 43.407700][ T3863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.435717][ T3860] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.115: attempt to clear invalid blocks 1 len 1 [ 43.449897][ T3860] fserror_report: 2 callbacks suppressed [ 43.449913][ T3860] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 43.469247][ T3863] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.116: Allocating blocks 497-513 which overlap fs metadata [ 43.492495][ T3863] EXT4-fs (loop2): pa ffff888107a57460: logic 256, phys. 385, len 8 [ 43.500625][ T3863] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 43.702140][ T3886] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 43.710376][ T3886] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 43.932300][ T3862] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 44.307189][ T3860] EXT4-fs (loop4): Remounting filesystem read-only [ 44.313892][ T3860] EXT4-fs (loop4): 1 truncate cleaned up [ 44.364732][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.388893][ T3860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.440827][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 44.440843][ T28] audit: type=1400 audit(1770989852.150:316): avc: denied { override_creds } for pid=3858 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.470793][ T3893] validate_nla: 1 callbacks suppressed [ 44.470807][ T3893] netlink: 'syz.3.122': attribute type 17 has an invalid length. [ 44.562416][ T28] audit: type=1400 audit(1770989852.230:317): avc: denied { create } for pid=3891 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 44.722324][ T28] audit: type=1400 audit(1770989852.430:318): avc: denied { audit_write } for pid=3907 comm="syz.1.127" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 44.786763][ T3913] tmpfs: Unknown parameter '00000000000000000003' [ 44.796882][ T3913] set_capacity_and_notify: 9 callbacks suppressed [ 44.796895][ T3913] loop2: detected capacity change from 0 to 512 [ 44.821972][ T3906] syzkaller0: entered promiscuous mode [ 44.830922][ T3913] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.843783][ T3906] syzkaller0: entered allmulticast mode [ 44.873908][ T28] audit: type=1107 audit(1770989852.430:319): pid=3907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='•ª' [ 44.882836][ T3913] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.128: invalid indirect mapped block 4294967295 (level 0) [ 44.901641][ T3913] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 44.901863][ T3913] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.128: invalid indirect mapped block 4294967295 (level 1) [ 44.925141][ T3913] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 44.925717][ T3913] EXT4-fs (loop2): 1 orphan inode deleted [ 44.943930][ T3913] EXT4-fs (loop2): 1 truncate cleaned up [ 44.950205][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.962615][ T28] audit: type=1400 audit(1770989852.460:320): avc: denied { checkpoint_restore } for pid=3907 comm="syz.1.127" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.984766][ T28] audit: type=1400 audit(1770989852.480:321): avc: denied { module_request } for pid=3912 comm="syz.2.128" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.006466][ T28] audit: type=1400 audit(1770989852.500:322): avc: denied { mount } for pid=3912 comm="syz.2.128" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 45.029841][ T3913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.040241][ T28] audit: type=1400 audit(1770989852.540:323): avc: denied { mounton } for pid=3912 comm="syz.2.128" path="/bus" dev="bpf" ino=6575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 45.063531][ T28] audit: type=1400 audit(1770989852.740:324): avc: denied { relabelfrom } for pid=3904 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.136109][ T28] audit: type=1400 audit(1770989852.740:325): avc: denied { relabelto } for pid=3904 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.159899][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.278557][ T3934] mmap: syz.3.135 (3934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.356764][ T3939] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 45.379578][ T3933] loop2: detected capacity change from 0 to 1024 [ 45.386787][ T3933] EXT4-fs: Ignoring removed bh option [ 45.393569][ T3939] bond1 (unregistering): Released all slaves [ 45.438807][ T3947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3947 comm=syz.3.138 [ 45.464008][ T3946] netlink: 'syz.4.139': attribute type 12 has an invalid length. [ 45.473284][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.675225][ T3924] __nla_validate_parse: 8 callbacks suppressed [ 45.675246][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 45.864872][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.991869][ T3979] loop0: detected capacity change from 0 to 256 [ 46.110544][ T3988] netlink: 'syz.2.151': attribute type 12 has an invalid length. [ 46.190342][ T3965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 46.204268][ T3965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 47.327314][ T4025] netlink: 'syz.2.163': attribute type 12 has an invalid length. [ 47.387295][ T4022] af_packet: tpacket_rcv: packet too big, clamped from 68211 to 3952. macoff=96 [ 47.426799][ T4022] netlink: 63 bytes leftover after parsing attributes in process `syz.0.159'. [ 47.714514][ T4029] loop2: detected capacity change from 0 to 4096 [ 47.817626][ T4029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.971183][ T4046] netlink: 10 bytes leftover after parsing attributes in process `syz.2.164'. [ 48.014781][ T4047] loop1: detected capacity change from 0 to 256 [ 48.279841][ T4051] program syz.4.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.333585][ T4058] bridge_slave_0: left allmulticast mode [ 48.340373][ T4058] bridge_slave_0: left promiscuous mode [ 48.347567][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.374923][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.405348][ T4058] bridge_slave_1: left allmulticast mode [ 48.446320][ T4059] loop4: detected capacity change from 0 to 512 [ 48.453458][ T4059] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 48.477051][ T4064] loop2: detected capacity change from 0 to 512 [ 48.494179][ T4058] bridge_slave_1: left promiscuous mode [ 48.520832][ T4064] EXT4-fs: inline encryption not supported [ 48.527435][ T4059] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.534650][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.543643][ T4064] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.550409][ T4059] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.170: Block bitmap for bg 0 marked uninitialized [ 48.568070][ T4072] loop0: detected capacity change from 0 to 512 [ 48.576619][ T4059] loop4: lost filesystem error report for type 5 error -117 [ 48.584944][ T4059] EXT4-fs (loop4): Remounting filesystem read-only [ 48.599027][ T4059] EXT4-fs (loop4): 1 orphan inode deleted [ 48.599315][ T4058] team_slave_0: left promiscuous mode [ 48.606103][ T4059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.624320][ T4058] team0: Port device team_slave_0 removed [ 48.628359][ T4064] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.174: inode #13: comm syz.2.174: iget: illegal inode # [ 48.644436][ T4064] loop2: lost filesystem error report for type 5 error -117 [ 48.644621][ T4064] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.174: couldn't read orphan inode 13 (err -117) [ 48.648315][ T4058] team_slave_1: left promiscuous mode [ 48.670667][ T4064] loop2: lost filesystem error report for type 5 error -117 [ 48.673082][ T4058] team0: Port device team_slave_1 removed [ 48.688411][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.696313][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.703711][ T4072] EXT4-fs (loop0): 1 orphan inode deleted [ 48.713136][ T4072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.726430][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.733900][ T4058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.741609][ T4064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.751630][ T4072] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.766780][ T1668] EXT4-fs error (device loop0): ext4_release_dquot:7034: comm kworker/u8:6: Failed to release dquot type 1 [ 48.769091][ T4058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.820295][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.831590][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.895271][ T4085] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 48.912717][ T4085] bond1 (unregistering): Released all slaves [ 48.941545][ T4090] loop4: detected capacity change from 0 to 512 [ 48.960034][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.971801][ T4090] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 48.980550][ T4090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 49.006123][ T4090] System zones: 0-1, 15-15, 18-18, 34-34 [ 49.012083][ T4090] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.025867][ T4090] EXT4-fs warning (device loop4): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 49.040584][ T4090] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 49.051076][ T4090] EXT4-fs (loop4): 1 truncate cleaned up [ 49.057147][ T4090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.082662][ T4090] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.101100][ T4099] loop1: detected capacity change from 0 to 512 [ 49.121539][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.141352][ T4099] EXT4-fs: Ignoring removed nobh option [ 49.182783][ T4099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.211175][ T4099] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.243391][ T4099] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.183: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 49.362941][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.471336][ T4123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.501599][ T4123] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.574354][ T4124] netlink: 'syz.1.186': attribute type 4 has an invalid length. [ 49.729607][ T4138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 49.738217][ T4138] System zones: 0-1, 3-36 [ 49.743593][ T4138] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.190: bad orphan inode 134217728 [ 49.754316][ T4138] loop1: lost filesystem error report for type 5 error -117 [ 49.754838][ T4138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.822983][ T28] kauditd_printk_skb: 227 callbacks suppressed [ 49.823000][ T28] audit: type=1400 audit(1770989857.530:551): avc: denied { setopt } for pid=4143 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.903461][ T28] audit: type=1400 audit(1770989857.610:552): avc: denied { add_name } for pid=4136 comm="syz.1.190" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.957667][ T28] audit: type=1400 audit(1770989857.610:553): avc: denied { write } for pid=4136 comm="syz.1.190" name="bus" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.033415][ T28] audit: type=1326 audit(1770989857.740:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.0.195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39b705bf79 code=0x0 [ 50.070151][ T4158] netlink: 'syz.3.197': attribute type 12 has an invalid length. [ 50.087723][ T4162] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.195'. [ 50.196404][ T28] audit: type=1400 audit(1770989857.900:555): avc: denied { firmware_load } for pid=4155 comm="syz.2.196" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 50.381437][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.575689][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.710506][ T28] audit: type=1400 audit(1770989858.420:556): avc: denied { getopt } for pid=4171 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.743764][ T4175] set_capacity_and_notify: 4 callbacks suppressed [ 50.743819][ T4175] loop1: detected capacity change from 0 to 512 [ 50.793108][ T4175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.813713][ T4175] EXT4-fs (loop1): 1 truncate cleaned up [ 50.820133][ T4175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.839479][ T4175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 50.873893][ T28] audit: type=1400 audit(1770989858.580:557): avc: denied { ioctl } for pid=4184 comm="syz.4.205" path="socket:[7056]" dev="sockfs" ino=7056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.882009][ T4185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 50.958606][ T4166] syz.2.196 (4166) used greatest stack depth: 8992 bytes left [ 50.966779][ T28] audit: type=1400 audit(1770989858.670:558): avc: denied { unlink } for pid=3308 comm="syz-executor" name="file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.013962][ T28] audit: type=1400 audit(1770989858.720:559): avc: denied { read write } for pid=4192 comm="syz.0.208" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.071050][ T28] audit: type=1400 audit(1770989858.720:560): avc: denied { open } for pid=4192 comm="syz.0.208" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.108297][ T4197] FAULT_INJECTION: forcing a failure. [ 51.108297][ T4197] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.134000][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 51.134321][ T4197] CPU: 0 UID: 0 PID: 4197 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 51.134402][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.134442][ T4197] Call Trace: [ 51.134462][ T4197] [ 51.134483][ T4197] __dump_stack+0x1d/0x30 [ 51.134595][ T4197] dump_stack_lvl+0x95/0xd0 [ 51.134666][ T4197] dump_stack+0x15/0x1b [ 51.134735][ T4197] should_fail_ex+0x263/0x280 [ 51.134823][ T4197] should_fail+0xb/0x20 [ 51.134944][ T4197] should_fail_usercopy+0x1a/0x20 [ 51.135081][ T4197] _copy_from_user+0x1c/0xb0 [ 51.135221][ T4197] ___sys_recvmsg+0xaa/0x3b0 [ 51.135332][ T4197] do_recvmmsg+0x1ef/0x560 [ 51.135500][ T4197] ? fput+0x8f/0xc0 [ 51.135584][ T4197] __x64_sys_recvmmsg+0xe5/0x170 [ 51.135772][ T4197] x64_sys_call+0x80f/0x3020 [ 51.135863][ T4197] do_syscall_64+0x12c/0x370 [ 51.135950][ T4197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.136100][ T4197] RIP: 0033:0x7f39b705bf79 [ 51.136153][ T4197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.136219][ T4197] RSP: 002b:00007f39b5aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 51.136286][ T4197] RAX: ffffffffffffffda RBX: 00007f39b72d5fa0 RCX: 00007f39b705bf79 [ 51.136343][ T4197] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 51.136385][ T4197] RBP: 00007f39b5aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 51.136428][ T4197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.136471][ T4197] R13: 00007f39b72d6038 R14: 00007f39b72d5fa0 R15: 00007fffd26df998 [ 51.136537][ T4197] [ 51.390538][ T4211] syzkaller0: entered promiscuous mode [ 51.396366][ T4211] syzkaller0: entered allmulticast mode [ 51.507431][ T4218] loop3: detected capacity change from 0 to 512 [ 51.546798][ T4218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.569401][ T4218] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.801586][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.836253][ T4226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.878953][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.198240][ T4272] loop0: detected capacity change from 0 to 512 [ 52.216696][ T4270] loop2: detected capacity change from 0 to 2048 [ 52.224515][ T4272] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.251502][ T4272] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 52.293109][ T4272] loop0: detected capacity change from 0 to 256 [ 52.306421][ T4272] vfat: Bad value for 'shortname' [ 52.332023][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.414372][ T4290] loop0: detected capacity change from 0 to 512 [ 52.442502][ T4270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 52.463942][ T4290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01d, mo2=0002] [ 52.478889][ T4292] loop1: detected capacity change from 0 to 512 [ 52.495816][ T4290] System zones: 1-12 [ 52.506713][ T4290] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.235: Directory hole found for htree index block 0 [ 52.532520][ T4292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.555811][ T4290] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 52.556016][ T4290] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 52.577401][ T4292] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.598191][ T4290] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.235: Directory hole found for htree index block 0 [ 52.610802][ T4290] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 52.635951][ T4290] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 52.653912][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.671576][ T4290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.680843][ T4290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.688113][ T4292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.236'. [ 52.699679][ T4290] ext4: Unknown parameter '7' [ 52.713595][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.850267][ T4299] loop1: detected capacity change from 0 to 8192 [ 52.889376][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.954841][ T4303] loop3: detected capacity change from 0 to 8192 [ 53.067001][ T4329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 53.146671][ T4334] bond1 (unregistering): Released all slaves [ 53.164021][ T4339] process 'syz.3.246' launched './file1' with NULL argv: empty string added [ 53.187392][ T4342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 53.231512][ T4333] loop4: detected capacity change from 0 to 1024 [ 53.277461][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.296651][ T4344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.300574][ T4333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 53.321810][ T4333] System zones: 0-1, 3-36 [ 53.374742][ T4344] 9p: Bad value for 'rfdno' [ 53.419021][ T4333] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.249: bad orphan inode 134217728 [ 53.450358][ T4351] EXT4-fs: Ignoring removed oldalloc option [ 53.451765][ T4333] loop4: lost filesystem error report for type 5 error -117 [ 53.463192][ T4351] EXT4-fs: Ignoring removed orlov option [ 53.473317][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.477242][ T4351] EXT4-fs: inline encryption not supported [ 53.490234][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.498390][ T4333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.527921][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.538051][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.593964][ T4351] FAT-fs (loop1): Directory bread(block 64) failed [ 53.607155][ T4351] FAT-fs (loop1): Directory bread(block 65) failed [ 53.613839][ T4351] FAT-fs (loop1): Directory bread(block 66) failed [ 53.622464][ T4351] FAT-fs (loop1): Directory bread(block 67) failed [ 53.632570][ T4351] FAT-fs (loop1): Directory bread(block 68) failed [ 53.642649][ T4351] FAT-fs (loop1): Directory bread(block 69) failed [ 53.652974][ T4351] FAT-fs (loop1): Directory bread(block 70) failed [ 53.665200][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.674298][ T4351] FAT-fs (loop1): Directory bread(block 71) failed [ 53.681368][ T4351] FAT-fs (loop1): Directory bread(block 72) failed [ 53.688563][ T4351] FAT-fs (loop1): Directory bread(block 73) failed [ 53.696246][ T4358] msdos: Unknown parameter 'næs' [ 53.728919][ T4361] netlink: 84 bytes leftover after parsing attributes in process `syz.3.257'. [ 53.790081][ T4362] Unable to read rock-ridge attributes [ 53.809053][ T4367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.258'. [ 53.825318][ T4370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4370 comm=syz.3.260 [ 53.865956][ T4374] Unable to read rock-ridge attributes [ 53.885990][ T4376] EXT4-fs: dax option not supported [ 53.896046][ T4374] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.951637][ T4374] Unable to read rock-ridge attributes [ 53.958519][ T4374] Unable to read rock-ridge attributes [ 53.959240][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.964097][ T4374] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.993577][ T4388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.265'. [ 54.005436][ T4386] bridge0: port 1(vlan3) entered blocking state [ 54.012068][ T4386] bridge0: port 1(vlan3) entered disabled state [ 54.018696][ T4386] vlan3: entered allmulticast mode [ 54.023965][ T4386] bridge0: entered allmulticast mode [ 54.047570][ T4386] vlan3: left allmulticast mode [ 54.053691][ T4386] bridge0: left allmulticast mode [ 54.252262][ T4394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.265603][ T4398] netlink: 'syz.2.267': attribute type 12 has an invalid length. [ 54.277001][ T4394] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.300242][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.563956][ T4436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.623937][ T4448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.642206][ T4436] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.277: bg 0: block 4: invalid block bitmap [ 54.667853][ T4452] rock: directory entry would overflow storage [ 54.674038][ T4452] rock: sig=0x4654, size=5, remaining=4 [ 54.678946][ T4436] loop3: lost filesystem error report for type 5 error -117 [ 54.680736][ T4448] EXT4-fs (loop4): 1 truncate cleaned up [ 54.699133][ T4448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.710196][ T4436] EXT4-fs (loop3): 1 truncate cleaned up [ 54.740669][ T4436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.826726][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 54.826741][ T28] audit: type=1400 audit(1770989862.540:601): avc: denied { connect } for pid=4446 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.917073][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.917271][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.957051][ T28] audit: type=1400 audit(1770989862.660:602): avc: denied { bind } for pid=4474 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.997051][ T28] audit: type=1400 audit(1770989862.660:603): avc: denied { setopt } for pid=4474 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.048994][ T28] audit: type=1400 audit(1770989862.690:604): avc: denied { setopt } for pid=4463 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.083043][ T28] audit: type=1400 audit(1770989862.740:605): avc: denied { read } for pid=4483 comm="syz.1.289" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.083074][ T28] audit: type=1400 audit(1770989862.740:606): avc: denied { open } for pid=4483 comm="syz.1.289" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.083106][ T28] audit: type=1400 audit(1770989862.740:607): avc: denied { ioctl } for pid=4483 comm="syz.1.289" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.188607][ T28] audit: type=1400 audit(1770989862.860:608): avc: denied { write } for pid=4485 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.212349][ T28] audit: type=1400 audit(1770989862.920:609): avc: denied { setattr } for pid=4487 comm="syz.0.290" path="/dev/tty2" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 55.252994][ T28] audit: type=1400 audit(1770989862.960:610): avc: denied { allowed } for pid=4494 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.622480][ T4507] bond1: entered promiscuous mode [ 55.717503][ T4510] vcan1: entered promiscuous mode [ 55.727727][ T4523] 9pnet_virtio: no channels available for device ./file0 [ 55.891615][ T4510] vcan1: entered allmulticast mode [ 55.987846][ T4510] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 56.004519][ T4521] SELinux: failed to load policy [ 56.013317][ T4510] bond1: (slave vcan1): Error -95 calling set_mac_address [ 56.036371][ T4525] @0Ù: renamed from bond_slave_1 (while UP) [ 56.316309][ T4542] vlan2: entered allmulticast mode [ 56.321524][ T4542] macsec0: entered allmulticast mode [ 56.340780][ T4542] veth1_macvtap: entered allmulticast mode [ 56.668684][ T4552] syzkaller0: entered promiscuous mode [ 56.674276][ T4552] syzkaller0: entered allmulticast mode [ 56.686041][ T4552] TC_ACT_REPEAT abuse ? [ 56.702352][ T4555] __nla_validate_parse: 10 callbacks suppressed [ 56.702370][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'. [ 56.874541][ T4558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.098627][ T4571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 57.217565][ T4546] set_capacity_and_notify: 11 callbacks suppressed [ 57.217600][ T4546] loop3: detected capacity change from 0 to 8192 [ 57.267307][ T4548] loop2: detected capacity change from 0 to 164 [ 57.395326][ T4546] syz.3.303: attempt to access beyond end of device [ 57.395326][ T4546] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.423037][ T4579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 57.431990][ T4579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 57.479706][ T4548] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 58.135780][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 58.345648][ T4594] loop2: detected capacity change from 0 to 8192 [ 58.352271][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 58.448574][ T4601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 58.973957][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 58.982972][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 59.449789][ T4634] loop2: detected capacity change from 0 to 256 [ 59.883754][ T4649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.917052][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 59.991069][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.002949][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 60.003013][ T28] audit: type=1326 audit(1770989867.690:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.032801][ T28] audit: type=1326 audit(1770989867.690:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.032951][ T28] audit: type=1326 audit(1770989867.690:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.033010][ T28] audit: type=1326 audit(1770989867.700:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.033036][ T28] audit: type=1326 audit(1770989867.700:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.154995][ T28] audit: type=1326 audit(1770989867.700:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.155096][ T28] audit: type=1326 audit(1770989867.700:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.183602][ T28] audit: type=1326 audit(1770989867.700:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.183660][ T28] audit: type=1326 audit(1770989867.710:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.183706][ T28] audit: type=1326 audit(1770989867.710:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 60.388071][ T4670] geneve2: entered promiscuous mode [ 60.479752][ T4673] netlink: 'syz.1.340': attribute type 12 has an invalid length. [ 60.524519][ T4676] --map-set only usable from mangle table [ 60.744590][ T4681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4681 comm=syz.0.343 [ 61.291712][ T4689] futex_wake_op: syz.2.346 tries to shift op by 32; fix this program [ 61.521371][ T4706] netlink: 'syz.1.352': attribute type 12 has an invalid length. [ 61.751969][ T4704] No such timeout policy "syz1" [ 61.915282][ T4699] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 61.936933][ T4720] __nla_validate_parse: 7 callbacks suppressed [ 61.936995][ T4720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.357'. [ 62.052882][ T4726] netlink: 16 bytes leftover after parsing attributes in process `)-'. [ 62.070221][ T4723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.358'. [ 62.273534][ T4743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 62.293890][ T4746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4746 comm=syz.2.365 [ 62.363002][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 62.371964][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 63.045497][ T4771] netlink: 16 bytes leftover after parsing attributes in process `)-'. [ 63.452670][ T4804] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 63.724299][ T4809] FAULT_INJECTION: forcing a failure. [ 63.724299][ T4809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.737939][ T4809] CPU: 1 UID: 0 PID: 4809 Comm: syz.1.380 Not tainted syzkaller #0 PREEMPT(full) [ 63.737973][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 63.738022][ T4809] Call Trace: [ 63.738030][ T4809] [ 63.738039][ T4809] __dump_stack+0x1d/0x30 [ 63.738070][ T4809] dump_stack_lvl+0x95/0xd0 [ 63.738093][ T4809] dump_stack+0x15/0x1b [ 63.738113][ T4809] should_fail_ex+0x263/0x280 [ 63.738201][ T4809] should_fail+0xb/0x20 [ 63.738235][ T4809] should_fail_usercopy+0x1a/0x20 [ 63.738316][ T4809] _copy_from_user+0x1c/0xb0 [ 63.738351][ T4809] ___sys_recvmsg+0xaa/0x3b0 [ 63.738400][ T4809] do_recvmmsg+0x1ef/0x560 [ 63.738520][ T4809] ? fput+0x8f/0xc0 [ 63.738627][ T4809] __x64_sys_recvmmsg+0xe5/0x170 [ 63.738733][ T4809] x64_sys_call+0x80f/0x3020 [ 63.738828][ T4809] do_syscall_64+0x12c/0x370 [ 63.738864][ T4809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.738886][ T4809] RIP: 0033:0x7f3cb7aebf79 [ 63.738902][ T4809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.738942][ T4809] RSP: 002b:00007f3cb653f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 63.738968][ T4809] RAX: ffffffffffffffda RBX: 00007f3cb7d65fa0 RCX: 00007f3cb7aebf79 [ 63.738982][ T4809] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 63.738995][ T4809] RBP: 00007f3cb653f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.739008][ T4809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.739093][ T4809] R13: 00007f3cb7d66038 R14: 00007f3cb7d65fa0 R15: 00007ffc3c005ee8 [ 63.739114][ T4809] [ 64.002789][ T4823] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 64.054711][ T9] kernel read not supported for file /hwrng (pid: 9 comm: kworker/0:0) [ 64.081843][ T4832] netlink: 16 bytes leftover after parsing attributes in process `)-'. [ 64.093018][ T4839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4839 comm=syz.3.386 [ 64.210916][ T4854] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 64.278214][ T4854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.312082][ T4855] dvmrp6: entered allmulticast mode [ 64.773710][ T4869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.396'. [ 64.783297][ T4868] FAULT_INJECTION: forcing a failure. [ 64.783297][ T4868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.798135][ T4868] CPU: 0 UID: 0 PID: 4868 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full) [ 64.798190][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 64.798238][ T4868] Call Trace: [ 64.798246][ T4868] [ 64.798255][ T4868] __dump_stack+0x1d/0x30 [ 64.798287][ T4868] dump_stack_lvl+0x95/0xd0 [ 64.798311][ T4868] dump_stack+0x15/0x1b [ 64.798332][ T4868] should_fail_ex+0x263/0x280 [ 64.798410][ T4868] should_fail+0xb/0x20 [ 64.798443][ T4868] should_fail_usercopy+0x1a/0x20 [ 64.798510][ T4868] _copy_from_user+0x1c/0xb0 [ 64.798642][ T4868] ___sys_recvmsg+0xaa/0x3b0 [ 64.798678][ T4868] do_recvmmsg+0x1ef/0x560 [ 64.798749][ T4868] ? fput+0x8f/0xc0 [ 64.798774][ T4868] __x64_sys_recvmmsg+0xe5/0x170 [ 64.798807][ T4868] x64_sys_call+0x80f/0x3020 [ 64.798893][ T4868] do_syscall_64+0x12c/0x370 [ 64.798930][ T4868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.798958][ T4868] RIP: 0033:0x7f3cb7aebf79 [ 64.799015][ T4868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.799035][ T4868] RSP: 002b:00007f3cb653f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 64.799057][ T4868] RAX: ffffffffffffffda RBX: 00007f3cb7d65fa0 RCX: 00007f3cb7aebf79 [ 64.799075][ T4868] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 64.799099][ T4868] RBP: 00007f3cb653f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.799148][ T4868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.799160][ T4868] R13: 00007f3cb7d66038 R14: 00007f3cb7d65fa0 R15: 00007ffc3c005ee8 [ 64.799180][ T4868] [ 65.030060][ T4876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.400'. [ 65.042714][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 65.042731][ T28] audit: type=1400 audit(1770989872.750:750): avc: denied { create } for pid=4865 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.121274][ T28] audit: type=1326 audit(1770989872.830:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.158858][ T28] audit: type=1326 audit(1770989872.830:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.192681][ T28] audit: type=1326 audit(1770989872.830:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.223788][ T28] audit: type=1326 audit(1770989872.830:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.246807][ T28] audit: type=1326 audit(1770989872.830:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.269757][ T28] audit: type=1326 audit(1770989872.830:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.306999][ T28] audit: type=1326 audit(1770989872.840:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.331281][ T28] audit: type=1326 audit(1770989872.840:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.355029][ T28] audit: type=1326 audit(1770989872.840:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 65.449330][ T4892] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 65.830882][ T4928] netlink: 'syz.1.418': attribute type 16 has an invalid length. [ 65.838795][ T4928] netlink: 'syz.1.418': attribute type 17 has an invalid length. [ 65.892259][ T4928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.086204][ T4948] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.247655][ T4943] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 67.032817][ T4996] __nla_validate_parse: 7 callbacks suppressed [ 67.032832][ T4996] netlink: 16 bytes leftover after parsing attributes in process `)-'. [ 67.055511][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 67.066333][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 67.101907][ T5009] vlan3: entered promiscuous mode [ 67.114881][ T5009] bridge2: entered promiscuous mode [ 67.129577][ T5009] vlan3: entered allmulticast mode [ 67.142875][ T5009] bridge2: entered allmulticast mode [ 67.168244][ T4996] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.208146][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 67.305436][ T5037] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 67.430201][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.445'. [ 67.614861][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.164771][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 68.268872][ T5069] netlink: 16 bytes leftover after parsing attributes in process `)-'. [ 68.281444][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.430814][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 68.494402][ T5083] @ÿ: renamed from veth0_vlan (while UP) [ 68.966523][ T5104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5104 comm=syz.3.463 [ 69.159381][ T5110] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 69.176129][ T5110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.465'. [ 69.292975][ T5110] dummy0: entered promiscuous mode [ 69.308969][ T5110] dummy0: entered allmulticast mode [ 69.316555][ T5110] bridge0: port 3(dummy0) entered blocking state [ 69.322999][ T5110] bridge0: port 3(dummy0) entered disabled state [ 69.343366][ T5110] bridge0: port 3(dummy0) entered blocking state [ 69.349809][ T5110] bridge0: port 3(dummy0) entered forwarding state [ 69.364337][ T5111] team0 (unregistering): Port device team_slave_0 removed [ 69.386288][ T5113] netlink: 16 bytes leftover after parsing attributes in process `)-'. [ 69.397233][ T5111] team0 (unregistering): Port device team_slave_1 removed [ 69.434203][ T5117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5117 comm=syz.4.467 [ 69.480313][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.487192][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.493383][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.500365][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.506676][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.512930][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.519397][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.525667][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.532434][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.542112][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.548445][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.554626][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.560997][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.567281][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.573459][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.579804][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.586137][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.592366][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.598707][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.604868][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.605883][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.612792][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.624437][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.630654][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.636900][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.643073][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.649268][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.655600][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.662157][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.668540][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.676219][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.682541][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.688778][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.694922][ T5120] 9pnet_fd: Insufficient options for proto=fd [ 69.740949][ T5125] bridge_slave_0: left allmulticast mode [ 69.746998][ T5125] bridge_slave_0: left promiscuous mode [ 69.752871][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.762629][ T5125] bridge_slave_1: left allmulticast mode [ 69.770694][ T5125] bridge_slave_1: left promiscuous mode [ 69.776388][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.785573][ T5125] bond0: (slave bond_slave_0): Releasing backup interface [ 69.795846][ T5125] bond0: (slave bond_slave_1): Releasing backup interface [ 69.815192][ T5125] team0: Port device team_slave_0 removed [ 69.823935][ T5125] team0: Port device team_slave_1 removed [ 69.830984][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.838624][ T5125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.847966][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.855502][ T5125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.865189][ T5125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.944827][ T5137] block device autoloading is deprecated and will be removed. [ 70.059693][ T28] kauditd_printk_skb: 183 callbacks suppressed [ 70.059712][ T28] audit: type=1400 audit(1770989877.770:943): avc: denied { map } for pid=5150 comm="syz.2.477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.105788][ T28] audit: type=1400 audit(1770989877.800:944): avc: denied { read write } for pid=5150 comm="syz.2.477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.157494][ T28] audit: type=1326 audit(1770989877.870:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.204342][ T28] audit: type=1326 audit(1770989877.870:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.247057][ T28] audit: type=1326 audit(1770989877.870:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.272532][ T28] audit: type=1326 audit(1770989877.870:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.296693][ T28] audit: type=1326 audit(1770989877.870:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.320819][ T28] audit: type=1326 audit(1770989877.870:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.344060][ T28] audit: type=1326 audit(1770989877.870:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.368817][ T28] audit: type=1326 audit(1770989877.870:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm=")-" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b4e3bf79 code=0x7ffc0000 [ 70.416833][ T5167] loop4: detected capacity change from 0 to 512 [ 70.423678][ T5167] EXT4-fs: Mount option(s) incompatible with ext2 [ 70.442568][ T5167] xt_hashlimit: size too large, truncated to 1048576 [ 70.490050][ T5173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5173 comm=syz.2.485 [ 70.522631][ T5175] netlink: 'syz.4.482': attribute type 21 has an invalid length. [ 71.660224][ T5204] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 71.668409][ T5204] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 72.140306][ T5249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5249 comm=syz.4.508 [ 72.153163][ T5249] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 72.170652][ T5248] batadv_slave_1: entered promiscuous mode [ 72.194706][ T5248] batadv_slave_0: entered promiscuous mode [ 72.204800][ T5255] __nla_validate_parse: 8 callbacks suppressed [ 72.204811][ T5255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 72.221593][ T5246] batadv_slave_0: left promiscuous mode [ 72.228285][ T5252] FAULT_INJECTION: forcing a failure. [ 72.228285][ T5252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.246816][ T5246] batadv_slave_1: left promiscuous mode [ 72.253303][ T5252] CPU: 0 UID: 0 PID: 5252 Comm: syz.1.510 Not tainted syzkaller #0 PREEMPT(full) [ 72.253335][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 72.253352][ T5252] Call Trace: [ 72.253360][ T5252] [ 72.253366][ T5252] __dump_stack+0x1d/0x30 [ 72.253391][ T5252] dump_stack_lvl+0x95/0xd0 [ 72.253455][ T5252] dump_stack+0x15/0x1b [ 72.253475][ T5252] should_fail_ex+0x263/0x280 [ 72.253508][ T5252] should_fail+0xb/0x20 [ 72.253539][ T5252] should_fail_usercopy+0x1a/0x20 [ 72.253572][ T5252] _copy_from_user+0x1c/0xb0 [ 72.253663][ T5252] ___sys_recvmsg+0xaa/0x3b0 [ 72.253702][ T5252] do_recvmmsg+0x1ef/0x560 [ 72.253750][ T5252] ? fput+0x8f/0xc0 [ 72.253845][ T5252] __x64_sys_recvmmsg+0xe5/0x170 [ 72.253869][ T5252] x64_sys_call+0x80f/0x3020 [ 72.253967][ T5252] do_syscall_64+0x12c/0x370 [ 72.254012][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.254039][ T5252] RIP: 0033:0x7f3cb7aebf79 [ 72.254059][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.254151][ T5252] RSP: 002b:00007f3cb653f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.254170][ T5252] RAX: ffffffffffffffda RBX: 00007f3cb7d65fa0 RCX: 00007f3cb7aebf79 [ 72.254191][ T5252] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 72.254207][ T5252] RBP: 00007f3cb653f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.254220][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.254232][ T5252] R13: 00007f3cb7d66038 R14: 00007f3cb7d65fa0 R15: 00007ffc3c005ee8 [ 72.254305][ T5252] [ 72.798567][ T5271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.810888][ T5271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.821425][ T5273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5273 comm=syz.4.518 [ 72.834139][ T5273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=5273 comm=syz.4.518 [ 72.853849][ T5273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=5273 comm=syz.4.518 [ 72.866676][ T5273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5273 comm=syz.4.518 [ 73.006623][ T5284] gretap1: entered promiscuous mode [ 73.547986][ T5304] FAULT_INJECTION: forcing a failure. [ 73.547986][ T5304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.685322][ T5304] CPU: 1 UID: 0 PID: 5304 Comm: syz.3.526 Not tainted syzkaller #0 PREEMPT(full) [ 73.685359][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 73.685407][ T5304] Call Trace: [ 73.685416][ T5304] [ 73.685425][ T5304] __dump_stack+0x1d/0x30 [ 73.685458][ T5304] dump_stack_lvl+0x95/0xd0 [ 73.685487][ T5304] dump_stack+0x15/0x1b [ 73.685510][ T5304] should_fail_ex+0x263/0x280 [ 73.685543][ T5304] should_fail+0xb/0x20 [ 73.685575][ T5304] should_fail_usercopy+0x1a/0x20 [ 73.685613][ T5304] _copy_from_user+0x1c/0xb0 [ 73.685655][ T5304] ___sys_recvmsg+0xaa/0x3b0 [ 73.685710][ T5304] do_recvmmsg+0x1ef/0x560 [ 73.685748][ T5304] ? fput+0x8f/0xc0 [ 73.685773][ T5304] __x64_sys_recvmmsg+0xe5/0x170 [ 73.685809][ T5304] x64_sys_call+0x80f/0x3020 [ 73.685954][ T5304] do_syscall_64+0x12c/0x370 [ 73.685982][ T5304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.686007][ T5304] RIP: 0033:0x7fa63ac5bf79 [ 73.686027][ T5304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.686114][ T5304] RSP: 002b:00007fa63968e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 73.686145][ T5304] RAX: ffffffffffffffda RBX: 00007fa63aed6090 RCX: 00007fa63ac5bf79 [ 73.686182][ T5304] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 73.686195][ T5304] RBP: 00007fa63968e090 R08: 0000000000000000 R09: 0000000000000000 [ 73.686208][ T5304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.686220][ T5304] R13: 00007fa63aed6128 R14: 00007fa63aed6090 R15: 00007ffeed793ff8 [ 73.686247][ T5304] [ 73.951672][ T5310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'. [ 74.116227][ T5318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 74.130495][ T5318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.530'. [ 74.146480][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 74.155353][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 74.164232][ T5318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.530'. [ 74.212354][ T5318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.530'. [ 74.262750][ T5329] netlink: 16 bytes leftover after parsing attributes in process `)-'. [ 74.420427][ T5350] FAULT_INJECTION: forcing a failure. [ 74.420427][ T5350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.422268][ T5346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 74.443771][ T5350] CPU: 1 UID: 0 PID: 5350 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) [ 74.443805][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 74.443835][ T5350] Call Trace: [ 74.443913][ T5350] [ 74.443922][ T5350] __dump_stack+0x1d/0x30 [ 74.443951][ T5350] dump_stack_lvl+0x95/0xd0 [ 74.444054][ T5350] dump_stack+0x15/0x1b [ 74.444073][ T5350] should_fail_ex+0x263/0x280 [ 74.444141][ T5350] should_fail+0xb/0x20 [ 74.444172][ T5350] should_fail_usercopy+0x1a/0x20 [ 74.444226][ T5350] _copy_from_user+0x1c/0xb0 [ 74.444292][ T5350] ___sys_recvmsg+0xaa/0x3b0 [ 74.444337][ T5350] do_recvmmsg+0x1ef/0x560 [ 74.444404][ T5350] ? fput+0x8f/0xc0 [ 74.444430][ T5350] __x64_sys_recvmmsg+0xe5/0x170 [ 74.444465][ T5350] x64_sys_call+0x80f/0x3020 [ 74.444550][ T5350] do_syscall_64+0x12c/0x370 [ 74.444587][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.444689][ T5350] RIP: 0033:0x7f3cb7aebf79 [ 74.444710][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.444731][ T5350] RSP: 002b:00007f3cb653f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 74.444756][ T5350] RAX: ffffffffffffffda RBX: 00007f3cb7d65fa0 RCX: 00007f3cb7aebf79 [ 74.444823][ T5350] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 74.444911][ T5350] RBP: 00007f3cb653f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.444928][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.444955][ T5350] R13: 00007f3cb7d66038 R14: 00007f3cb7d65fa0 R15: 00007ffc3c005ee8 [ 74.444982][ T5350] [ 74.878359][ T5370] ------------[ cut here ]------------ [ 74.883955][ T5370] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 74.899878][ T5370] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.3.549/5370 [ 74.910770][ T5370] Modules linked in: [ 74.914751][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(full) [ 74.924213][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 74.934531][ T5370] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 74.941098][ T5370] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 74.961068][ T5370] RSP: 0018:ffffc90003303368 EFLAGS: 00010246 [ 74.967349][ T5370] RAX: ffff888101c4dba8 RBX: 0000000000000000 RCX: 0000000000000002 [ 74.975366][ T5370] RDX: ffffffff867fc05d RSI: ffffffff867d078d RDI: ffffffff86fbe710 [ 74.983434][ T5370] RBP: ffff8881043da350 R08: 0000000000000000 R09: 0000000000000002 [ 74.991525][ T5370] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff8881043da310 [ 74.999611][ T5370] R13: 0000000000000000 R14: ffff8881043da35c R15: ffff8881043da348 [ 75.007665][ T5370] FS: 00007fa6396af6c0(0000) GS:ffff8882aeb3c000(0000) knlGS:0000000000000000 [ 75.016992][ T5370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.023715][ T5370] CR2: 0000200000001ec0 CR3: 00000001226c6000 CR4: 00000000003506f0 [ 75.031770][ T5370] DR0: 0000200000000080 DR1: fffffffffffffffc DR2: fffffffffffffffc [ 75.039852][ T5370] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 75.047955][ T5370] Call Trace: [ 75.051336][ T5370] [ 75.054297][ T5370] reg_set_min_max+0x21c/0x260 [ 75.059167][ T5370] check_cond_jmp_op+0x1355/0x1ab0 [ 75.064369][ T5370] do_check+0x4a9b/0x9860 [ 75.068931][ T5370] ? __pfx_verbose+0x10/0x10 [ 75.073584][ T5370] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 75.079187][ T5370] do_check_common+0xd0b/0x1630 [ 75.084134][ T5370] bpf_check+0x2f6d/0xcc10 [ 75.088635][ T5370] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 75.094673][ T5370] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 75.100454][ T5370] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 75.106405][ T5370] ? pcpu_block_update+0x232/0x3b0 [ 75.111557][ T5370] ? _find_next_zero_bit+0x64/0xa0 [ 75.116744][ T5370] ? pcpu_block_update+0x310/0x3b0 [ 75.121983][ T5370] ? pcpu_block_refresh_hint+0x157/0x170 [ 75.127770][ T5370] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 75.128036][ T5385] FAULT_INJECTION: forcing a failure. [ 75.128036][ T5385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.133933][ T5370] ? css_rstat_updated+0xbb/0x280 [ 75.151908][ T5385] CPU: 1 UID: 0 PID: 5385 Comm: syz.1.553 Not tainted syzkaller #0 PREEMPT(full) [ 75.151984][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 75.152052][ T5385] Call Trace: [ 75.152060][ T5385] [ 75.152075][ T5385] __dump_stack+0x1d/0x30 [ 75.152199][ T5385] dump_stack_lvl+0x95/0xd0 [ 75.152274][ T5385] dump_stack+0x15/0x1b [ 75.152437][ T5385] should_fail_ex+0x263/0x280 [ 75.152550][ T5385] should_fail+0xb/0x20 [ 75.152625][ T5385] should_fail_usercopy+0x1a/0x20 [ 75.152728][ T5385] _copy_from_user+0x1c/0xb0 [ 75.152833][ T5385] ___sys_recvmsg+0xaa/0x3b0 [ 75.152955][ T5385] do_recvmmsg+0x1ef/0x560 [ 75.153049][ T5385] ? fput+0x8f/0xc0 [ 75.153179][ T5385] __x64_sys_recvmmsg+0xe5/0x170 [ 75.153258][ T5385] x64_sys_call+0x80f/0x3020 [ 75.153345][ T5385] do_syscall_64+0x12c/0x370 [ 75.153424][ T5385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.153507][ T5385] RIP: 0033:0x7f3cb7aebf79 [ 75.153573][ T5385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.153752][ T5385] RSP: 002b:00007f3cb651e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 75.153817][ T5385] RAX: ffffffffffffffda RBX: 00007f3cb7d66090 RCX: 00007f3cb7aebf79 [ 75.153924][ T5385] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 75.153960][ T5385] RBP: 00007f3cb651e090 R08: 0000000000000000 R09: 0000000000000000 [ 75.153997][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.154049][ T5385] R13: 00007f3cb7d66128 R14: 00007f3cb7d66090 R15: 00007ffc3c005ee8 [ 75.154104][ T5385] [ 75.317679][ T5370] ? mod_memcg_state+0x182/0x260 [ 75.322667][ T5370] ? __rcu_read_unlock+0x4e/0x70 [ 75.327671][ T5370] ? avc_has_perm_noaudit+0xab/0x130 [ 75.332981][ T5370] ? avc_has_perm+0x101/0x190 [ 75.337773][ T5370] ? selinux_bpf_prog_load+0x197/0x1c0 [ 75.343344][ T5370] ? security_bpf_prog_load+0x9e/0x140 [ 75.348956][ T5370] bpf_prog_load+0xf76/0x1140 [ 75.353744][ T5370] ? security_bpf+0x2b/0x90 [ 75.358289][ T5370] __sys_bpf+0x505/0x7e0 [ 75.362557][ T5370] __x64_sys_bpf+0x41/0x50 [ 75.367325][ T5370] x64_sys_call+0x10cb/0x3020 [ 75.372060][ T5370] do_syscall_64+0x12c/0x370 [ 75.376719][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.382687][ T5370] RIP: 0033:0x7fa63ac5bf79 [ 75.387131][ T5370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.406865][ T5370] RSP: 002b:00007fa6396af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.415331][ T5370] RAX: ffffffffffffffda RBX: 00007fa63aed5fa0 RCX: 00007fa63ac5bf79 [ 75.423367][ T5370] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 75.431394][ T5370] RBP: 00007fa63acf27e0 R08: 0000000000000000 R09: 0000000000000000 [ 75.439422][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.447477][ T5370] R13: 00007fa63aed6038 R14: 00007fa63aed5fa0 R15: 00007ffeed793ff8 [ 75.455449][ T5370] [ 75.458514][ T5370] ---[ end trace 0000000000000000 ]--- [ 75.588933][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 75.588949][ T28] audit: type=1400 audit(1770990139.296:1047): avc: denied { connect } for pid=5397 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.639826][ T28] audit: type=1400 audit(1770990139.326:1048): avc: denied { write } for pid=5397 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.663729][ T5403] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 75.672131][ T5403] openvswitch: netlink: Message has 4 unknown bytes. [ 75.679705][ T28] audit: type=1400 audit(1770990139.356:1049): avc: denied { ioctl } for pid=5402 comm="syz.1.562" path="socket:[11308]" dev="sockfs" ino=11308 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.710468][ T28] audit: type=1326 audit(1770990139.366:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 75.748597][ T28] audit: type=1326 audit(1770990139.366:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 75.758556][ T5403] syz.1.562 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.834549][ T28] audit: type=1326 audit(1770990139.366:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 75.860909][ T28] audit: type=1326 audit(1770990139.366:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 75.949752][ T5417] FAULT_INJECTION: forcing a failure. [ 75.949752][ T5417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.971049][ T28] audit: type=1326 audit(1770990139.366:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 76.003936][ T5417] CPU: 0 UID: 0 PID: 5417 Comm: syz.1.568 Tainted: G W syzkaller #0 PREEMPT(full) [ 76.003977][ T5417] Tainted: [W]=WARN [ 76.003986][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 76.004001][ T5417] Call Trace: [ 76.004007][ T5417] [ 76.004015][ T5417] __dump_stack+0x1d/0x30 [ 76.004109][ T5417] dump_stack_lvl+0x95/0xd0 [ 76.004152][ T5417] dump_stack+0x15/0x1b [ 76.004194][ T5417] should_fail_ex+0x263/0x280 [ 76.004229][ T5417] should_fail+0xb/0x20 [ 76.004285][ T5417] should_fail_usercopy+0x1a/0x20 [ 76.004322][ T5417] _copy_from_user+0x1c/0xb0 [ 76.004478][ T5417] ___sys_recvmsg+0xaa/0x3b0 [ 76.004532][ T5417] do_recvmmsg+0x1ef/0x560 [ 76.004569][ T5417] ? fput+0x8f/0xc0 [ 76.004644][ T5417] __x64_sys_recvmmsg+0xe5/0x170 [ 76.004672][ T5417] x64_sys_call+0x80f/0x3020 [ 76.004710][ T5417] do_syscall_64+0x12c/0x370 [ 76.004754][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.004775][ T5417] RIP: 0033:0x7f3cb7aebf79 [ 76.004840][ T5417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.004856][ T5417] RSP: 002b:00007f3cb653f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 76.004881][ T5417] RAX: ffffffffffffffda RBX: 00007f3cb7d65fa0 RCX: 00007f3cb7aebf79 [ 76.004894][ T5417] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 76.004907][ T5417] RBP: 00007f3cb653f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.004991][ T5417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.005005][ T5417] R13: 00007f3cb7d66038 R14: 00007f3cb7d65fa0 R15: 00007ffc3c005ee8 [ 76.005025][ T5417] [ 76.044854][ T28] audit: type=1326 audit(1770990139.366:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 76.209211][ T28] audit: type=1326 audit(1770990139.366:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb7aebf79 code=0x7ffc0000 [ 76.317831][ T5436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.375932][ T5436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.715884][ T5464] netlink: 'syz.0.579': attribute type 4 has an invalid length. [ 76.928861][ T5445] chnl_net:caif_netlink_parms(): no params data found [ 76.978284][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.985485][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.993394][ T5445] bridge_slave_0: entered allmulticast mode [ 77.001635][ T5445] bridge_slave_0: entered promiscuous mode [ 77.008973][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.016162][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.023529][ T5445] bridge_slave_1: entered allmulticast mode [ 77.030433][ T5445] bridge_slave_1: entered promiscuous mode [ 77.050894][ T5445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.068652][ T5445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.097187][ T5479] FAULT_INJECTION: forcing a failure. [ 77.097187][ T5479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.107969][ T5445] team0: Port device team_slave_0 added [ 77.117269][ T5445] team0: Port device team_slave_1 added [ 77.120164][ T5479] CPU: 1 UID: 0 PID: 5479 Comm: syz.0.582 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.120306][ T5479] Tainted: [W]=WARN [ 77.120329][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 77.120421][ T5479] Call Trace: [ 77.120442][ T5479] [ 77.120470][ T5479] __dump_stack+0x1d/0x30 [ 77.120554][ T5479] dump_stack_lvl+0x95/0xd0 [ 77.120668][ T5479] dump_stack+0x15/0x1b [ 77.120785][ T5479] should_fail_ex+0x263/0x280 [ 77.120961][ T5479] should_fail+0xb/0x20 [ 77.121042][ T5479] should_fail_usercopy+0x1a/0x20 [ 77.121125][ T5479] _copy_from_user+0x1c/0xb0 [ 77.121229][ T5479] ___sys_recvmsg+0xaa/0x3b0 [ 77.121330][ T5479] do_recvmmsg+0x1ef/0x560 [ 77.121413][ T5479] ? fput+0x8f/0xc0 [ 77.121559][ T5479] __x64_sys_recvmmsg+0xe5/0x170 [ 77.121724][ T5479] x64_sys_call+0x80f/0x3020 [ 77.121799][ T5479] do_syscall_64+0x12c/0x370 [ 77.121876][ T5479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.122036][ T5479] RIP: 0033:0x7f39b705bf79 [ 77.122085][ T5479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.122146][ T5479] RSP: 002b:00007f39b5aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 77.122211][ T5479] RAX: ffffffffffffffda RBX: 00007f39b72d5fa0 RCX: 00007f39b705bf79 [ 77.122239][ T5479] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 77.122251][ T5479] RBP: 00007f39b5aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 77.122262][ T5479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.122375][ T5479] R13: 00007f39b72d6038 R14: 00007f39b72d5fa0 R15: 00007fffd26df998 [ 77.122442][ T5479] [ 77.310493][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.317515][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.325305][ T5486] __nla_validate_parse: 6 callbacks suppressed [ 77.325409][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 77.343758][ T5445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.374699][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.381869][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.408007][ T5445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.417757][ T5482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 77.443546][ T5482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 77.452662][ T5483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 77.461894][ T5483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 77.470466][ T5445] hsr_slave_0: entered promiscuous mode [ 77.477375][ T5445] hsr_slave_1: entered promiscuous mode [ 77.483245][ T5445] debugfs: 'hsr0' already exists in 'hsr' [ 77.489055][ T5445] Cannot create hsr debugfs directory [ 77.558575][ T5498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.587'. [ 77.645124][ T5445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.657821][ T5445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.669360][ T5445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.696019][ T5445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.756210][ T5445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.769738][ T5445] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.795658][ T5512] tmpfs: Bad value for 'mpol' [ 77.803203][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.810343][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.840533][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.847682][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.925207][ T5445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.141332][ T5445] veth0_vlan: entered promiscuous mode [ 78.156109][ T5445] veth1_vlan: entered promiscuous mode [ 78.171723][ T5445] veth0_macvtap: entered promiscuous mode [ 78.190482][ T5445] veth1_macvtap: entered promiscuous mode [ 78.205218][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.228572][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.252536][ T1668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.261846][ T1668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.388335][ T1668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.412137][ T1668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.114553][ T5578] FAULT_INJECTION: forcing a failure. [ 79.114553][ T5578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.151552][ T5578] CPU: 0 UID: 0 PID: 5578 Comm: syz.4.604 Tainted: G W syzkaller #0 PREEMPT(full) [ 79.151588][ T5578] Tainted: [W]=WARN [ 79.151626][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 79.151641][ T5578] Call Trace: [ 79.151649][ T5578] [ 79.151656][ T5578] __dump_stack+0x1d/0x30 [ 79.151746][ T5578] dump_stack_lvl+0x95/0xd0 [ 79.151771][ T5578] dump_stack+0x15/0x1b [ 79.151796][ T5578] should_fail_ex+0x263/0x280 [ 79.151902][ T5578] should_fail+0xb/0x20 [ 79.151929][ T5578] should_fail_usercopy+0x1a/0x20 [ 79.151961][ T5578] _copy_from_user+0x1c/0xb0 [ 79.152055][ T5578] ___sys_recvmsg+0xaa/0x3b0 [ 79.152100][ T5578] do_recvmmsg+0x1ef/0x560 [ 79.152228][ T5578] ? fput+0x8f/0xc0 [ 79.152252][ T5578] __x64_sys_recvmmsg+0xe5/0x170 [ 79.152287][ T5578] x64_sys_call+0x80f/0x3020 [ 79.152320][ T5578] do_syscall_64+0x12c/0x370 [ 79.152419][ T5578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.152590][ T5578] RIP: 0033:0x7f9bced6bf79 [ 79.152611][ T5578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.152633][ T5578] RSP: 002b:00007f9bcd7c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 79.152658][ T5578] RAX: ffffffffffffffda RBX: 00007f9bcefe5fa0 RCX: 00007f9bced6bf79 [ 79.152676][ T5578] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 79.152721][ T5578] RBP: 00007f9bcd7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.152738][ T5578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.152780][ T5578] R13: 00007f9bcefe6038 R14: 00007f9bcefe5fa0 R15: 00007fffad4f2e28 [ 79.152807][ T5578] [ 79.427529][ T5588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.608'. [ 79.537762][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.566912][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.242486][ T5617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5617 comm=syz.0.615 [ 80.429582][ T5632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 80.611316][ T5640] FAULT_INJECTION: forcing a failure. [ 80.611316][ T5640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.638880][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz.0.621 Tainted: G W syzkaller #0 PREEMPT(full) [ 80.638978][ T5640] Tainted: [W]=WARN [ 80.638988][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 80.639005][ T5640] Call Trace: [ 80.639013][ T5640] [ 80.639022][ T5640] __dump_stack+0x1d/0x30 [ 80.639137][ T5640] dump_stack_lvl+0x95/0xd0 [ 80.639173][ T5640] dump_stack+0x15/0x1b [ 80.639251][ T5640] should_fail_ex+0x263/0x280 [ 80.639291][ T5640] should_fail+0xb/0x20 [ 80.639325][ T5640] should_fail_usercopy+0x1a/0x20 [ 80.639449][ T5640] _copy_from_user+0x1c/0xb0 [ 80.639503][ T5640] ___sys_recvmsg+0xaa/0x3b0 [ 80.639601][ T5640] do_recvmmsg+0x1ef/0x560 [ 80.639697][ T5640] ? fput+0x8f/0xc0 [ 80.639723][ T5640] __x64_sys_recvmmsg+0xe5/0x170 [ 80.639760][ T5640] x64_sys_call+0x80f/0x3020 [ 80.639791][ T5640] do_syscall_64+0x12c/0x370 [ 80.639833][ T5640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.639864][ T5640] RIP: 0033:0x7f39b705bf79 [ 80.639951][ T5640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.639972][ T5640] RSP: 002b:00007f39b5aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 80.640009][ T5640] RAX: ffffffffffffffda RBX: 00007f39b72d5fa0 RCX: 00007f39b705bf79 [ 80.640028][ T5640] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 80.640125][ T5640] RBP: 00007f39b5aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.640138][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.640155][ T5640] R13: 00007f39b72d6038 R14: 00007f39b72d5fa0 R15: 00007fffd26df998 [ 80.640187][ T5640] [ 80.852464][ T5645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5645 comm=syz.3.623 [ 81.706753][ T5672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'. [ 81.744569][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 81.744602][ T28] audit: type=1400 audit(1770990145.446:1249): avc: denied { create } for pid=5675 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 81.789186][ T5674] bridge0: port 3(dummy0) entered disabled state [ 81.795635][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.859848][ T5674] gretap1: left promiscuous mode [ 81.872270][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.881691][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.893495][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.912763][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.954337][ T5684] FAULT_INJECTION: forcing a failure. [ 81.954337][ T5684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.967607][ T5684] CPU: 1 UID: 0 PID: 5684 Comm: syz.3.634 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.967653][ T5684] Tainted: [W]=WARN [ 81.967663][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 81.967680][ T5684] Call Trace: [ 81.967688][ T5684] [ 81.967755][ T5684] __dump_stack+0x1d/0x30 [ 81.967788][ T5684] dump_stack_lvl+0x95/0xd0 [ 81.967817][ T5684] dump_stack+0x15/0x1b [ 81.967924][ T5684] should_fail_ex+0x263/0x280 [ 81.967964][ T5684] should_fail+0xb/0x20 [ 81.968070][ T5684] should_fail_usercopy+0x1a/0x20 [ 81.968120][ T5684] _copy_from_user+0x1c/0xb0 [ 81.968159][ T5684] ___sys_recvmsg+0xaa/0x3b0 [ 81.968258][ T5684] do_recvmmsg+0x1ef/0x560 [ 81.968293][ T5684] ? fput+0x8f/0xc0 [ 81.968315][ T5684] __x64_sys_recvmmsg+0xe5/0x170 [ 81.968345][ T5684] x64_sys_call+0x80f/0x3020 [ 81.968374][ T5684] do_syscall_64+0x12c/0x370 [ 81.968496][ T5684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.968522][ T5684] RIP: 0033:0x7fa63ac5bf79 [ 81.968541][ T5684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.968560][ T5684] RSP: 002b:00007fa6396af028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 81.968583][ T5684] RAX: ffffffffffffffda RBX: 00007fa63aed5fa0 RCX: 00007fa63ac5bf79 [ 81.968600][ T5684] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 81.968633][ T5684] RBP: 00007fa6396af090 R08: 0000000000000000 R09: 0000000000000000 [ 81.968649][ T5684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.968664][ T5684] R13: 00007fa63aed6038 R14: 00007fa63aed5fa0 R15: 00007ffeed793ff8 [ 81.968688][ T5684] [ 82.115873][ T28] audit: type=1400 audit(1770990145.786:1250): avc: denied { getopt } for pid=5686 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.497597][ T5731] netlink: 168 bytes leftover after parsing attributes in process `syz.1.650'. [ 83.506785][ T5730] netlink: 168 bytes leftover after parsing attributes in process `syz.1.650'. [ 83.855392][ T28] audit: type=1400 audit(1770990147.556:1251): avc: denied { relabelfrom } for pid=5744 comm="syz.3.655" name="" dev="pipefs" ino=13529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 83.917718][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 83.926672][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 84.093912][ T5736] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 84.347794][ T28] audit: type=1400 audit(1770990147.936:1252): avc: denied { open } for pid=5752 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.395036][ T28] audit: type=1400 audit(1770990147.936:1253): avc: denied { kernel } for pid=5752 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.482247][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 84.505915][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 84.557805][ T28] audit: type=1400 audit(1770990148.256:1254): avc: denied { write } for pid=5760 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.602530][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 84.614049][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 84.632912][ T5765] ================================================================== [ 84.641023][ T5765] BUG: KCSAN: data-race in __d_instantiate / lookup_fast [ 84.648100][ T5765] [ 84.650447][ T5765] read-write to 0xffff8881004133c0 of 4 bytes by task 5764 on cpu 0: [ 84.658549][ T5765] __d_instantiate+0x2a8/0x390 [ 84.663345][ T5765] d_make_persistent+0x78/0x110 [ 84.668232][ T5765] shmem_mknod+0x15f/0x170 [ 84.672691][ T5765] shmem_create+0x34/0x50 [ 84.677057][ T5765] path_openat+0xd75/0x2050 [ 84.681598][ T5765] do_file_open+0x16c/0x290 [ 84.686137][ T5765] do_sys_openat2+0x94/0x130 [ 84.690763][ T5765] __x64_sys_openat+0xf2/0x120 [ 84.695552][ T5765] x64_sys_call+0x1e39/0x3020 [ 84.700260][ T5765] do_syscall_64+0x12c/0x370 [ 84.704881][ T5765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.710841][ T5765] [ 84.713196][ T5765] read to 0xffff8881004133c0 of 4 bytes by task 5765 on cpu 1: [ 84.720758][ T5765] lookup_fast+0xf0/0x320 [ 84.725135][ T5765] path_openat+0x436/0x2050 [ 84.729679][ T5765] do_file_open+0x16c/0x290 [ 84.734215][ T5765] do_sys_openat2+0x94/0x130 [ 84.738825][ T5765] __x64_sys_openat+0xf2/0x120 [ 84.743604][ T5765] x64_sys_call+0x1e39/0x3020 [ 84.748306][ T5765] do_syscall_64+0x12c/0x370 [ 84.752925][ T5765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.758980][ T5765] [ 84.761323][ T5765] value changed: 0x00000080 -> 0x08200080 [ 84.767055][ T5765] [ 84.769398][ T5765] Reported by Kernel Concurrency Sanitizer on: [ 84.775571][ T5765] CPU: 1 UID: 0 PID: 5765 Comm: syz.4.659 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.786370][ T5765] Tainted: [W]=WARN [ 84.790190][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 84.800270][ T5765] ================================================================== [ 84.818486][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 84.827414][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 84.844400][ T5764] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 84.875361][ T28] audit: type=1400 audit(1770990148.576:1255): avc: denied { create } for pid=5762 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.910429][ T5765] vlan3: entered promiscuous mode [ 84.915637][ T5765] veth0: entered promiscuous mode