last executing test programs: 4.694866865s ago: executing program 1 (id=216): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) recvfrom$packet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006800010003000000fddbdf250a00000000000000060007000800000008000500", @ANYRES32, @ANYBLOB="100008"], 0x38}, 0x1, 0x0, 0x0, 0x400c081}, 0x2400c000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x323, 0x0, 0x0, 0x2, 0x9, "10da604218a6ccb7dd1ba09aef2c2dea2a868e", 0xfff, 0x5}) 4.61111457s ago: executing program 1 (id=221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x8001, 0x820d, 0x8001, 0x9, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, 0x4) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000002c0)=0x101, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000001900)=""/4090, 0xffa, 0x0, &(0x7f0000001800)=""/251, 0xfb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7a, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r6, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f00000004c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000240)='\xab\x00', 0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x23101, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r9 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r9, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000580)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}, [0x8000, 0x3ffffffffff, 0xe2a, 0x9, 0x8aaa, 0x2494, 0xffffffff, 0xfffffffffffffffd, 0x8000000000000000, 0x2, 0x2, 0x0, 0xe49c, 0x8000000000000001, 0x7]}, &(0x7f0000000400)=0x100) 4.205522424s ago: executing program 1 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00200060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000160a010400000000000000000200000a0900020073797a3000000084025fbdcaa01e00844fee000900010073797a30000000000c00038008000140000000f5140000001100010000000000000000000100000a"], 0x60}}, 0x0) 3.501921605s ago: executing program 1 (id=245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write(r0, &(0x7f0000000000)="ab4731c3ec1e0fa62a", 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = socket$inet6(0xa, 0x805, 0x0) unshare(0x2000400) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfffffffffffffc64) setns(r1, 0x10000000) 3.501667455s ago: executing program 1 (id=246): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r0, 0x900) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r4, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040801}, 0x4004005) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r3}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 3.446503768s ago: executing program 1 (id=248): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) msync(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) fchdir(r3) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x4e23, 0x3, @mcast2, 0x8}}}, 0x88) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2a18422, 0x0) (async) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2a18422, 0x0) 1.945666366s ago: executing program 4 (id=265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) 1.87628193s ago: executing program 4 (id=269): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x400, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) (rerun: 64) fchown(r0, r1, r2) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x40, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x95}}], [{@seclabel}, {@pcr={'pcr', 0x3d, 0x35}}, {@euid_lt={'euid<', r1}}, {@subj_role={'subj_role', 0x3d, '}(+'}}, {@smackfsdef={'smackfsdef', 0x3d, '#:^'}}, {@dont_appraise}, {@subj_role}, {@fowner_lt={'fowner<', r1}}]}}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x7f) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2, 0x50) mknodat$loop(r5, &(0x7f0000000440)='./file0\x00', 0x6000, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000500)) (async) r6 = syz_create_resource$binfmt(&(0x7f0000000540)='./file1\x00') execveat$binfmt(r5, r6, &(0x7f0000000680)={[&(0x7f0000000580)='afid', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='pcr', &(0x7f0000000640)='+\x00']}, &(0x7f0000000740)={[&(0x7f00000006c0)='wfdno', &(0x7f0000000700)=')\x00']}, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)={0x0, 0x6b, "060b8892545a0f52d82a0f5574c9d55769c2f43af777e0be35431e1b1dd247ad8c574e6f3aae3705be1df3b13bd91ceda87c61573bc127a9b7c8aa4ef749da613115d1dfabdfaa052feb39f1493eb8da576b273ba3e51708ffffe288fbed725272acf2f3421183b46af402"}, &(0x7f0000000800)=0x73) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000840)={r8, 0x2, 0x6e, "9bd7382a5849da3e6e42053ef3b754fdb246f371891b323413927f135726861d0c9e4153d0fec8273203582f5d23223769c557868c88c1454d836f7f3ef0c449cca5b4b80635fa5076df72b3eaa102686448fcaa583bcc003a8a866b36acad026fcbe6c18f49def0e2aea7eae04b"}, 0x76) (async, rerun: 64) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8080) (rerun: 64) write$P9_RSTATFS(r9, &(0x7f0000000900)={0x43, 0x9, 0x2, {0xdf09, 0x1, 0x7ff, 0x7, 0xd, 0x1, 0x8, 0x4, 0x7}}, 0x43) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000980)=[@in6={0xa, 0x4e22, 0xe12, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffff}, @in6={0xa, 0x4e23, 0x5e, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x7}, @in6={0xa, 0x4e21, 0x80, @private2, 0x5}], 0x80) (async) ioctl(r3, 0x8, &(0x7f0000000a00)="3bbbbf2db72e83c2be22de2dd68292d6cf5872306b402bc7bb32ea2931c6f3d3bcfe461be1b38c840f260a8a627e500b381ec6721114cba8dc253fc6b6c2c7f82eb76c43374eedfd7ffcdaaa49c46aaa5e8be5abdcf757073aaf5c8cd41b697e") r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) getsockname$packet(r10, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b40)=0x14) (async) socket$kcm(0x29, 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000b80)) (async, rerun: 32) pread64(r4, &(0x7f0000000bc0)=""/45, 0x2d, 0x5) (rerun: 32) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000c00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1010, r11, 0x100000000) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r11, 0x1e, &(0x7f0000000c40)={r0}, 0x1) 1.770256686s ago: executing program 4 (id=271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x1000400, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=defaulv:\x00\x00']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 1.731532989s ago: executing program 2 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) close(r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000801000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000067f000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x104fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) (async) close(r1) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000801000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000067f000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x104fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) (async) 1.609046126s ago: executing program 4 (id=273): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5ffdffa) keyctl$search(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x111100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'bridge_slave_1\x00', 0x1}) fsetxattr$security_selinux(r2, &(0x7f0000000ac0), &(0x7f0000000b00)='system_u:object_r:null_device_t:s0\x00', 0x23, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRESOCT=r3], 0x1, 0x286, &(0x7f0000000640)="$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") r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) fcntl$lock(r4, 0x6, &(0x7f00000000c0)={0x1, 0x3, 0x1, 0xfffe, r5}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001900)={{r3}, "c0a8ab42f0f2b3d99d90717b458e7f5bf4ed5b0e5e15611f205f5e5e7009e7fa46883989ac4b4cdaa7d2562c3515d88b02699294c4bb132fbe0040e51651789ed3caef06d1ae2a28e62724e6139d423d2dc5baf64f9ec00d738697985e8cb25619f43f802e519a09eb23d5e482cdbbb4175724d1cab3993558b85bca05aa2531c33ab712709383a66800000011e172608cf118e3b775ec97d6de0c55b3fb7cf219741726ba7ad78e11364a11e0288eee6741aa2d643f0dc0dd562b77077d5cb4ecaaf07a1df8a723118fc3fa364a1ebea6ffbbdaf74a28181bcec4030a812c2318cce88c7a34d768246c9e0315b58911d90c09cfd42032799963ecc9ef4405e9c58131aeaac0355728cef829facebc00f60a631f0ac6fb7b2546c24d19fc6fa45d179a86c54adc7230cf1f40cadd0bb4b6458d503b2d3d6f29fff200d33022e5d870dd0080d851d065a56597f9993ebfdacedf72de75f2a5ce3117bf9b0df843f8401f469539d5b7814a0a22a30683f048fc2c0f09ddc31d38fc1f96c06a1e012a0762ebcb9f6c670dc4111a57b71794b11ff4620171cecb48f9eb1f784dfab7a6353ae0310c0d40f7c3f3bf55a0c9a3343a1408bbc6652892a27cbb96ad01ddc69be1d80e10fafd22396831a0279f48a776dbdc645a453fad33d49ea0e538c2971371c153e78504ae9b6b4b80f36b487ba59364b7523567c5506027c4b5c7903cf441160dd2303d24fe1c5a347bf965cfe1e6ee443736235bcc6a54c5ed5e651a38554928ec2f001c20d16d4bd4e90998f6aca3cef55cc88de5a2f696fa79e74a10dcaa403791d124037e070a6cccd121881d1d9c454f8780645abb05c5b8ff688611cf64924e8f3640ac5d4e1b69ed31534e7e5bf759f516dfa97b2c8a00c9798285d95a56b76bf08e2854ac99f5216bbc9b27a7dfce2a674eaa286bd055eb5ea025c5112b99b5f26cdfffbcbb8a287c602b8a7ef21981c78f5b524b07f7e29873bb435a55cf514b6786ff8951611835ea6dab8ba74652b67e036ddcc55863825f894b70e70083dec927e5801345c4b4b0f729373f7e5be3bbf11f46fce584bc93cb4ede8fe1469e0f61404f52a42ed2e622a6551a930d944f7624d7902fe50fbf5b03e7eb5a47b21fc6a19fe3ab0565d5124d9450044acee123dbef77f801d6808226d7a65d81352be9b8ac1f0b53f353e0b1ca73b12a3510cd6d4c0f5592525337c7ded19c7855788d558ac1c6ae09cba51b965f0e74d6f88dc559bdbfc604cbda14c838698ac536207358373eb60f06d3c10798c5e16be28ffc85ce7ece9149bc1cfff8af33d0cce6a3c1aa8f30ba3e12043b03d168e60a2c7b0db5fe82689ca6c1c354aa9bcbd2b1fe58cef740dfc582c4201e73084d6afe4669a8538c2097d6384af80e5317c8985b24f4590a8276c18bbc3eb3497ccae8a0327acaebf9ee9028354480761fd77a46bf10a019bed09b861544b773e81acbf8ed51306bcab3be30b75018b546fc81164c77d8d75cea9cbf5e2d2b077a87bd6786d7a64218d69766341a55b3e63a2da4ce5abf74a669e53a790c0d23d19552ad6d73b048473469ed83fab0d529516a01e94575247339417bfe14f5f745c0cd5342e827e0e65f15ce07c5602a95a766d89a42c757bdb06ea90a2500f76f672cb66ed11e89c7ecb013f89869e9e5e9e99968529fa057af6658614f802f982a88eb6979a9f8b6cb0e77978a9308a892687b9776a230d6b61a02b81d49c17b744ddd89589871c2659edd1ad889639676bfaadf5fc9be48bcbf7d17192276a2c1f0032b7adfb8aba73cd2b655f3a6b55cc9a55bbca2474c25780f1b4fc647057a29c64db7f3398d7a13f5dce59503db6e19554a4f6a6556375e4ad8fda2ce334a6a5ddba4da5a36e5360ca75eb009d0a26d3e7acb9c5af31000cea6b376386ed75974a0b4df7b0771b8c3c95a53ac3333d6a20011a2822e6adbbf08160845259f764291192b84e4cf3c2967585ba8160b616c36eded8cb6f9acaa1e0c0f2f0cb982554f93449dd840d7464f68a635235920d8d67a2412dca79d7b87aac39ffab25736a9bee4f2f38e76452afdc7d6a8258012ad2f28b3c35ce7a4d7a5fe69003558c138563da7fbb0cae33a22a70ef79be8a515c80fa8779526a575e0baf545267244785d2e5b0805d8be75c74df2438865b1adbbaa99f6beac78d688bddab0e2d8d75b5a3f0be4f2e63c63c5ea9219b779819445f7d2fe0f3e341350ede36ed9b583fd9ddb8afd2c70a942e751ba96cba58e5135af5cd1f771f24b5aa72cd4b9439fb845b79648833835132629950fe81d198441ce9e4ca2f8cd0781cd3bc6fe2bc3f4307d6d35ec9a920f20cb4e41a6b5c2b96af0876f808e9a569260d62fd472e843dd3006634d60e1c474bff569395d51b00f07ea07bd7a50525d8b78cb75068d4c86c26c4746952075387fecf165b4407c1ee2582b350a74591ff50c977679c2fbd5100f13d92aee6937d09411670ef30400aefa57695ad5093a1a1776235157773451d79428a91f3edfcaa0de2fbfdb9617fd850a6f5d390ef6f6e51dcc74ce2b57b36164043543026a90656d185d6f4dfd8a15c1fff49f59ad876507669502da2db6b9389dec590d9db384592d8494e3c65c2446bca988c2645df37c86cfd00931ed5a040eca28483f005d899e5e9e5c5b8c03bbc1935485da6e2f0f38ae6bd0777a5b186098d5b39d84a9aae05376135e96d3a59437728fb2efff98ab04916793c5266da68c36f9069b31789c12edb3e0372316631c06943aac2dcdc3adfe06908a0e5cc08043aaa509beaca118079fef09f0d622069e377d7da48b67a74559a7a3c727685e71cdb5c80b18f8e2b0b0e962c709bf8349fa7967dc4d93bc5d86489d863a2fafaa3db0703d7096fc28d19c462d7f32a431c9017ec453366669997b09f11480b48837d6cc9f0b9ddf22fe540a76bd4ca80de901d3919bc5da95c68aa586c68ce22fc201bc7e01ef0caacbead52e4f5e436239c892f9aacc71fcf2112164291f7b1f4f1057a17ce1387c8cb4cbe319b186a1b00519b13f6175b9f99b6671f6a2fef61a706c88e789ba43b1c74a796b5794ab25a080f2835f645113eee993ff153e7959e06d85cb3e3a56c616ef961ede98d890a13370eabb3ccb326a7680a74f99302dbecfbc16eadc313fd42ed7b1558e88c478e1d0bdd8650d381c5c3fdd71b415be03ccbe4b412960af492f1347b603b4032e8bf7e08be1268de0f0c51469a148bdba6fd015aae56c6c8d33a544b47f0207c8283bb3772449af93088d731552196949ed6f290776e2887cd335261ef50da82de364158460daf70f631d50e83a1245b996e5f8a9b9de957485fdef2061eb69dc1933a2534683de1cc16957f97d81410468712969a70814f0962bd38758891546f5756df1b063d33f1530e84ef4890b416b86ca9cd1c2b784b02870eb4258a4a1d573ef7d8c95706781821758b1a249d924d91f07f4471770132f50a89d00deb7d4e90c9a0f4388b471f4a5e906e11891ffbc0e485a9926bf6e32413aa41f0a9ceedff4c555ada9ba304737492b412549228bb1114e786bceef02d314e343c8ae02656a50d391f374709dbad4ecfcbb9f5f0494f2789406c40406293170358269e73c94c2a9ebfdf79c9065c4f82aa81186d5ddcb7ec338b883dfaf7ab38a97e6ed79d7d14dcf8a2c43fb9d858fc3c37039fb5df83410c359d66cddd331358cac96e379b5073f2733fbbf2c9fca9f9cda198aca9f7b1820254a419bfb2a4783bfc8bba78fd340831de1abac880f9060e2e500134c13aeb8deb6d37c915cde8bdfd2074ca432974d5d0a77b5521a045a6020d763fb27577f4696d1e15abaeb6adbd3cea59104e65839d53c4ecbc8ed10365850cb45179bf853988aa52b8ab7e631433e1d830254358d3064d44031be8f7624d669af090674f4349b9fccf550e2a53ba5eb156262675462ef18118d3d243534cda3a4a799a7e30b8e7b52ad7d9eee0f49c0d1bdabff7c44ab56c3619df45225fd2770f4e9bf2bcf4de6f34dbda289e244ad42d8b6e095f76151638f728d64a539ba0131fc19b9408ab1a03a92f14e6719873e1ec1f1b41fead67e1beeeffb7dab8d5e2274cd5ad93f74aba2d267c416cc01eee82aab28b2bd56ee159390702ff2c31e725bbc575308c9a196b7bd4346fb8573260bbd1bfc06bbb7a4a19821c4cbb10683c80bd25afa97173e84e17393c22aaa7f067341b0eeca5edcfbefd34dfd384c9918d7ef64a9c3a755de3306abc5427ba9ebdb0d8380d99ab595f852b80ddbee46bad8e6b6a04f1798d56065e91353f5447a6ef6774bf3506e3e2a067f5baddf5d79d27a84b298b6126cf5f81f4167b2e82f4e18d8b0778233c50f9daa1d921a6ae46b6dae86e6fbe26b39e2321ac37d1d9ea3f073069611357307c5159355fcba4485d097cb7634a758208fc90f8a8e9225718956fa5f9e9df5315053fc0b00d22486f5bb481b46b49e58d738116e37491f6c69eb3e046dd64ae4ee9af39880b220e22f0861380979ad7a7ee907c310edfd880052f08e59645927f63fa3f3b984ea659388dadaecec304d2e053d80b945aafc0692869a62b6db5efbfe5d61a5c29f2bbd824ce9f5a65fbbb78ef58d0c8d1d36b99a1031d238b5c01807bf11562961c991e0ff1235784174cb5a05b20e709417e35d6cf36a1bf236803c4d0f7b4dc4c005c758a6ad3bd91afed525ecb1c6b6b2a8b6d37d60a323a24d49ea867e4de083e6a37edc02391af752dcc8a1946f9f729bd283c617b971e15eb89cc9cc849292d88b12d38c621719426b00a9b75e2299e7bfafdc0472cc8e545d6cb331273a097d18d24d0c1c3ce3419a13cdc9abd2a1caa1110b7de4a8f17dd55f816320094b3bb7d132512b79d3c6324735713793b6da9059c5c77b06111fb7a408f50d07b7c88a0491c8eb56a88f0fc6e1117b759e847e5e58f5dadc2ccad9929ba22e1305d54507323c351e9f74c8ff4c49cf6dc8dd7bd83bff8936d0eaaa5113ff684a7489c264b2c78af5f907148c333861e77cc6989bb6b6d7116339960b0b35d7916771ddf48332eefd66ca4266f78f81c10570f392b783a92aac67fb0e7286ca9da517517a7bd33ed6294d128b652f6a28ed06677c189297326daf60b8b7e74f4886283c229a5fed19d6cb710c920e46f2890a237f6341ca8c1d989e18e00631319c1d995865ef7067c5ad95c51e9b617652e22e905480d12bda8d5e2c2d37ae16405051870ceee81e8b249898dc9f01c3f9be424ee267c4323ee8598843f0b6bd634da5068e6d209c96da2e42329b1a7f900dc2eaa32fbd1da7fb8b1bc7b436016b59cc9aa50d9432b464dc48c9e5c19a7cf0144a750886190c3a686080fe6ab29cd13fb3e2b4ac03b4baf26d6201fcf04ac77a50bd1720b1ec38ab0746b723c67a05a07288a3e6243f687617c551e0d398f9f877573a0d4df86428a40cb92ead7f88bcdd885de264e23b5d881bffa300574028834cb388ffef300d24e28f9033bace0579b291d30cfdc7b513c63d7b662be3942f8cb651239a12188187dfd206f85162ca2c9e1be48af3bd8acaa7bce4d953f117b8081212b50e971c436c7ce45cf6600a928e9bc87eb656ffc19dd720b212d3189fc65fca7c44c062656132949b85d115da447edd75a9e90340a2124fa423fd810a0139aef1f347e1745ad524fca9e00ff6bf6ca05f410e58e57387d8cc0c6bd81789b685b089c45dabe9ef0cd634c1469ba08159df3f819d"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r7, 0x89f2, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6, 0xffffffffffffffff}, 0x4) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xd, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbc3, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x19}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ldst={0x1, 0x1, 0x6, 0x6, 0x5, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r8, 0x8, 0x0, 0x0, 0x14}, 0x94) 1.442095365s ago: executing program 2 (id=275): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") (async) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0xc73ac2c24e4ea36f}, 0xc) renameat2(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000000)='./file7\x00', 0x4) 1.244969237s ago: executing program 4 (id=278): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff653f3440fb21c877da1d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09b4a7e7dac3c3000"/252, @ANYRES64=0x0], 0x3, 0x263, &(0x7f0000000600)="$eJzs2s9rHGUYB/Bn05ZuWtJd8RctiC96UC9Lk7OHFokgBhQ1QhWkUzPRNeNuyCyBFTE56dU/wbN49CZIj15y8S/w4C2XHHsQRyaziUkstPgjW+Lnc0ge5p0v8868y8szy+6+/PWna6tlbzUbxUyrFTM3YjvutaIbM3FgO1564dZPz7x9673Xby4ttSdHF1JKV5798f3Pv3vu7ujyu99f+eFi7HQ/2N1b+HXnqZ2ru7+/83G/TP0yDYajlKU7w+Eou1PkaaVfrvVSerPIszJP/UGZbxwbXy2G6+vjlA1W5i6tb+RlmbLBOK3l4zQaptHGOGUfZf1B6vV6ae5S8E8sf3uvqmKvunA7qqqa/SYu3425X6ITrcdS6/EbrSdvt57ebl3dq6rOyejsdGbMv+tvrz9nwmRTX3wrpXZE8dXm8uZy878ebcfN1ehHEXlcj9n4LeqPyURTv/ra0uL1tK8bXxZbk/zW5vKFg0s0+fnoRPf++fkmnw7yFyOi/lvv7ofXX4hOPHH//MKJfHP9drz4/JF8Lzrx84cxjCJWos7G1mR+i1/Mp/TKG0sn8tf2zwMAOGt66VDdv52rXwqb/udcM947Nn6kP2ryR/rDzgP6wxP91fm4dn66905EOf5sLSuKfKN+wdsvDo/8X4vZo4/lYYqDr0L+u4nNHFuzv5zTjUfk0SnOThHxyVR2JE7Tn4v+wFPbpzIhAAAAAAAAAAAAHspp/Jxw2vcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA82v4IAAD//1jpvxo=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r6, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES64=r9, @ANYRES16=r11, @ANYRES32=r1, @ANYBLOB="086b66d495d83071a111e0c59fd8484c083129cc6ee7a4c7a3ce8b752cc03f8484bab5193a9779304b50184bb494fa41cf15614e54c1d6eb31348912cdb3a693532c65e95cba2b01e1460be28d97939e4d06", @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2005, 0x201}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040855}, 0x40) 1.242853357s ago: executing program 2 (id=289): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0x90) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x110e22fff8) fsmount(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000001c0)={{r2, r3+60000000}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x3, 0x0}) 1.121086525s ago: executing program 2 (id=280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) 1.038717399s ago: executing program 2 (id=282): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xffffffffffffffe6) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="4910075ad2b9", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, &(0x7f0000000040)={r4}, 0x8) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1a08050, &(0x7f0000000540)=ANY=[], 0x2, 0x57e, &(0x7f0000000bc0)="$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") r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='./cgroup/syz0\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f0000000880)='./file0/file0\x00', 0x0, 0x10}, 0x18) fallocate(r1, 0x3, 0x1, 0x8000c62) 954.342524ms ago: executing program 3 (id=285): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '\x00\x18\xcf\xabo~\x103\x12x\xdc@\xd1\x90\r\x99\xce8&\xa2$\x0e\x83\x832\\\xc7\xbc\a00\x1d\b\xfa!\b#\x0e\x99\x87%\x8d\xd1\xe9\x8bZ\x1f\x9fgU!K\x80V\x90;*\xa6 \xe7\xd0{o\xe5T\x0e:\x1dzO\xb8\xdb\xec\xb8\x7f\t?\x99\"\a\x92\xd00Z\xd8\xb1\xaa\xf3\x1b\xae\x85(\xf0[kFzbO\r\xc87\x9e\xc4\xdd$\xd9\xa9\b5\xd3\x95\xd9\xf22\xac\x93L&A\xa9o\x1c\x8e\xc7'}]}, 0x8a) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000000)=r0, 0x4) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6000, 0x7, &(0x7f0000ffa000/0x6000)=nil) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000580)=@in6={0xa, 0xce63, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) 930.486035ms ago: executing program 3 (id=286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x1000400, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=defaulv:\x00\x00']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 846.33289ms ago: executing program 3 (id=287): mremap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) (async) r0 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x19) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2}, 0xc) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "3679fb199b149359", "f45e062fd344d4bbc9af0c6543391989", "671a99cb", "a820135ca1c84ee6"}, 0x28) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 762.363825ms ago: executing program 4 (id=288): r0 = syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}, {0x81, 0xc, 0x0, 0xfffffffa}, {0x9, 0xe, 0xfa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000500006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000002da0ef4d4f08ef16"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000002c0), 0x6, 0x5fe, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnvY9Z2n4yxqNRTDWMx/0mhlQN6qlaJqAEllWj/UFLNfkBzbN/dOPh4j3sl/XPjUGMAtDr+gcZnIzEcgxGx5WbSMjJqfLaxbR3Kz8r478rOL7Mlln0O8fftozOwDuV0snQ1Ip5qF39Sr9u2eqRZ/OmysX42XpyMiKG8fq89QB2SlvVefA6zlnuJv/U4pBFxMH/M8g/fZ/njK9L9jh+Acrp+KD+RL2WpO+e/rO/R7P9Em/7PaJtz1/0o+vzXuf/XPN8P1/s96Yp+WNZnOdb+JQdXZvzy8ZHPO5Xf2v/Llqz8Zl+wH25cjdi5Iv6PsmDz/k8Wf9Lm+Ge7nDjYXRmv//jbkU7bio6/di1iV9vxz51eaba2xvXJvXPz1dnJxs+2ZXz73Ttfdyq/6Piz47+lQ/wtxz9d+bzsPTnfZRnfHLt2ptO20bvGn/46lDTGm0N5znvTi4sXpiKGkqP5Li35+9auS3Of5mtk8e9+rn37X/b7f3X564w0/2R24fxbp2922nY/x7/lYvKtWpd16CSLf+bux39V+8/yPuuyjL/evvhMp21rxT/yIIEBAAAAAABACaX1a7BJOnF7PU0nJhrzZZ+ILWn13MLi83PnLp6didhd/3/IwbR5pXuskU6y9FT+/7DN9L4V6RciYntEfFEZqacnTp6rzhQdPAAAAAAAAAAAAAAAAAAAAGwQW/P5/837VP9Zacz/B0qilzeYAzY27R/Kq97+V93iCSgD538oL+0fykv7h/LS/qG8tH8oL+0fykv7h/LS/gEAAABgU9r+7PWfk4hYemWkvmSG8m1mBMHmNlh0BYDCVIquAFCY25f+dfahdLrq//+Tfzlg76sDFCBpl1nvHNTWbvzX2z4TAAAAAAAAAAAAAOiBXTs6z/83Nxg2N9P+oLweYP6/rw6Ah5yv/ofyMsYH7jaLf7jTBvP/AQAAAAAAAAAAAKBvRutLkk7kc4FHI00nJiIejYhtMZjMzVdnJyPisYj4qTL4SJaeKrrSAAAAAAAAAAAAAAAAAAAAsMksXLp8erpanb3QuvLvqpzNvdK8C2ofyno17vFZkfT/bRmJiMIPSs9WBlpykoil7MhviIpdWIiNUY36SsF/mAAAAAAAAAAAAAAAAAAAoIRa5h63t/OrPtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrvzv3/e7dSdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMPp/wAAAP//6W1AJw==") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 758.488826ms ago: executing program 3 (id=299): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r2 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3, 0x49}, 0x8) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080)=r3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) syz_open_dev$MSR(0x0, 0x0, 0x0) (rerun: 64) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28) 609.161214ms ago: executing program 3 (id=291): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") setxattr(&(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000580)='9p\x00', 0x3, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') 450.588574ms ago: executing program 3 (id=292): r0 = socket$key(0xf, 0x3, 0x2) lsetxattr$security_capability(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x2, 0x3, 0x0, 0x3, 0x14, 0x0, 0x700, 0x0, [@sadb_key={0x6, 0x9, 0x128, 0x0, "63fe2fde8eb4e21c54d9fca2326a940de584f557d50e0a168cc1764e30baed45deaf76e587"}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xd}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0xff}, 0x7}}]}, 0xa0}, 0x1, 0x7}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x597, 0xef3, 0x3}) 372.564168ms ago: executing program 2 (id=293): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="680000001000010a2dbd70000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b00000000000000800f80000000000300016806c00018028000100fdffffff00000000000000000000000000000000000000000800ddff0000000000000000080020000900000000001d004f16ffff"], 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) (async) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x6, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") (async, rerun: 64) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.\x02\x00') (async, rerun: 64) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000440)={0x4, 0x1000}, 0x4) (async) uname(0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 338.44645ms ago: executing program 0 (id=294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) 275.951194ms ago: executing program 0 (id=295): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x10, 0x1}, 0x94) 170.55879ms ago: executing program 0 (id=296): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x7fff, 0x5}, {0x5, 0x2}]}, 0x18, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000030000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000a2e700f73b1a1ec854c3"], 0x0, 0x7}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x48000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000a97626cfdf3f000000fdffffffb6000100080000008510000001000000950000000000000018400000ffffffff00000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x10a, &(0x7f0000000280)=""/266, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "3173639e2219aef89d6f2123030c92e2aad9198ee22a7fb169e6af4550f8f4f85f59a90c699f777d4daa8167d0116a3c19206188a090efa83cf543618b382c19711239ee79b7d69b75251fb55332135add82d5f150f1862c1c0754770cca831dcdb3e36b252583cd341785ec2e708a920749da4c3372d083643c1a09077d9e2040070de7538e5cb2412f110ffff1c20d8a"}, 0xa4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x24, 0x1, 0x1000000e, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200), &(0x7f0000000180)=[0x0], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 151.261751ms ago: executing program 0 (id=297): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x51, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x68, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0xd}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8001}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9e66}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x301, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c4}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'netdevsim0\x00', {0x4}, 0x9}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf7, &(0x7f0000000640)=""/247}, 0x94) (async) socketpair(0x9, 0x1, 0x2, &(0x7f0000000000)) 76.026616ms ago: executing program 0 (id=298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x1000400, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=defaulv:\x00\x00']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 0s ago: executing program 0 (id=300): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, 0x0, 0x4000) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) kernel console output (not intermixed with test programs): [ 18.686886][ T29] audit: type=1400 audit(1769443489.489:62): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.708842][ T29] audit: type=1400 audit(1769443489.489:63): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.731625][ T29] audit: type=1400 audit(1769443489.489:64): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.754519][ T29] audit: type=1400 audit(1769443489.489:65): avc: denied { search } for pid=3195 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.777671][ T29] audit: type=1400 audit(1769443489.489:66): avc: denied { read open } for pid=3196 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 25.026811][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.026826][ T29] audit: type=1400 audit(1769443495.829:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.027693][ T3299] cgroup: Unknown subsys name 'net' [ 25.033076][ T29] audit: type=1400 audit(1769443495.829:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.082893][ T29] audit: type=1400 audit(1769443495.859:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.232423][ T3299] cgroup: Unknown subsys name 'cpuset' [ 25.238490][ T3299] cgroup: Unknown subsys name 'rlimit' [ 25.367170][ T29] audit: type=1400 audit(1769443496.169:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.390515][ T29] audit: type=1400 audit(1769443496.169:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.411098][ T29] audit: type=1400 audit(1769443496.169:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.428286][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.431521][ T29] audit: type=1400 audit(1769443496.169:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.460278][ T29] audit: type=1400 audit(1769443496.189:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.473698][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.485095][ T29] audit: type=1400 audit(1769443496.189:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.517042][ T29] audit: type=1400 audit(1769443496.189:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.604288][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.629295][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.642119][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.682636][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 26.698001][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 26.732746][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.739866][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.747192][ T3313] bridge_slave_0: entered allmulticast mode [ 26.753542][ T3313] bridge_slave_0: entered promiscuous mode [ 26.769793][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.776877][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.784183][ T3317] bridge_slave_0: entered allmulticast mode [ 26.790426][ T3317] bridge_slave_0: entered promiscuous mode [ 26.801273][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.808421][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.815641][ T3317] bridge_slave_1: entered allmulticast mode [ 26.822103][ T3317] bridge_slave_1: entered promiscuous mode [ 26.828278][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.835343][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.842605][ T3313] bridge_slave_1: entered allmulticast mode [ 26.848862][ T3313] bridge_slave_1: entered promiscuous mode [ 26.891802][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.908330][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.924168][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.936833][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.943929][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.951072][ T3312] bridge_slave_0: entered allmulticast mode [ 26.957590][ T3312] bridge_slave_0: entered promiscuous mode [ 26.964849][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.986257][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.993347][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.000535][ T3312] bridge_slave_1: entered allmulticast mode [ 27.006916][ T3312] bridge_slave_1: entered promiscuous mode [ 27.022102][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.029259][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.036407][ T3325] bridge_slave_0: entered allmulticast mode [ 27.042771][ T3325] bridge_slave_0: entered promiscuous mode [ 27.053454][ T3313] team0: Port device team_slave_0 added [ 27.059044][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.066165][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.073757][ T3320] bridge_slave_0: entered allmulticast mode [ 27.080205][ T3320] bridge_slave_0: entered promiscuous mode [ 27.091058][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.098200][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.105369][ T3320] bridge_slave_1: entered allmulticast mode [ 27.111780][ T3320] bridge_slave_1: entered promiscuous mode [ 27.122705][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.129752][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.136992][ T3325] bridge_slave_1: entered allmulticast mode [ 27.143479][ T3325] bridge_slave_1: entered promiscuous mode [ 27.150456][ T3313] team0: Port device team_slave_1 added [ 27.156771][ T3317] team0: Port device team_slave_0 added [ 27.167698][ T3317] team0: Port device team_slave_1 added [ 27.174609][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.201321][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.211299][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.229106][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.243675][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.262847][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.269976][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.296056][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.307656][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.317302][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.324259][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.350168][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.361146][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.368102][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.394175][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.419646][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.426613][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.452626][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.464335][ T3312] team0: Port device team_slave_0 added [ 27.470622][ T3320] team0: Port device team_slave_0 added [ 27.481858][ T3320] team0: Port device team_slave_1 added [ 27.494963][ T3312] team0: Port device team_slave_1 added [ 27.501901][ T3325] team0: Port device team_slave_0 added [ 27.517958][ T3325] team0: Port device team_slave_1 added [ 27.527651][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.534700][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.560823][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.576448][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.583484][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.609546][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.634411][ T3313] hsr_slave_0: entered promiscuous mode [ 27.640418][ T3313] hsr_slave_1: entered promiscuous mode [ 27.661581][ T3317] hsr_slave_0: entered promiscuous mode [ 27.667653][ T3317] hsr_slave_1: entered promiscuous mode [ 27.673531][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 27.679245][ T3317] Cannot create hsr debugfs directory [ 27.690792][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.697811][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.723746][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.734945][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.741908][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.767788][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.779503][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.786551][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.812441][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.823655][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.830686][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.856667][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.889886][ T3320] hsr_slave_0: entered promiscuous mode [ 27.896057][ T3320] hsr_slave_1: entered promiscuous mode [ 27.901853][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 27.907562][ T3320] Cannot create hsr debugfs directory [ 27.949162][ T3312] hsr_slave_0: entered promiscuous mode [ 27.955521][ T3312] hsr_slave_1: entered promiscuous mode [ 27.961449][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.967213][ T3312] Cannot create hsr debugfs directory [ 27.979181][ T3325] hsr_slave_0: entered promiscuous mode [ 27.985359][ T3325] hsr_slave_1: entered promiscuous mode [ 27.991061][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 27.996807][ T3325] Cannot create hsr debugfs directory [ 28.177927][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.191426][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.200363][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.210966][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.226715][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.235702][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.249666][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.258386][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.282193][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.294698][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.303348][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.312517][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.346401][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.354999][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.363894][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.372631][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.427776][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.436850][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.450489][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.463442][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.478319][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.491992][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.500202][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.515740][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.533993][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.541529][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.553125][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.562913][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.569937][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.580540][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.587705][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.597161][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.608702][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.615766][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.624412][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.631438][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.645684][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.652868][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.666050][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.673123][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.689114][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.696163][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.706614][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.713689][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.758294][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.773178][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.785544][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.812590][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.819652][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.828968][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.836194][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.898478][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.908918][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.967546][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.976004][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.989239][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.999844][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.014533][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.159301][ T3313] veth0_vlan: entered promiscuous mode [ 29.174173][ T3320] veth0_vlan: entered promiscuous mode [ 29.188349][ T3313] veth1_vlan: entered promiscuous mode [ 29.195673][ T3320] veth1_vlan: entered promiscuous mode [ 29.203797][ T3312] veth0_vlan: entered promiscuous mode [ 29.211123][ T3312] veth1_vlan: entered promiscuous mode [ 29.239542][ T3325] veth0_vlan: entered promiscuous mode [ 29.254806][ T3320] veth0_macvtap: entered promiscuous mode [ 29.262780][ T3325] veth1_vlan: entered promiscuous mode [ 29.273262][ T3317] veth0_vlan: entered promiscuous mode [ 29.286085][ T3317] veth1_vlan: entered promiscuous mode [ 29.293931][ T3320] veth1_macvtap: entered promiscuous mode [ 29.304631][ T3313] veth0_macvtap: entered promiscuous mode [ 29.312717][ T3325] veth0_macvtap: entered promiscuous mode [ 29.320657][ T3325] veth1_macvtap: entered promiscuous mode [ 29.329070][ T3313] veth1_macvtap: entered promiscuous mode [ 29.339153][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.355972][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.366153][ T3312] veth0_macvtap: entered promiscuous mode [ 29.376647][ T3312] veth1_macvtap: entered promiscuous mode [ 29.384941][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.393711][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.401119][ T3317] veth0_macvtap: entered promiscuous mode [ 29.413495][ T3317] veth1_macvtap: entered promiscuous mode [ 29.421279][ T2034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.431104][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.441389][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.450264][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.463943][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.472875][ T2034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.492037][ T2034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.500875][ T2034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.514975][ T2034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.532699][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.539914][ T2034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.567680][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.577262][ T2034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.610226][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.628130][ T2034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.661273][ T2034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.678839][ T3488] loop4: detected capacity change from 0 to 1024 [ 29.693414][ T2034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.717316][ T3488] EXT4-fs: Ignoring removed orlov option [ 29.728563][ T3492] loop1: detected capacity change from 0 to 512 [ 29.735218][ T2034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.750348][ T2034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.760059][ T3492] ======================================================= [ 29.760059][ T3492] WARNING: The mand mount option has been deprecated and [ 29.760059][ T3492] and is ignored by this kernel. Remove the mand [ 29.760059][ T3492] option from the mount to silence this warning. [ 29.760059][ T3492] ======================================================= [ 29.800285][ T3495] futex_wake_op: syz.3.4 tries to shift op by -3; fix this program [ 29.810955][ T2034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.822407][ T2034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.830731][ T3496] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 29.838633][ T3488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.851305][ C1] hrtimer: interrupt took 27381 ns [ 29.855142][ T2034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.870125][ T2034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.883370][ T3496] loop2: detected capacity change from 0 to 128 [ 29.900132][ T3492] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 29.905968][ T2034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.911280][ T3492] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 29.929998][ T3492] EXT4-fs (loop1): group descriptors corrupted! [ 29.952671][ T3496] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.970690][ T3495] loop3: detected capacity change from 0 to 128 [ 29.977827][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.977864][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.977897][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.012824][ T3496] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.032157][ T3495] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 30.059944][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 30.059960][ T29] audit: type=1400 audit(1769443500.859:129): avc: denied { name_connect } for pid=3506 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 30.115167][ T29] audit: type=1400 audit(1769443500.909:130): avc: denied { shutdown } for pid=3506 comm="syz.0.6" lport=45511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.135595][ T29] audit: type=1400 audit(1769443500.919:131): avc: denied { getopt } for pid=3506 comm="syz.0.6" lport=45511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.155927][ T29] audit: type=1400 audit(1769443500.919:132): avc: denied { create } for pid=3506 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.176235][ T29] audit: type=1400 audit(1769443500.919:133): avc: denied { write } for pid=3506 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.224268][ T29] audit: type=1400 audit(1769443500.979:134): avc: denied { create } for pid=3493 comm="syz.2.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.244174][ T29] audit: type=1400 audit(1769443500.989:135): avc: denied { write open } for pid=3493 comm="syz.2.3" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.244470][ T3480] IPVS: starting estimator thread 0... [ 30.288269][ T29] audit: type=1400 audit(1769443500.989:136): avc: denied { read append } for pid=3493 comm="syz.2.3" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.338144][ T29] audit: type=1400 audit(1769443500.989:137): avc: denied { ioctl } for pid=3493 comm="syz.2.3" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=13 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.386699][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 30.389455][ T29] audit: type=1400 audit(1769443501.029:138): avc: denied { create } for pid=3511 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.419380][ T3512] netlink: 'syz.1.7': attribute type 4 has an invalid length. [ 30.451931][ T3512] Illegal XDP return value 4294965632 on prog (id 2) dev syz_tun, expect packet loss! [ 30.504247][ T3513] IPVS: using max 2400 ests per chain, 120000 per kthread [ 30.522942][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.544303][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.583376][ T3517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 30.607659][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.675785][ T3523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8'. [ 30.685763][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.685909][ T3523] tipc: Started in network mode [ 30.698522][ T3523] tipc: Node identity , cluster identity 4711 [ 30.704817][ T3523] tipc: Failed to obtain node identity [ 30.710532][ T3523] tipc: Enabling of bearer rejected, failed to enable media [ 30.734456][ T3519] netlink: 'syz.1.10': attribute type 29 has an invalid length. [ 30.734992][ T3523] loop4: detected capacity change from 0 to 1024 [ 30.742221][ T3519] netlink: 'syz.1.10': attribute type 16 has an invalid length. [ 30.749155][ T3523] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 30.765995][ T3523] EXT4-fs (loop4): group descriptors corrupted! [ 30.781809][ T3517] loop3: detected capacity change from 0 to 2048 [ 31.140430][ T3533] tipc: Started in network mode [ 31.145381][ T3533] tipc: Node identity , cluster identity 4711 [ 31.151727][ T3533] tipc: Failed to obtain node identity [ 31.157182][ T3533] tipc: Enabling of bearer rejected, failed to enable media [ 31.184387][ T3527] loop1: detected capacity change from 0 to 32768 [ 31.197114][ T3536] loop0: detected capacity change from 0 to 1024 [ 31.212939][ T3536] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 31.223077][ T3536] EXT4-fs (loop0): group descriptors corrupted! [ 31.542293][ T3304] loop3: p3 p4 < > [ 31.549951][ T3304] loop3: p3 start 11362048 is beyond EOD, truncated [ 31.561365][ T3302] loop1: p1 p2 p3 < p5 p6 > [ 31.574417][ T3552] usb usb9: usbfs: process 3552 (syz.4.15) did not claim interface 0 before use [ 31.577635][ T3302] loop1: p2 size 16775168 extends beyond EOD, truncated [ 31.601989][ T3517] loop3: p3 p4 < > [ 31.605859][ T3517] loop3: p3 start 11362048 is beyond EOD, truncated [ 31.621872][ T3551] netlink: 112 bytes leftover after parsing attributes in process `syz.4.15'. [ 31.633117][ T3002] loop3: p3 p4 < > [ 31.637525][ T3302] loop1: p5 start 4294970168 is beyond EOD, truncated [ 31.644924][ T3002] loop3: p3 start 11362048 is beyond EOD, truncated [ 31.671249][ T3527] loop1: p1 p2 p3 < p5 p6 > [ 31.680182][ T3527] loop1: p2 size 16775168 extends beyond EOD, truncated [ 31.708487][ T3565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17'. [ 31.722938][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 31.724717][ T3566] loop2: detected capacity change from 0 to 1024 [ 31.735111][ T3565] tipc: Started in network mode [ 31.744158][ T3565] tipc: Node identity , cluster identity 4711 [ 31.750231][ T3565] tipc: Failed to obtain node identity [ 31.750575][ T3566] EXT4-fs: Ignoring removed orlov option [ 31.755723][ T3565] tipc: Enabling of bearer rejected, failed to enable media [ 31.780899][ T3527] loop1: p5 start 4294970168 is beyond EOD, truncated [ 31.794064][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 31.812507][ T3565] loop3: detected capacity change from 0 to 1024 [ 31.819971][ T3565] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 31.829740][ T3565] EXT4-fs (loop3): group descriptors corrupted! [ 31.853936][ T3566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.101542][ T3576] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.143931][ T3576] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.158975][ T3581] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 32.169962][ T3581] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 32.180067][ T3581] EXT4-fs (loop4): group descriptors corrupted! [ 32.192606][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.340086][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 32.409151][ T3597] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.422530][ T3595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26'. [ 32.464749][ T3595] tipc: Started in network mode [ 32.469703][ T3595] tipc: Node identity , cluster identity 4711 [ 32.475851][ T3595] tipc: Failed to obtain node identity [ 32.481302][ T3595] tipc: Enabling of bearer rejected, failed to enable media [ 32.532044][ T3305] loop0: p3 p4 < > [ 32.536083][ T3305] loop0: p3 start 11362048 is beyond EOD, truncated [ 32.566837][ T3598] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 32.576591][ T3598] EXT4-fs (loop1): group descriptors corrupted! [ 32.628036][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 32.639925][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.651698][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.672821][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 32.678019][ T3597] loop0: p3 p4 < > [ 32.697935][ T3601] xt_TCPMSS: Only works on TCP SYN packets [ 32.701678][ T3597] loop0: p3 start 11362048 is beyond EOD, truncated [ 32.715920][ T3604] tmpfs: Unknown parameter 'e' [ 32.743161][ T3593] udevd[3593]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.745749][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.804152][ T3610] netlink: 'syz.4.31': attribute type 12 has an invalid length. [ 32.825391][ T3524] udevd[3524]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 32.872216][ T3617] netlink: 'syz.4.31': attribute type 2 has an invalid length. [ 32.879856][ T3617] netlink: 100 bytes leftover after parsing attributes in process `syz.4.31'. [ 32.917381][ T3620] futex_wake_op: syz.3.33 tries to shift op by -3; fix this program [ 32.927912][ T3617] EXT4-fs: Ignoring removed bh option [ 32.927956][ T3617] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.986741][ T3617] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 33.042327][ T3617] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 33.050362][ T3617] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.073595][ T3617] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.31: Failed to acquire dquot type 1 [ 33.088674][ T3622] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 33.118012][ T3617] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.31: Invalid block bitmap block 0 in block_group 0 [ 33.184928][ T3617] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.31: Invalid block bitmap block 0 in block_group 0 [ 33.284075][ T3617] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.31: Invalid block bitmap block 0 in block_group 0 [ 33.306257][ T3617] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.31: Failed to acquire dquot type 1 [ 33.329519][ T3617] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.31: Failed to acquire dquot type 1 [ 33.410461][ T3617] EXT4-fs (loop4): 1 orphan inode deleted [ 33.432218][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.451334][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.486429][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.514996][ T3634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39'. [ 33.537415][ T3636] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.553180][ T3634] tipc: Started in network mode [ 33.558049][ T3634] tipc: Node identity , cluster identity 4711 [ 33.564163][ T3634] tipc: Failed to obtain node identity [ 33.569693][ T3634] tipc: Enabling of bearer rejected, failed to enable media [ 33.580010][ T3630] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 33.587796][ T3630] netlink: 'syz.3.37': attribute type 16 has an invalid length. [ 33.615170][ T3636] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.631958][ T3636] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.652623][ T3634] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 33.662419][ T3634] EXT4-fs (loop1): group descriptors corrupted! [ 33.680086][ T3636] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.715339][ T3636] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 33.732345][ T3636] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.40: corrupted inode contents [ 33.752092][ T3617] syz.4.31 (3617) used greatest stack depth: 9008 bytes left [ 33.770063][ T3636] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.40: mark_inode_dirty error [ 33.792820][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.802300][ T3636] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.40: corrupted inode contents [ 33.833802][ T3636] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.40: mark_inode_dirty error [ 33.852097][ T3636] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.40: corrupted inode contents [ 34.123735][ T3636] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 34.179249][ T3636] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.40: corrupted inode contents [ 34.298161][ T3636] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.40: mark_inode_dirty error [ 34.310925][ T3647] tipc: Started in network mode [ 34.315822][ T3647] tipc: Node identity , cluster identity 4711 [ 34.322171][ T3647] tipc: Failed to obtain node identity [ 34.327619][ T3647] tipc: Enabling of bearer rejected, failed to enable media [ 34.363444][ T3630] loop3: p1 p2 p3 < p5 p6 > [ 34.372694][ T3649] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.383234][ T3630] loop3: p2 size 16775168 extends beyond EOD, truncated [ 34.392549][ T3636] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 34.415310][ T3630] loop3: p5 start 4294970168 is beyond EOD, truncated [ 34.431941][ T3636] EXT4-fs (loop0): 1 truncate cleaned up [ 34.438628][ T3636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.463728][ T3647] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 34.473453][ T3647] EXT4-fs (loop2): group descriptors corrupted! [ 34.562257][ T3497] loop4: p3 p4 < > [ 34.589372][ T3497] loop4: p3 start 11362048 is beyond EOD, truncated [ 34.698592][ T3661] futex_wake_op: syz.1.47 tries to shift op by -3; fix this program [ 34.726817][ T3661] set_capacity_and_notify: 14 callbacks suppressed [ 34.726873][ T3661] loop1: detected capacity change from 0 to 128 [ 34.768484][ T3661] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 34.843507][ T3649] loop4: p3 p4 < > [ 34.847623][ T3649] loop4: p3 start 11362048 is beyond EOD, truncated [ 34.891152][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.997793][ T3674] netlink: 124 bytes leftover after parsing attributes in process `syz.4.49'. [ 35.030684][ T3673] loop1: detected capacity change from 0 to 1024 [ 35.073007][ T3673] EXT4-fs: Ignoring removed orlov option [ 35.108074][ T3677] netlink: 'syz.0.52': attribute type 21 has an invalid length. [ 35.169591][ T3673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.182351][ T3692] netlink: 'syz.0.52': attribute type 21 has an invalid length. [ 35.202052][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 35.202069][ T29] audit: type=1400 audit(1769443505.999:180): avc: denied { create } for pid=3688 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 35.255209][ T29] audit: type=1400 audit(1769443506.029:181): avc: denied { setopt } for pid=3688 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 35.274540][ T29] audit: type=1400 audit(1769443506.029:182): avc: denied { ioctl } for pid=3688 comm="syz.2.54" path="socket:[5144]" dev="sockfs" ino=5144 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 35.307434][ T29] audit: type=1400 audit(1769443506.109:183): avc: denied { read write } for pid=3709 comm="syz.0.55" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.330528][ T29] audit: type=1400 audit(1769443506.109:184): avc: denied { open } for pid=3709 comm="syz.0.55" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.455193][ T3725] capability: warning: `syz.0.59' uses 32-bit capabilities (legacy support in use) [ 35.459624][ T29] audit: type=1400 audit(1769443506.109:185): avc: denied { bind } for pid=3707 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.484165][ T29] audit: type=1400 audit(1769443506.109:186): avc: denied { setopt } for pid=3707 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.503889][ T29] audit: type=1400 audit(1769443506.159:187): avc: denied { ioctl } for pid=3709 comm="syz.0.55" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.526111][ T3725] Zero length message leads to an empty skb [ 35.528410][ T29] audit: type=1400 audit(1769443506.159:188): avc: denied { read write } for pid=3709 comm="syz.0.55" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.558113][ T29] audit: type=1400 audit(1769443506.159:189): avc: denied { open } for pid=3709 comm="syz.0.55" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.638668][ T3734] : renamed from veth0_to_bond (while UP) [ 35.762687][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.837486][ T3753] tipc: Started in network mode [ 35.842811][ T3753] tipc: Node identity , cluster identity 4711 [ 35.849036][ T3753] tipc: Failed to obtain node identity [ 35.854588][ T3753] tipc: Enabling of bearer rejected, failed to enable media [ 35.882615][ T3753] loop1: detected capacity change from 0 to 1024 [ 35.885647][ T3721] netlink: 48 bytes leftover after parsing attributes in process `syz.3.56'. [ 35.889773][ T3753] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 35.907540][ T3753] EXT4-fs (loop1): group descriptors corrupted! [ 36.121108][ T3764] loop2: detected capacity change from 0 to 2048 [ 36.204615][ T3767] loop4: detected capacity change from 0 to 512 [ 36.262663][ T3776] IPVS: Error connecting to the multicast addr [ 36.273355][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.71'. [ 36.416957][ T3784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'. [ 36.459368][ T3786] loop4: detected capacity change from 0 to 1024 [ 36.491873][ T3786] EXT4-fs: Ignoring removed orlov option [ 36.524220][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.541800][ T3788] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.575590][ T3795] 9p: Bad value for 'rfdno' [ 36.661480][ T3799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78'. [ 36.796116][ T3788] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.811607][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.929603][ T3799] netlink: 64 bytes leftover after parsing attributes in process `syz.0.78'. [ 36.994049][ T3807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3807 comm=syz.1.81 [ 37.008076][ T3807] mmap: syz.1.81 (3807) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.145534][ T3810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.80'. [ 37.158155][ T3788] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.222715][ T3810] tipc: Started in network mode [ 37.227607][ T3810] tipc: Node identity , cluster identity 4711 [ 37.233737][ T3810] tipc: Failed to obtain node identity [ 37.239236][ T3810] tipc: Enabling of bearer rejected, failed to enable media [ 37.365575][ T3817] loop1: detected capacity change from 0 to 128 [ 37.436377][ T3788] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.490872][ T3817] pim6reg: entered allmulticast mode [ 37.508635][ T3817] pim6reg: left allmulticast mode [ 37.580568][ T2126] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.603763][ T3824] capability: warning: `syz.4.85' uses deprecated v2 capabilities in a way that may be insecure [ 37.648067][ T2126] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.667897][ T2126] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.688976][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 37.697747][ T3825] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 37.717747][ T2126] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.009776][ T3839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.90'. [ 38.032637][ T3839] tipc: Started in network mode [ 38.037627][ T3839] tipc: Node identity , cluster identity 4711 [ 38.043850][ T3839] tipc: Failed to obtain node identity [ 38.049319][ T3839] tipc: Enabling of bearer rejected, failed to enable media [ 38.210427][ T3841] loop1: detected capacity change from 0 to 1024 [ 38.240659][ T3841] EXT4-fs: Ignoring removed orlov option [ 38.284252][ T3841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.372006][ T3846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.92'. [ 38.388218][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.404257][ T3846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.92'. [ 38.792966][ T3868] loop4: detected capacity change from 0 to 512 [ 38.802012][ T3868] EXT4-fs: inline encryption not supported [ 38.825193][ T3868] EXT4-fs (loop4): 1 orphan inode deleted [ 38.831381][ T3868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.844013][ T31] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 38.871382][ T3868] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.912038][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.934062][ T3882] tmpfs: Bad value for 'mpol' [ 38.983288][ T3885] loop4: detected capacity change from 0 to 512 [ 38.992555][ T3885] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 39.001276][ T3885] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 39.265795][ T3895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.279883][ T3895] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.327275][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.380592][ T10] hid (null): global environment stack underflow [ 39.390618][ T10] hid-generic 0040:0006:0000.0001: global environment stack underflow [ 39.398879][ T10] hid-generic 0040:0006:0000.0001: item 0 4 1 11 parsing failed [ 39.407495][ T3901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3901 comm=syz.4.108 [ 39.409890][ T10] hid-generic 0040:0006:0000.0001: probe with driver hid-generic failed with error -22 [ 39.821413][ T3920] tmpfs: Bad value for 'mpol' [ 39.857083][ T3923] set_capacity_and_notify: 1 callbacks suppressed [ 39.857095][ T3923] loop4: detected capacity change from 0 to 1024 [ 39.888987][ T3923] EXT4-fs: Ignoring removed orlov option [ 39.914107][ T3925] futex_wake_op: syz.1.117 tries to shift op by -3; fix this program [ 39.938253][ T3923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.961877][ T3930] veth0: entered promiscuous mode [ 39.974732][ T3931] veth0: left promiscuous mode [ 40.000197][ T3930] netlink: 'syz.3.118': attribute type 2 has an invalid length. [ 40.020341][ T3933] loop1: detected capacity change from 0 to 128 [ 40.032018][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.056548][ T3933] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 40.094281][ T3937] loop3: detected capacity change from 0 to 4096 [ 40.108048][ T3939] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 40.123123][ T3937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.253339][ T3937] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.299782][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.416674][ T3959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3959 comm=syz.3.125 [ 40.455488][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 40.455502][ T29] audit: type=1400 audit(1769443511.259:282): avc: denied { execute } for pid=3956 comm="syz.4.124" path="/35/cpu.stat" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.553092][ T3964] futex_wake_op: syz.1.135 tries to shift op by -3; fix this program [ 40.643523][ T3970] tmpfs: Bad value for 'mpol' [ 40.650890][ T3964] loop1: detected capacity change from 0 to 128 [ 40.680400][ T3964] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 40.690467][ T29] audit: type=1400 audit(1769443511.479:283): avc: denied { read } for pid=3971 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.734331][ T3975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.798276][ T29] audit: type=1400 audit(1769443511.549:284): avc: denied { getopt } for pid=3973 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.812268][ T3980] loop3: detected capacity change from 0 to 1024 [ 40.818160][ T29] audit: type=1400 audit(1769443511.579:285): avc: denied { getopt } for pid=3971 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.853427][ T3980] EXT4-fs: Ignoring removed orlov option [ 40.950618][ T3985] __nla_validate_parse: 7 callbacks suppressed [ 40.950636][ T3985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.970571][ T3985] tipc: Started in network mode [ 40.975560][ T3985] tipc: Node identity , cluster identity 4711 [ 40.982268][ T3985] tipc: Failed to obtain node identity [ 40.988240][ T3985] tipc: Enabling of bearer rejected, failed to enable media [ 41.002689][ T3985] loop1: detected capacity change from 0 to 1024 [ 41.009656][ T3985] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 41.019429][ T3985] EXT4-fs (loop1): group descriptors corrupted! [ 41.037122][ T3980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.127436][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.190712][ T29] audit: type=1400 audit(1769443511.989:286): avc: denied { create } for pid=3987 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 41.925838][ T29] audit: type=1400 audit(1769443512.729:287): avc: denied { read write } for pid=4010 comm="syz.1.139" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.949290][ T29] audit: type=1400 audit(1769443512.729:288): avc: denied { open } for pid=4010 comm="syz.1.139" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.054188][ T4019] tmpfs: Bad value for 'mpol' [ 42.235898][ T4029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4029 comm=syz.4.143 [ 42.248550][ T4029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=4029 comm=syz.4.143 [ 42.254013][ T29] audit: type=1400 audit(1769443512.729:289): avc: denied { ioctl } for pid=4010 comm="syz.1.139" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.261274][ T4029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=4029 comm=syz.4.143 [ 42.285958][ T29] audit: type=1400 audit(1769443512.869:290): avc: denied { create } for pid=4015 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.298676][ T4029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=4029 comm=syz.4.143 [ 42.330693][ T29] audit: type=1400 audit(1769443512.869:291): avc: denied { connect } for pid=4015 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.488878][ T4042] futex_wake_op: syz.4.147 tries to shift op by -3; fix this program [ 42.512865][ T4041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.555762][ T4042] loop4: detected capacity change from 0 to 128 [ 42.584630][ T4041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.614575][ T4042] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 42.644215][ T4041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.705442][ T4041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.725170][ T4047] loop1: detected capacity change from 0 to 512 [ 42.836136][ T3438] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.846640][ T3438] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.849452][ T1047] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.855462][ T3438] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.871140][ T3438] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.871401][ T1047] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.882835][ T4053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 42.928063][ T4057] fido_id[4057]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.950783][ T4059] tmpfs: Bad value for 'mpol' [ 43.007162][ T4065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=4065 comm=syz.4.154 [ 43.024249][ T4067] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.155'. [ 43.048391][ T4067] process 'syz.0.155' launched './file0' with NULL argv: empty string added [ 43.057483][ T4069] loop4: detected capacity change from 0 to 1024 [ 43.071225][ T4069] EXT4-fs: Ignoring removed orlov option [ 43.077011][ T4069] EXT4-fs: inline encryption not supported [ 43.082939][ T4069] EXT4-fs: dax option not supported [ 43.132858][ T4073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.156643][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 43.175198][ T4073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.210238][ T4085] loop4: detected capacity change from 0 to 128 [ 43.222518][ T4085] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.238191][ T4073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.238720][ T4085] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.270226][ T3325] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.287969][ T4073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.289554][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 43.313935][ T4089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.346967][ T3438] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.358228][ T3438] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.369107][ T3438] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.379936][ T3438] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.409733][ T4094] tmpfs: Bad value for 'mpol' [ 43.433680][ T4096] futex_wake_op: syz.1.164 tries to shift op by -3; fix this program [ 43.458125][ T4097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.492456][ T4097] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 43.505428][ T4096] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 43.554777][ T4097] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 44.319633][ T4122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'. [ 44.328565][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'. [ 44.507550][ T4133] vfat: Unknown parameter '@' [ 44.604222][ T4144] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.660829][ T4144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.686395][ T4163] bridge0: port 3(gretap0) entered blocking state [ 44.692929][ T4163] bridge0: port 3(gretap0) entered disabled state [ 44.801747][ T4163] gretap0: entered allmulticast mode [ 44.808934][ T4163] gretap0: entered promiscuous mode [ 44.820235][ T4163] bridge0: port 3(gretap0) entered blocking state [ 44.826744][ T4163] bridge0: port 3(gretap0) entered forwarding state [ 44.841676][ T4144] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.920613][ T4173] tipc: Started in network mode [ 44.925542][ T4173] tipc: Node identity 4, cluster identity 4711 [ 44.931748][ T4173] tipc: Node number set to 4 [ 44.997163][ T4178] set_capacity_and_notify: 3 callbacks suppressed [ 44.997181][ T4178] loop1: detected capacity change from 0 to 512 [ 45.029250][ T4177] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.173: bg 0: block 345: padding at end of block bitmap is not set [ 45.039973][ T4178] EXT4-fs (loop1): too many log groups per flexible block group [ 45.060527][ T4178] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 45.067502][ T4178] EXT4-fs (loop1): mount failed [ 45.093662][ T4177] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 337 with error 117 [ 45.106295][ T4177] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.106295][ T4177] [ 45.169624][ T2126] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 353 with max blocks 1 with error 117 [ 45.182334][ T2126] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.182334][ T2126] [ 45.206314][ T4191] futex_wake_op: syz.0.183 tries to shift op by -3; fix this program [ 45.226753][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.301900][ T4197] tmpfs: Bad value for 'mpol' [ 45.378095][ T4200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'. [ 45.431700][ T4209] loop3: detected capacity change from 0 to 1024 [ 45.438730][ T4209] EXT4-fs: Ignoring removed orlov option [ 45.460965][ T4209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.493006][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.517271][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 45.517286][ T29] audit: type=1400 audit(1769443516.319:327): avc: denied { read write } for pid=4220 comm="syz.0.191" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.547197][ T29] audit: type=1400 audit(1769443516.319:328): avc: denied { open } for pid=4220 comm="syz.0.191" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.632362][ T4240] FAULT_INJECTION: forcing a failure. [ 45.632362][ T4240] name failslab, interval 1, probability 0, space 0, times 1 [ 45.645158][ T4240] CPU: 0 UID: 0 PID: 4240 Comm: syz.0.193 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.645184][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.645270][ T4240] Call Trace: [ 45.645282][ T4240] [ 45.645289][ T4240] __dump_stack+0x1d/0x30 [ 45.645432][ T4240] dump_stack_lvl+0x95/0xd0 [ 45.645456][ T4240] dump_stack+0x15/0x1b [ 45.645475][ T4240] should_fail_ex+0x263/0x280 [ 45.645549][ T4240] should_failslab+0x8c/0xb0 [ 45.645571][ T4240] kmem_cache_alloc_noprof+0x68/0x490 [ 45.645593][ T4240] ? create_new_namespaces+0x3c/0x440 [ 45.645696][ T4240] ? __rcu_read_unlock+0x4e/0x70 [ 45.645724][ T4240] create_new_namespaces+0x3c/0x440 [ 45.645756][ T4240] __se_sys_setns+0x195/0x1000 [ 45.645777][ T4240] ? fput+0x8f/0xc0 [ 45.645802][ T4240] __x64_sys_setns+0x31/0x40 [ 45.645824][ T4240] x64_sys_call+0x2760/0x3000 [ 45.645879][ T4240] do_syscall_64+0xc0/0x2a0 [ 45.645912][ T4240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.645935][ T4240] RIP: 0033:0x7faf0351aeb9 [ 45.645954][ T4240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.645973][ T4240] RSP: 002b:00007faf01f77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 45.646068][ T4240] RAX: ffffffffffffffda RBX: 00007faf03795fa0 RCX: 00007faf0351aeb9 [ 45.646081][ T4240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 45.646092][ T4240] RBP: 00007faf01f77090 R08: 0000000000000000 R09: 0000000000000000 [ 45.646131][ T4240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.646145][ T4240] R13: 00007faf03796038 R14: 00007faf03795fa0 R15: 00007ffd5cc457b8 [ 45.646166][ T4240] [ 45.858342][ T29] audit: type=1326 audit(1769443516.629:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058422aeb9 code=0x7ffc0000 [ 45.881597][ T29] audit: type=1326 audit(1769443516.629:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f058422aeb9 code=0x7ffc0000 [ 45.904735][ T29] audit: type=1326 audit(1769443516.629:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058422aeb9 code=0x7ffc0000 [ 45.928066][ T29] audit: type=1326 audit(1769443516.629:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f058422aeb9 code=0x7ffc0000 [ 45.951394][ T29] audit: type=1400 audit(1769443516.629:333): avc: denied { create } for pid=4237 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.971414][ T29] audit: type=1400 audit(1769443516.629:334): avc: denied { bind } for pid=4237 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.000135][ T4247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.015876][ T4251] tmpfs: Bad value for 'mpol' [ 46.042721][ T29] audit: type=1400 audit(1769443516.819:335): avc: denied { read } for pid=4237 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.061979][ T29] audit: type=1400 audit(1769443516.819:336): avc: denied { write } for pid=4237 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.139009][ T4249] loop3: detected capacity change from 0 to 512 [ 46.167785][ T4268] netlink: 'syz.0.203': attribute type 2 has an invalid length. [ 46.175522][ T4268] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.203'. [ 46.212529][ T4274] bond1: (slave veth3): Enslaving as an active interface with a down link [ 46.221812][ T4264] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.245340][ T4281] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 46.247391][ T4282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.294518][ T4287] FAULT_INJECTION: forcing a failure. [ 46.294518][ T4287] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.308224][ T4287] CPU: 0 UID: 0 PID: 4287 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.308279][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.308293][ T4287] Call Trace: [ 46.308374][ T4287] [ 46.308381][ T4287] __dump_stack+0x1d/0x30 [ 46.308404][ T4287] dump_stack_lvl+0x95/0xd0 [ 46.308590][ T4287] dump_stack+0x15/0x1b [ 46.308725][ T4287] should_fail_ex+0x263/0x280 [ 46.308759][ T4287] should_fail+0xb/0x20 [ 46.308787][ T4287] should_fail_usercopy+0x1a/0x20 [ 46.308869][ T4287] _copy_to_user+0x20/0xa0 [ 46.308893][ T4287] simple_read_from_buffer+0xb5/0x130 [ 46.308972][ T4287] proc_fail_nth_read+0x10e/0x150 [ 46.309009][ T4287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 46.309154][ T4287] vfs_read+0x1ab/0x7f0 [ 46.309213][ T4287] ? __rcu_read_unlock+0x4e/0x70 [ 46.309246][ T4287] ? __fget_files+0x184/0x1c0 [ 46.309272][ T4287] ? mutex_lock+0x57/0x90 [ 46.309329][ T4287] ksys_read+0xdc/0x1a0 [ 46.309347][ T4287] __x64_sys_read+0x40/0x50 [ 46.309365][ T4287] x64_sys_call+0x2889/0x3000 [ 46.309387][ T4287] do_syscall_64+0xc0/0x2a0 [ 46.309422][ T4287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.309447][ T4287] RIP: 0033:0x7faf034db78e [ 46.309511][ T4287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.309529][ T4287] RSP: 002b:00007faf01f76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.309548][ T4287] RAX: ffffffffffffffda RBX: 00007faf01f776c0 RCX: 00007faf034db78e [ 46.309592][ T4287] RDX: 000000000000000f RSI: 00007faf01f770a0 RDI: 0000000000000004 [ 46.309607][ T4287] RBP: 00007faf01f77090 R08: 0000000000000000 R09: 0000000000000000 [ 46.309620][ T4287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.309631][ T4287] R13: 00007faf03796038 R14: 00007faf03795fa0 R15: 00007ffd5cc457b8 [ 46.309648][ T4287] [ 46.539769][ T4299] tmpfs: Bad value for 'mpol' [ 46.541129][ T4249] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.190: corrupted inode contents [ 46.565191][ T4249] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.190: mark_inode_dirty error [ 46.580452][ T4296] netlink: 'syz.2.210': attribute type 15 has an invalid length. [ 46.597909][ T4302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.213'. [ 46.634117][ T4249] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.190: corrupted inode contents [ 46.637701][ T4303] netlink: 1 bytes leftover after parsing attributes in process `syz.0.212'. [ 46.655827][ T4249] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.190: mark_inode_dirty error [ 46.689886][ T4249] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.190: mark inode dirty (error -117) [ 46.704864][ T4249] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 46.724601][ T4249] EXT4-fs (loop3): 1 orphan inode deleted [ 46.765379][ T4249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.766245][ T4323] netlink: 'syz.4.220': attribute type 8 has an invalid length. [ 46.800470][ T4321] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 46.801780][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.815656][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.887958][ T4327] tmpfs: Bad value for 'mpol' [ 46.911757][ T4324] sctp: [Deprecated]: syz.1.221 (pid 4324) Use of int in maxseg socket option. [ 46.911757][ T4324] Use struct sctp_assoc_value instead [ 46.951847][ T4321] loop2: detected capacity change from 0 to 1024 [ 47.002530][ T4324] sctp: [Deprecated]: syz.1.221 (pid 4324) Use of int in max_burst socket option. [ 47.002530][ T4324] Use struct sctp_assoc_value instead [ 47.042754][ T4321] EXT4-fs: inline encryption not supported [ 47.050967][ T4335] 8021q: VLANs not supported on ipvlan1 [ 47.069121][ T4321] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294965763)! [ 47.081069][ T4321] EXT4-fs (loop2): group descriptors corrupted! [ 47.239042][ T4351] loop2: detected capacity change from 0 to 2048 [ 47.333457][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.366475][ T4361] futex_wake_op: syz.3.235 tries to shift op by -3; fix this program [ 47.380570][ T4363] futex_wake_op: syz.0.234 tries to shift op by -3; fix this program [ 47.432799][ T4361] loop3: detected capacity change from 0 to 128 [ 47.448056][ T4361] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 47.540827][ T4366] pimreg: entered allmulticast mode [ 47.582280][ T4369] loop2: detected capacity change from 0 to 1024 [ 47.589291][ T4369] EXT4-fs: Ignoring removed orlov option [ 47.613235][ T4369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.653449][ T4370] pimreg: left allmulticast mode [ 47.666382][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.708144][ T4375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 47.772606][ T4383] vhci_hcd vhci_hcd.0: invalid port number 65 [ 47.778745][ T4383] vhci_hcd vhci_hcd.0: invalid port number 65 [ 47.869715][ T4398] loop2: detected capacity change from 0 to 512 [ 47.894664][ T4391] loop3: detected capacity change from 0 to 512 [ 47.912533][ T4391] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.932066][ T4407] netlink: 'syz.1.248': attribute type 5 has an invalid length. [ 47.939768][ T4407] netlink: 'syz.1.248': attribute type 11 has an invalid length. [ 47.941883][ T4391] EXT4-fs (loop3): mount failed [ 47.984826][ T4409] loop2: detected capacity change from 0 to 512 [ 48.035581][ T4409] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.043600][ T4409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 48.077865][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 48.091645][ T4409] System zones: 0-1, 15-15, 18-18, 34-34 [ 48.097600][ T4409] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.109767][ T4409] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.124433][ T4409] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 48.154887][ T4409] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.249: bg 0: block 40: padding at end of block bitmap is not set [ 48.191311][ T4409] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 48.200574][ T4422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.232944][ T4422] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.250: invalid block [ 48.245122][ T4409] EXT4-fs (loop2): 1 truncate cleaned up [ 48.255678][ T4409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.280531][ T4422] EXT4-fs (loop3): Remounting filesystem read-only [ 48.324351][ T4422] EXT4-fs (loop3): 2 truncates cleaned up [ 48.330568][ T4422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.349210][ T4409] ------------[ cut here ]------------ [ 48.355411][ T4409] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xf00008a0, 0xd7fffe90] s64=[0xf00008a0, 0xd7fffe90] u32=[0xf00008a0, 0xd7fffe90] s32=[0xf00008a0, 0xffffffe0] var_off=(0xc0000020, 0x3fffffc0) [ 48.377790][ T4409] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.249/4409 [ 48.388801][ T4409] Modules linked in: [ 48.393427][ T4409] CPU: 0 UID: 0 PID: 4409 Comm: syz.2.249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.403602][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.414129][ T4409] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 48.420671][ T4409] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 48.440572][ T4409] RSP: 0018:ffffc9000f907388 EFLAGS: 00010246 [ 48.447049][ T4409] RAX: ffff8881042e2b90 RBX: 00000000ffffffe0 RCX: 00000000f00008a0 [ 48.455404][ T4409] RDX: ffffffff867f0650 RSI: ffffffff866bb3e5 RDI: ffffffff86fb96f0 [ 48.463792][ T4409] RBP: ffff88810a010190 R08: 00000000d7fffe90 R09: 00000000f00008a0 [ 48.472469][ T4409] R10: 0000000000000020 R11: 00000000ffffffc0 R12: ffff88810a010150 [ 48.480990][ T4409] R13: 00000000c0000020 R14: ffff88810a01019c R15: ffff88810a010188 [ 48.489320][ T4409] FS: 00007f0582c876c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 48.498729][ T4409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.506221][ T4409] CR2: 0000000000000000 CR3: 000000011d5c0000 CR4: 00000000003506f0 [ 48.514730][ T4409] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.523201][ T4409] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 48.531482][ T4409] Call Trace: [ 48.535052][ T4409] [ 48.538360][ T4409] reg_set_min_max+0x1c8/0x260 [ 48.543650][ T4409] check_cond_jmp_op+0x13bd/0x1a80 [ 48.549051][ T4409] do_check+0x440c/0x9060 [ 48.553995][ T4409] ? do_check_common+0x1d2/0x1630 [ 48.559292][ T4409] do_check_common+0xd0f/0x1630 [ 48.564884][ T4409] bpf_check+0x2f6d/0xc7e0 [ 48.569872][ T4409] ? alloc_pages_bulk_noprof+0x4b7/0x520 [ 48.576171][ T4409] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 48.582390][ T4409] ? pcpu_block_update+0x377/0x3b0 [ 48.587723][ T4409] ? pcpu_block_refresh_hint+0x10b/0x170 [ 48.593720][ T4409] ? _find_next_zero_bit+0x64/0xa0 [ 48.603950][ T4409] ? pcpu_block_refresh_hint+0x157/0x170 [ 48.631542][ T4409] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 48.638397][ T4409] ? css_rstat_updated+0xbb/0x280 [ 48.644252][ T4409] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 48.650601][ T4409] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 48.656770][ T4409] ? selinux_bpf_prog_load+0x8b/0xd0 [ 48.662611][ T4409] ? __tsan_read4+0x117/0x190 [ 48.668071][ T4409] ? selinux_bpf_prog_load+0xac/0xd0 [ 48.674301][ T4409] ? security_bpf_prog_load+0x9e/0x140 [ 48.680238][ T4409] bpf_prog_load+0xf76/0x1140 [ 48.685361][ T4409] ? security_bpf+0x2b/0x90 [ 48.690221][ T4409] __sys_bpf+0x469/0x7b0 [ 48.694900][ T4409] __x64_sys_bpf+0x41/0x50 [ 48.699721][ T4409] x64_sys_call+0x28e1/0x3000 [ 48.705018][ T4409] do_syscall_64+0xc0/0x2a0 [ 48.709778][ T4409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.716192][ T4409] RIP: 0033:0x7f058422aeb9 [ 48.720900][ T4409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.741701][ T4409] RSP: 002b:00007f0582c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.750429][ T4409] RAX: ffffffffffffffda RBX: 00007f05844a5fa0 RCX: 00007f058422aeb9 [ 48.758921][ T4409] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 48.767274][ T4409] RBP: 00007f0584298c1f R08: 0000000000000000 R09: 0000000000000000 [ 48.776149][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.784500][ T4409] R13: 00007f05844a6038 R14: 00007f05844a5fa0 R15: 00007ffe89e75598 [ 48.793027][ T4409] [ 48.796302][ T4409] ---[ end trace 0000000000000000 ]--- [ 48.821946][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.836288][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.889340][ T4454] futex_wake_op: syz.2.253 tries to shift op by -3; fix this program [ 48.906323][ T4456] futex_wake_op: syz.3.252 tries to shift op by -3; fix this program [ 48.929298][ T4459] ieee802154 phy0 wpan0: encryption failed: -22 [ 48.982047][ T4454] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 49.057153][ T4456] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 49.095791][ T4472] tmpfs: Bad value for 'mpol' [ 49.179142][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 49.553349][ T4534] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 49.581831][ T4534] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff1b) [ 49.614356][ T4539] tmpfs: Bad value for 'mpol' [ 49.814650][ T4553] futex_wake_op: syz.4.273 tries to shift op by -3; fix this program [ 49.823825][ T4552] tmpfs: Bad value for 'mpol' [ 49.829239][ T4544] syz.2.272 (4544) used greatest stack depth: 8248 bytes left [ 49.876747][ T4553] vfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 49.913081][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 49.984916][ T4557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.071982][ T4567] futex_wake_op: syz.0.277 tries to shift op by -3; fix this program [ 50.122686][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.148721][ T4571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.189263][ T4571] set_capacity_and_notify: 8 callbacks suppressed [ 50.189288][ T4571] loop4: detected capacity change from 0 to 128 [ 50.210364][ T4580] loop3: detected capacity change from 0 to 136 [ 50.259009][ T4571] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 50.295219][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.302337][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.309715][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.316820][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.348317][ T4595] loop2: detected capacity change from 0 to 1024 [ 50.416617][ T4571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.442309][ T4595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.455805][ T4609] tmpfs: Bad value for 'mpol' [ 50.506575][ T4595] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.580032][ T4595] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.282: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.607123][ T4622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.288'. [ 50.621020][ T4595] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 50.626897][ T4622] tipc: Started in network mode [ 50.633462][ T4595] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.633462][ T4595] [ 50.638310][ T4622] tipc: Node identity , cluster identity 4711 [ 50.654110][ T4622] tipc: Failed to obtain node identity [ 50.659584][ T4622] tipc: Enabling of bearer rejected, failed to enable media [ 50.688908][ T4631] futex_wake_op: syz.0.290 tries to shift op by -3; fix this program [ 50.717834][ T4633] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.282: Freeing blocks not in datazone - block = 3, count = 3 [ 50.736813][ T4636] loop3: detected capacity change from 0 to 1024 [ 50.748056][ T4622] loop4: detected capacity change from 0 to 1024 [ 50.755007][ T4622] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 50.764723][ T4622] EXT4-fs (loop4): group descriptors corrupted! [ 50.766898][ T4636] EXT4-fs: Ignoring removed orlov option [ 50.800642][ T4633] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.282: Freeing blocks not in datazone - block = 0, count = 16 [ 50.833021][ T4636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.951846][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.992116][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.311422][ T4680] tmpfs: Bad value for 'mpol' [ 51.413419][ T23] ================================================================== [ 51.421532][ T23] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 51.429716][ T23] [ 51.432048][ T23] read-write to 0xffff888100481e78 of 8 bytes by task 3313 on cpu 0: [ 51.440113][ T23] __filemap_remove_folio+0x218/0x300 [ 51.445482][ T23] __remove_mapping+0x390/0x4c0 [ 51.450333][ T23] remove_mapping+0x22/0x90 [ 51.454829][ T23] mapping_try_invalidate+0x293/0x430 [ 51.460204][ T23] invalidate_mapping_pages+0x27/0x40 [ 51.465575][ T23] invalidate_bdev+0x58/0x70 [ 51.470162][ T23] ext4_put_super+0x624/0x7d0 [ 51.474827][ T23] generic_shutdown_super+0xe6/0x210 [ 51.480218][ T23] kill_block_super+0x2a/0x70 [ 51.484908][ T23] ext4_kill_sb+0x42/0x80 [ 51.489252][ T23] deactivate_locked_super+0x75/0x1c0 [ 51.494628][ T23] deactivate_super+0x97/0xa0 [ 51.499402][ T23] cleanup_mnt+0x2bb/0x330 [ 51.503824][ T23] __cleanup_mnt+0x19/0x20 [ 51.508232][ T23] task_work_run+0x130/0x1a0 [ 51.512820][ T23] exit_to_user_mode_loop+0x1f7/0x6f0 [ 51.518190][ T23] do_syscall_64+0x1d3/0x2a0 [ 51.522810][ T23] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.528693][ T23] [ 51.531001][ T23] read to 0xffff888100481e78 of 8 bytes by task 23 on cpu 1: [ 51.538440][ T23] nr_blockdev_pages+0x7e/0xd0 [ 51.543207][ T23] si_meminfo+0x87/0xd0 [ 51.547362][ T23] update_defense_level+0x47/0x5d0 [ 51.552466][ T23] defense_work_handler+0x1f/0x80 [ 51.557478][ T23] process_scheduled_works+0x4cd/0x9d0 [ 51.562927][ T23] worker_thread+0x6bc/0x8b0 [ 51.567512][ T23] kthread+0x488/0x510 [ 51.571570][ T23] ret_from_fork+0x148/0x280 [ 51.576153][ T23] ret_from_fork_asm+0x1a/0x30 [ 51.580908][ T23] [ 51.583229][ T23] value changed: 0x0000000000000007 -> 0x0000000000000004 [ 51.590318][ T23] [ 51.592654][ T23] Reported by Kernel Concurrency Sanitizer on: [ 51.598786][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.609969][ T23] Tainted: [W]=WARN [ 51.613755][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.623800][ T23] Workqueue: events_long defense_work_handler [ 51.629950][ T23] ================================================================== [ 51.652477][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 51.702896][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 51.702910][ T29] audit: type=1400 audit(1769443522.509:607): avc: denied { ioctl } for pid=4687 comm="syz.3.292" path="socket:[8155]" dev="sockfs" ino=8155 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1