last executing test programs: 52.704457939s ago: executing program 4 (id=178): socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, &(0x7f0000000140)=r0, 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000540)=@abs={0x1, 0x0, 0x7f}, 0x6e, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x96, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x1005a2, 0x0, 0x5, 0x6, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000000000020300000000"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) 52.622636093s ago: executing program 4 (id=181): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 52.029304978s ago: executing program 4 (id=191): quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) poll(&(0x7f0000000140)=[{r1, 0x10}], 0x1, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000340)='noload', 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xc4}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 51.075619963s ago: executing program 4 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x20080, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 50.772603351s ago: executing program 4 (id=219): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+rdma -cpuset'], 0xe) 50.60478055s ago: executing program 4 (id=223): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8005}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 50.580589532s ago: executing program 32 (id=223): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8005}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 39.101576369s ago: executing program 0 (id=382): lseek(0xffffffffffffffff, 0x2002, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x6000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffe", 0x3c}], 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6a, &(0x7f0000000000)={0x200e, 0x200f, 0xa, 0x1a, 0x200b, 0x0}) 38.854705833s ago: executing program 0 (id=387): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) 38.821116095s ago: executing program 0 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 38.621509206s ago: executing program 0 (id=389): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 37.857138351s ago: executing program 0 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x3f, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff4, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}}, 0x0) 37.448379045s ago: executing program 0 (id=412): quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) poll(&(0x7f0000000140)=[{r1, 0x10}], 0x1, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000340)='noload', 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="100000000000002505000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xc4}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 37.433527745s ago: executing program 33 (id=412): quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) poll(&(0x7f0000000140)=[{r1, 0x10}], 0x1, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000340)='noload', 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="100000000000002505000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xc4}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 31.14963509s ago: executing program 6 (id=536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f00000000c0)="9d", 0x1) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001000)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x4, 0xfffffffffffffffd, 0xb, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x56d92c88, 0x0, 0xfffffffffffffffc, 0x10000}, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000200)={0x5, 0xfffffffffffffffb, 0x7, 0xb50, 0xffffffffffffffff, 0xebd, 0x2cc, 0x2}, &(0x7f0000000300)={0xfffffffffffffbff, 0x0, 0x6b9, 0x9, 0x401, 0x1ff, 0x4, 0x8000000000000001}, &(0x7f0000000340)={0x4, 0x0, 0x3, 0x5, 0x5, 0x6a, 0x5}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x10000]}, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$eJzs3c9rHFUcAPDvbLL9rU2hFBWRgAcrtZsm8UcFD/WsxYLe65JsQ8mmW7Kb0sSC7cGepXgRC+JdPPdY/Ac8+DcUbKFICXrwEpnN7ObX5FezSbbdzwc2vDczu2++++a9vDdvlw2gZw2mfwoRr0fE90nE8YhIsn39ke0cXDxu/tmtsfSRxMLCl38nzePSfOu1Ws87mmVei4jfv4s4U1hbbn12brJcrVams/xQY+r6UH127uzVqfJEZaJybWR09PwHoyMff/Rhx2J999K/P37xsC/LnbiXxIU4luWWx7EDt5dnBmMwe0+KcWHVgcMdKKybJLlbf9vz82B7+rJ2Xoy0DzgefVmrB15+30bEAtCjkm23/z+Lu3MmwN5qjQNac/sOzYNfGE8/XZwArY2/f/HeSBxqzo2OzCcrZkbpfHegA+WnZTx4fP9e+ojO3YcA2NTtOxFxrr9/bf+XZP3f8zu3hWOWyli8g6j/g73zMB3/vJc3/im0xz+RM/45uqLtPr/Vr7G2/ReedKCYdaXjv09yx7/tRauBviz3SnPMV0yuXK1W0r7t1Yg4HcWDaX6j9Zzz848W1tu3fPz3oHD/Xlp+ayyYnceT/oMrnzNebpR3EvNyT+9EvJE7/k3a9Z/k1H/6flzaYhmnKvffytncHD6viP9xXvy7a+GXiHdy639pRSvZeH1yqHk9DLWuirX+uXvqj/XK3+/40/o/snH8A8ny9dr69sv4+dB/lWivJ6+0Iv7Y+vV/IPmqmT6QbbtZbjSmhyMOJJ+3txda20eWntvKt45P4z/99sb9X971fzgivt5i/HdP/vrmevu6of7Hc+u/PbtdVf/bTzz67Juf1it/8/jT+n+/mTqdbdlK/7fVE9zJewcAAAAAAADdphARxyIplNrpQqFUWvx8x8k4UqjW6o0zV2oz18aj+V3ZgSgWWivdx5d9HmI4WzFs5UdW5Ucj4kRE/NB3uJkvjdWq4/sdPAAAAAAAAAAAAAAAAAAAAHSJo+t8/z/1V99+nx2w6/zkN/SuTdt/J37pCehK/v9D79L+oXdp/9C7tH/oXdo/9C7tH3pXbvs/tPfnAew9//8BAAAAAAAAAAAAAAAAAAAAAAAAAACgoy5dvJg+Fuaf3RpL8+M3ZmcmazfOjlfqk6WpmbHSWG36emmiVpuoVkpjtanNXq9aq10fHomZm0ONSr0xVJ+duzxVm7nWuHx1qjxRuVwp7klUAAAAAAAAAAAAAAAAAAAA8GKpz85NlqvVyrTEy5xIImKXiujvigAlOp3Y754JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJb8HwAA//9jbDB1") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x4}, 0x220, 0x80010000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xdb1, 0x1}, 0x80010, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r2 = gettid() r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000580)={&(0x7f0000000480)=""/207, 0xcf}) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_pwait(r3, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)={[0x6]}, 0x8) io_setup(0x4, &(0x7f00000014c0)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r5, 0x560b, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'pim6reg\x00'}) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 29.942990291s ago: executing program 6 (id=557): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) 29.728255543s ago: executing program 6 (id=562): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 29.576200062s ago: executing program 6 (id=564): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x5, 0x12, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204, 0xff]}) write$UHID_INPUT2(r0, 0x0, 0x90) 29.218202393s ago: executing program 6 (id=570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f00000000c0)="9d", 0x1) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001000)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x4, 0xfffffffffffffffd, 0xb, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x56d92c88, 0x0, 0xfffffffffffffffc, 0x10000}, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000200)={0x5, 0xfffffffffffffffb, 0x7, 0xb50, 0xffffffffffffffff, 0xebd, 0x2cc, 0x2}, &(0x7f0000000300)={0xfffffffffffffbff, 0x0, 0x6b9, 0x9, 0x401, 0x1ff, 0x4, 0x8000000000000001}, &(0x7f0000000340)={0x4, 0x0, 0x3, 0x5, 0x5, 0x6a, 0x5}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x10000]}, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x4}, 0x220, 0x80010000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xdb1, 0x1}, 0x80010, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r2 = gettid() r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000580)={&(0x7f0000000480)=""/207, 0xcf}) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_pwait(r3, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)={[0x6]}, 0x8) io_setup(0x4, &(0x7f00000014c0)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r5, 0x560b, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'pim6reg\x00'}) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3b", 0x16, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 28.729755291s ago: executing program 6 (id=571): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 28.686106983s ago: executing program 34 (id=571): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 16.547656819s ago: executing program 7 (id=787): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000240)) 15.686690889s ago: executing program 7 (id=798): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xb3f3, 0x10000, 0xfffffffe, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 14.872751976s ago: executing program 7 (id=813): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) 14.840590688s ago: executing program 7 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 14.80450782s ago: executing program 7 (id=815): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x102, 0x0) 14.516602297s ago: executing program 7 (id=821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001100)={0x9, 0x2924, 0xffff, 0x9dff, 0x11, "0000000000000002"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 14.516337986s ago: executing program 35 (id=821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001100)={0x9, 0x2924, 0xffff, 0x9dff, 0x11, "0000000000000002"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.427012059s ago: executing program 2 (id=1052): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000000105050000000010000000000000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c9810a50a4912565a000100000000002c00018014000300ff0200000000001000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x61, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000001240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 2.369847153s ago: executing program 2 (id=1056): quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) poll(&(0x7f0000000140)=[{r1, 0x10}], 0x1, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000340)='noload', 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="100000000000002505000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xc4}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 1.950924657s ago: executing program 1 (id=1071): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r1) 1.847084083s ago: executing program 1 (id=1076): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000000105050000000010000000000000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c9810a50a4912565a000100000000002c00018014000300ff0200000000001000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x61, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000001240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 1.846521283s ago: executing program 1 (id=1077): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1ff}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 1.502181003s ago: executing program 2 (id=1089): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000000105050000000010000000000000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c9810a50a4912565a000100000000002c00018014000300ff0200000000001000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x61, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000001240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000"], 0xfc}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 1.396701079s ago: executing program 8 (id=1090): socket$netlink(0x10, 0x3, 0x8000000004) r0 = gettid() mlockall(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.386143809s ago: executing program 2 (id=1091): pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3be2b02884f95c63}]) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.075740918s ago: executing program 2 (id=1099): quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) poll(&(0x7f0000000140)=[{r1, 0x10}], 0x1, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000340)='noload', 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="100000000000002505000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xc4}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 940.529176ms ago: executing program 1 (id=1101): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x21, 0xffff1322, 0x0, 0x2006, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000600)=""/149, 0x95) 907.787447ms ago: executing program 3 (id=1103): io_uring_setup(0xf31, &(0x7f00000001c0)={0x0, 0x8dd3, 0x1, 0x3, 0x18a}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x2, 0xbffff010}]}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @remote, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 728.118678ms ago: executing program 3 (id=1105): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000000105050000000010000000000000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c9810a50a4912565a000100000000002c00018014000300ff0200000000001000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x61, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000001240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xfc}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 714.398759ms ago: executing program 3 (id=1107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 659.199482ms ago: executing program 3 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000940)=[{0x0, 0x1, {0x1, 0xff, 0x3}, {0x2}, 0xff, 0x2}, {0x1000, 0x7, {0x2, 0xf0, 0x2}, {0x0, 0xff}, 0xfe, 0xfe}, {0x1, 0x0, {0x0, 0x0, 0x4}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 635.458473ms ago: executing program 8 (id=1110): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010000000000000000000400d3db18ea3ece9bf915ffd65"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 606.180395ms ago: executing program 8 (id=1111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 584.789976ms ago: executing program 3 (id=1113): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 536.041209ms ago: executing program 5 (id=1114): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000000105050000000010000000000000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c9810a50a4912565a000100000000002c00018014000300ff0200000000001000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00', 0x3}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x61, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r8, &(0x7f0000001240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 535.703349ms ago: executing program 3 (id=1115): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) 531.944679ms ago: executing program 5 (id=1116): socket$inet_tcp(0x2, 0x1, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x85) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x10, r2, 0x0}]) 517.27975ms ago: executing program 8 (id=1117): r0 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x8880, 0x17e) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000180)='./bus\x00', 0x10000882) getdents64(r2, 0x0, 0x4f) 427.581625ms ago: executing program 8 (id=1118): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x87, @empty, 0x4e23, 0x4, 'fo\x00', 0x1, 0x6, 0x41}, 0x2c) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2029, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0xa, 0xc52) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xba8}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x9}, {0xf2, 0x7, 0x0, 0xc, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 427.150326ms ago: executing program 5 (id=1119): socket(0x200000000000011, 0x2, 0xd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="eb", 0x1, 0x4c001, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x145, 0x4) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) 426.704005ms ago: executing program 8 (id=1120): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7885a", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 356.299349ms ago: executing program 5 (id=1121): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfdfc}}}}}]}, 0x3c}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2020, 0x0) 334.319591ms ago: executing program 5 (id=1122): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000580), 0x12) 291.604723ms ago: executing program 5 (id=1123): quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) poll(&(0x7f0000000140)=[{r1, 0x10}], 0x1, 0x8000) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000340)='noload', 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d000000000000009500000000000000", @ANYRES32, @ANYBLOB="100000000000002505000000"], 0x0, 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xc4}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 76.530255ms ago: executing program 2 (id=1124): r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) getpid() msgctl$IPC_SET(r0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000440)={0x1}, 0x8, 0x0) 75.909606ms ago: executing program 1 (id=1125): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e24, 0x40068, @private0={0xfc, 0x0, '\x00', 0x1}, 0x64f}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x24000000}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000740)={r2, @in6={{0xa, 0x4e22, 0xe5, @mcast2, 0x80000001}}}, &(0x7f0000000800)=0x84) 0s ago: executing program 1 (id=1126): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x70) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40000, 0x1ff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x7) kernel console output (not intermixed with test programs): ing it up to get a fully working HSR network [ 29.970333][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.004673][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.014203][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.029833][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.095559][ T3320] veth0_vlan: entered promiscuous mode [ 30.124153][ T3320] veth1_vlan: entered promiscuous mode [ 30.159673][ T3320] veth0_macvtap: entered promiscuous mode [ 30.174484][ T3309] veth0_vlan: entered promiscuous mode [ 30.186075][ T3320] veth1_macvtap: entered promiscuous mode [ 30.199628][ T3309] veth1_vlan: entered promiscuous mode [ 30.207279][ T3315] veth0_vlan: entered promiscuous mode [ 30.228121][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.239620][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.246857][ T3310] veth0_vlan: entered promiscuous mode [ 30.252631][ T3314] veth0_vlan: entered promiscuous mode [ 30.265914][ T3315] veth1_vlan: entered promiscuous mode [ 30.273423][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.282435][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.293748][ T3310] veth1_vlan: entered promiscuous mode [ 30.300117][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.309024][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.318354][ T3309] veth0_macvtap: entered promiscuous mode [ 30.324940][ T3314] veth1_vlan: entered promiscuous mode [ 30.337288][ T3309] veth1_macvtap: entered promiscuous mode [ 30.370399][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.370926][ T3314] veth0_macvtap: entered promiscuous mode [ 30.392377][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.402503][ T3314] veth1_macvtap: entered promiscuous mode [ 30.413414][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.419935][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 30.419947][ T28] audit: type=1400 audit(1770818134.690:96): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.423708][ T3310] veth0_macvtap: entered promiscuous mode [ 30.458899][ T28] audit: type=1400 audit(1770818134.690:97): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.479571][ T3310] veth1_macvtap: entered promiscuous mode [ 30.486926][ T28] audit: type=1400 audit(1770818134.690:98): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.496760][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.522210][ T3315] veth0_macvtap: entered promiscuous mode [ 30.534587][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.547258][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.555728][ T3315] veth1_macvtap: entered promiscuous mode [ 30.565755][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.599298][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.610714][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.634017][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.644191][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.655966][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.672242][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.688262][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.704836][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.715215][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.753275][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.782490][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.818603][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.827418][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.836149][ T28] audit: type=1400 audit(1770818135.100:99): avc: denied { map_create } for pid=3487 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.836180][ T28] audit: type=1400 audit(1770818135.100:100): avc: denied { bpf } for pid=3487 comm="syz.4.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.922402][ T28] audit: type=1400 audit(1770818135.100:101): avc: denied { map_read map_write } for pid=3487 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.942429][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.978554][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.008937][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.036027][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.048715][ T28] audit: type=1400 audit(1770818135.130:102): avc: denied { create } for pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.077886][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.117691][ T28] audit: type=1400 audit(1770818135.130:103): avc: denied { write } for pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.154987][ T28] audit: type=1400 audit(1770818135.160:104): avc: denied { open } for pid=3493 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.201566][ T28] audit: type=1400 audit(1770818135.160:105): avc: denied { perfmon } for pid=3493 comm="syz.4.8" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.250020][ T3514] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.269645][ T3518] loop4: detected capacity change from 0 to 512 [ 31.320443][ T3522] xt_hashlimit: size too large, truncated to 1048576 [ 31.383289][ T3534] capability: warning: `syz.2.22' uses deprecated v2 capabilities in a way that may be insecure [ 31.897891][ T3550] bridge0: port 3(vlan2) entered blocking state [ 31.920104][ T3550] bridge0: port 3(vlan2) entered disabled state [ 31.944173][ T3550] vlan2: entered allmulticast mode [ 31.960997][ T3550] bridge0: entered allmulticast mode [ 31.980394][ T3550] vlan2: left allmulticast mode [ 31.988312][ T3550] bridge0: left allmulticast mode [ 32.023140][ T3554] loop2: detected capacity change from 0 to 8192 [ 32.280429][ T3570] pim6reg: entered allmulticast mode [ 32.303302][ T3570] team0: entered allmulticast mode [ 32.323242][ T3579] 9pnet_fd: p9_fd_create_unix (3579): problem connecting socket: ./bus: -111 [ 32.333305][ T3570] team_slave_0: entered allmulticast mode [ 32.339572][ T3570] team_slave_1: entered allmulticast mode [ 32.527544][ T3590] Zero length message leads to an empty skb [ 32.597915][ T3568] syz.4.36 (3568) used greatest stack depth: 9760 bytes left [ 33.145859][ T3634] mmap: syz.4.63 (3634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.329858][ T3663] loop1: detected capacity change from 0 to 512 [ 33.341541][ T3663] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.376392][ T3663] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 33.388335][ T3663] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.75: bg 0: block 104: invalid block bitmap [ 33.400776][ T3663] loop1: lost filesystem error report for type 5 error -117 [ 33.405922][ T3663] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 33.433856][ T3663] loop1: lost filesystem error report for type 5 error -117 [ 33.444083][ T3663] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.75: invalid indirect mapped block 1 (level 1) [ 33.499651][ T3663] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.499931][ T3663] EXT4-fs (loop1): 1 truncate cleaned up [ 33.527560][ T3663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.637723][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.708840][ C0] hrtimer: interrupt took 32156 ns [ 34.048214][ T3709] netlink: 68 bytes leftover after parsing attributes in process `syz.2.94'. [ 34.059137][ T3709] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 34.060032][ T3709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 34.373734][ T3747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.109'. [ 34.624446][ T3764] netlink: 68 bytes leftover after parsing attributes in process `syz.4.118'. [ 34.637167][ T3764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 34.648706][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 34.693203][ T3772] loop4: detected capacity change from 0 to 128 [ 34.700224][ T3772] EXT4-fs: Ignoring removed nobh option [ 34.714935][ T3772] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.739599][ T3768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.777747][ T3772] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.786108][ T3768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.882637][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.138585][ T3805] Invalid logical block size (3) [ 35.190315][ T3809] loop3: detected capacity change from 0 to 512 [ 35.209834][ T3809] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.133: inode has both inline data and extents flags [ 35.234602][ T3809] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.234720][ T3809] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.133: couldn't read orphan inode 15 (err -117) [ 35.234751][ T3809] loop3: lost filesystem error report for type 5 error -117 [ 35.237744][ T3809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.303864][ T3817] loop1: detected capacity change from 0 to 1024 [ 35.321541][ T3817] ======================================================= [ 35.321541][ T3817] WARNING: The mand mount option has been deprecated and [ 35.321541][ T3817] and is ignored by this kernel. Remove the mand [ 35.321541][ T3817] option from the mount to silence this warning. [ 35.321541][ T3817] ======================================================= [ 35.364934][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.401459][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.438512][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 35.438526][ T28] audit: type=1400 audit(1770818139.710:267): avc: denied { read } for pid=3812 comm="syz.1.136" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 35.438558][ T28] audit: type=1400 audit(1770818139.710:268): avc: denied { open } for pid=3812 comm="syz.1.136" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 35.441244][ T3825] syz.4.139 uses obsolete (PF_INET,SOCK_PACKET) [ 35.478272][ T28] audit: type=1400 audit(1770818139.740:269): avc: denied { read write } for pid=3812 comm="syz.1.136" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.478302][ T28] audit: type=1400 audit(1770818139.740:270): avc: denied { open } for pid=3812 comm="syz.1.136" path="/26/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.478380][ T28] audit: type=1400 audit(1770818139.740:271): avc: denied { map } for pid=3812 comm="syz.1.136" path="/26/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.601845][ T28] audit: type=1400 audit(1770818139.860:272): avc: denied { ioctl } for pid=3812 comm="syz.1.136" path="socket:[5507]" dev="sockfs" ino=5507 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.632107][ T28] audit: type=1400 audit(1770818139.900:273): avc: denied { setattr } for pid=3812 comm="syz.1.136" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.712905][ T28] audit: type=1400 audit(1770818139.980:274): avc: denied { create } for pid=3840 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.714170][ T28] audit: type=1400 audit(1770818139.980:275): avc: denied { connect } for pid=3840 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.714703][ T28] audit: type=1400 audit(1770818139.980:276): avc: denied { setopt } for pid=3840 comm="syz.4.144" laddr=172.20.20.170 lport=53362 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.740391][ T3843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.916349][ T3854] loop4: detected capacity change from 0 to 1024 [ 35.929517][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.115498][ T9] kernel read not supported for file /newroot/25 (pid: 9 comm: kworker/0:0) [ 36.211596][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.393599][ T3882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 36.404135][ T3882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 36.413857][ T3882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 36.423448][ T3882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 36.427476][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.550189][ T3892] loop1: detected capacity change from 0 to 8192 [ 36.938631][ T3899] bond1 (unregistering): Released all slaves [ 37.201486][ T3911] Illegal XDP return value 4294965632 on prog (id 33) dev syz_tun, expect packet loss! [ 37.350925][ T3922] loop3: detected capacity change from 0 to 1024 [ 37.420290][ T3922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.739094][ T3948] loop2: detected capacity change from 0 to 128 [ 37.747592][ T3948] EXT4-fs: Ignoring removed nobh option [ 37.771802][ T3948] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.771922][ T3948] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.824082][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.257505][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.294182][ T3952] bond1 (unregistering): Released all slaves [ 38.740564][ T4020] loop2: detected capacity change from 0 to 512 [ 38.770569][ T4020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.878605][ T4020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.891500][ T4020] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.919624][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.202494][ T4033] loop3: detected capacity change from 0 to 1024 [ 39.302724][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.441424][ T4023] syz.1.211 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 39.441463][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.1.211 Not tainted syzkaller #0 PREEMPT(full) [ 39.441495][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 39.441620][ T4023] Call Trace: [ 39.441630][ T4023] [ 39.441638][ T4023] __dump_stack+0x1d/0x30 [ 39.441666][ T4023] dump_stack_lvl+0x95/0xd0 [ 39.441696][ T4023] dump_stack+0x15/0x1b [ 39.441714][ T4023] dump_header+0x80/0x240 [ 39.441780][ T4023] oom_kill_process+0x295/0x350 [ 39.441865][ T4023] out_of_memory+0x97d/0xb80 [ 39.441917][ T4023] try_charge_memcg+0x62e/0xa10 [ 39.441946][ T4023] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 39.442033][ T4023] __read_swap_cache_async+0x17b/0x2d0 [ 39.442055][ T4023] swap_cluster_readahead+0x262/0x3c0 [ 39.442082][ T4023] swapin_readahead+0xde/0x840 [ 39.442102][ T4023] ? __rcu_read_unlock+0x33/0x70 [ 39.442135][ T4023] ? __rcu_read_unlock+0x4e/0x70 [ 39.442164][ T4023] ? swap_cache_get_folio+0x26f/0x280 [ 39.442261][ T4023] do_swap_page+0x59b/0x2a50 [ 39.442283][ T4023] ? __rcu_read_lock+0x36/0x50 [ 39.442315][ T4023] ? __pfx_default_wake_function+0x10/0x10 [ 39.442442][ T4023] handle_mm_fault+0xb40/0x3030 [ 39.442463][ T4023] ? vma_start_read+0x1c7/0x2c0 [ 39.442499][ T4023] do_user_addr_fault+0x62f/0x1050 [ 39.442604][ T4023] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 39.442633][ T4023] ? irqentry_exit+0x3c/0x520 [ 39.442656][ T4023] exc_page_fault+0x62/0xa0 [ 39.442677][ T4023] asm_exc_page_fault+0x26/0x30 [ 39.442733][ T4023] RIP: 0033:0x7f3224319a0c [ 39.442750][ T4023] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 39.442770][ T4023] RSP: 002b:00007ffee71de860 EFLAGS: 00010202 [ 39.442834][ T4023] RAX: 0000000000000000 RBX: 00007f32246c6090 RCX: 0000555582fe7808 [ 39.442847][ T4023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.442860][ T4023] RBP: 00007f32246c7da0 R08: 0000000000000000 R09: 0000000000000000 [ 39.442874][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000009b08 [ 39.442888][ T4023] R13: 00007f32246c5fac R14: 00000000000097fd R15: 00007ffee71de960 [ 39.442909][ T4023] [ 39.442916][ T4023] memory: usage 307200kB, limit 307200kB, failcnt 819 [ 39.442932][ T4023] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 39.442946][ T4023] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 39.442959][ T4023] Memory cgroup stats for /syz1: [ 39.443148][ T4023] cache 0 [ 39.443156][ T4023] rss 0 [ 39.443162][ T4023] shmem 0 [ 39.443168][ T4023] mapped_file 77824 [ 39.443174][ T4023] dirty 0 [ 39.443239][ T4023] writeback 0 [ 39.443247][ T4023] workingset_refault_anon 18 [ 39.443256][ T4023] workingset_refault_file 90 [ 39.443265][ T4023] swap 364544 [ 39.443272][ T4023] swapcached 4096 [ 39.443279][ T4023] pgpgin 23290 [ 39.443285][ T4023] pgpgout 23289 [ 39.443291][ T4023] pgfault 22475 [ 39.443297][ T4023] pgmajfault 18 [ 39.443303][ T4023] inactive_anon 0 [ 39.443347][ T4023] active_anon 0 [ 39.443355][ T4023] inactive_file 0 [ 39.443363][ T4023] active_file 0 [ 39.443398][ T4023] unevictable 0 [ 39.443406][ T4023] hierarchical_memory_limit 314572800 [ 39.443416][ T4023] hierarchical_memsw_limit 9223372036854771712 [ 39.443425][ T4023] total_cache 0 [ 39.443431][ T4023] total_rss 0 [ 39.443437][ T4023] total_shmem 0 [ 39.443444][ T4023] total_mapped_file 77824 [ 39.443450][ T4023] total_dirty 0 [ 39.443475][ T4023] total_writeback 0 [ 39.443489][ T4023] total_workingset_refault_anon 18 [ 39.443498][ T4023] total_workingset_refault_file 90 [ 39.443507][ T4023] total_swap 364544 [ 39.443515][ T4023] total_swapcached 4096 [ 39.443561][ T4023] total_pgpgin 23290 [ 39.443568][ T4023] total_pgpgout 23289 [ 39.443575][ T4023] total_pgfault 22475 [ 39.443583][ T4023] total_pgmajfault 18 [ 39.443592][ T4023] total_inactive_anon 0 [ 39.443601][ T4023] total_active_anon 0 [ 39.443609][ T4023] total_inactive_file 0 [ 39.443662][ T4023] total_active_file 0 [ 39.443669][ T4023] total_unevictable 0 [ 39.443678][ T4023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.211,pid=4023,uid=0 [ 39.443799][ T4023] Memory cgroup out of memory: Killed process 4023 (syz.1.211) total-vm:96072kB, anon-rss:1220kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 39.493801][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.501981][ T4024] syz.1.211 (4024) used greatest stack depth: 9352 bytes left [ 39.541955][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.556270][ T4054] ªªªªªª: renamed from vlan0 (while UP) [ 39.623666][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.655340][ T4065] loop0: detected capacity change from 0 to 2048 [ 39.676402][ T4065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.828536][ T4079] __nla_validate_parse: 14 callbacks suppressed [ 39.828552][ T4079] netlink: 68 bytes leftover after parsing attributes in process `syz.1.230'. [ 39.870894][ T4065] EXT4-fs (loop0): shut down requested (1) [ 39.907002][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 40.020772][ T4082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 40.028818][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.195138][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.340393][ T40] bridge_slave_1: left allmulticast mode [ 40.352371][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.367904][ T40] bridge_slave_1: left promiscuous mode [ 40.378194][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.410071][ T4104] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.451367][ T40] bridge_slave_0: left allmulticast mode [ 40.460021][ T40] bridge_slave_0: left promiscuous mode [ 40.477335][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.490807][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 40.490822][ T28] audit: type=1326 audit(1770818144.760:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.528437][ T28] audit: type=1326 audit(1770818144.790:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.554896][ T28] audit: type=1326 audit(1770818144.790:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.578476][ T28] audit: type=1326 audit(1770818144.790:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.608145][ T28] audit: type=1326 audit(1770818144.790:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.631785][ T28] audit: type=1326 audit(1770818144.790:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.656147][ T28] audit: type=1326 audit(1770818144.790:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.679900][ T28] audit: type=1326 audit(1770818144.790:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.711896][ T28] audit: type=1326 audit(1770818144.980:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 40.743112][ T4129] loop3: detected capacity change from 0 to 1024 [ 40.769804][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.807686][ T28] audit: type=1400 audit(1770818145.070:311): avc: denied { module_request } for pid=4130 comm="syz.0.246" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 40.929994][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.939526][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.940625][ T40] bond0 (unregistering): Released all slaves [ 41.002480][ T40] hsr_slave_0: left promiscuous mode [ 41.008601][ T40] hsr_slave_1: left promiscuous mode [ 41.009022][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.009038][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.014771][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.014788][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.025544][ T40] veth1_macvtap: left promiscuous mode [ 41.095599][ T40] veth0_macvtap: left promiscuous mode [ 41.095697][ T40] veth1_vlan: left promiscuous mode [ 41.095732][ T40] veth0_vlan: left promiscuous mode [ 41.207630][ T4162] loop2: detected capacity change from 0 to 512 [ 41.224262][ T4162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.258254][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.284847][ T40] team0 (unregistering): Port device team_slave_1 removed [ 41.294767][ T40] team0 (unregistering): Port device team_slave_0 removed [ 41.371350][ T4175] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.252'. [ 41.471034][ T4060] chnl_net:caif_netlink_parms(): no params data found [ 41.532045][ T4194] loop0: detected capacity change from 0 to 512 [ 41.575904][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.587607][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.595129][ T4060] bridge_slave_0: entered allmulticast mode [ 41.601879][ T4060] bridge_slave_0: entered promiscuous mode [ 41.608980][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.616150][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.623797][ T4060] bridge_slave_1: entered allmulticast mode [ 41.631064][ T4060] bridge_slave_1: entered promiscuous mode [ 41.711110][ T4060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.732696][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.737506][ T4060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.795248][ T4060] team0: Port device team_slave_0 added [ 41.802814][ T4060] team0: Port device team_slave_1 added [ 41.831810][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.843829][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.886785][ T4060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.899036][ T4060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.906058][ T4060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.934059][ T4060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.980487][ T4060] hsr_slave_0: entered promiscuous mode [ 41.991831][ T4060] hsr_slave_1: entered promiscuous mode [ 41.997684][ T4060] debugfs: 'hsr0' already exists in 'hsr' [ 42.003507][ T4060] Cannot create hsr debugfs directory [ 42.122195][ T4060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.140826][ T4060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.190157][ T4060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.200212][ T4060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.227871][ T4060] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.234956][ T4060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.242301][ T4060] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.249381][ T4060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.323963][ T4060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.434133][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.458520][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.495744][ T4060] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.541292][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.548444][ T1609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.566199][ T4242] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.585832][ T1609] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.592981][ T1609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.638226][ T4242] SELinux: failed to load policy [ 42.788242][ T4060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.893388][ T4278] loop0: detected capacity change from 0 to 1024 [ 42.959098][ T4278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.056567][ T4060] veth0_vlan: entered promiscuous mode [ 43.059654][ T4060] veth1_vlan: entered promiscuous mode [ 43.103038][ T4291] netlink: 68 bytes leftover after parsing attributes in process `syz.2.272'. [ 43.114874][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 43.138171][ T4060] veth0_macvtap: entered promiscuous mode [ 43.140051][ T4060] veth1_macvtap: entered promiscuous mode [ 43.145699][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.151188][ T4060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.159911][ T1609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.160026][ T1609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.160498][ T1609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.160534][ T1609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.234624][ T4301] pim6reg: entered allmulticast mode [ 43.236536][ T4301] team0: entered allmulticast mode [ 43.236554][ T4301] team_slave_0: entered allmulticast mode [ 43.236571][ T4301] team_slave_1: entered allmulticast mode [ 43.348358][ T4316] 9pnet_fd: p9_fd_create_unix (4316): problem connecting socket: ./bus: -111 [ 45.329294][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.421755][ T4331] loop1: detected capacity change from 0 to 128 [ 45.457282][ T4331] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.513613][ T4331] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.525597][ T28] kauditd_printk_skb: 909 callbacks suppressed [ 45.525611][ T28] audit: type=1326 audit(1770818149.790:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 45.532245][ T4339] loop5: detected capacity change from 0 to 256 [ 45.561945][ T4339] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.573975][ T28] audit: type=1326 audit(1770818149.790:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 45.597330][ T28] audit: type=1326 audit(1770818149.790:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 45.621701][ T28] audit: type=1326 audit(1770818149.790:1224): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 45.621953][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.781085][ T28] audit: type=1326 audit(1770818149.790:1225): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d8dbf79 code=0x7ffc0000 [ 45.971671][ T28] audit: type=1400 audit(1770818149.850:1226): avc: denied { append } for pid=4330 comm="syz.1.284" path="/56/file1/memory.events" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.038092][ T28] audit: type=1400 audit(1770818149.850:1227): avc: denied { map } for pid=4330 comm="syz.1.284" path="/56/file1/memory.events" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.100946][ T4373] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 46.138132][ T4377] loop1: detected capacity change from 0 to 512 [ 46.153953][ T28] audit: type=1400 audit(1770818149.920:1228): avc: denied { watch watch_reads } for pid=4338 comm="syz.5.286" path="/4/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 46.307085][ T28] audit: type=1326 audit(1770818150.190:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322444bf79 code=0x7ffc0000 [ 46.332470][ T28] audit: type=1326 audit(1770818150.190:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322444bf79 code=0x7ffc0000 [ 46.370045][ T4388] loop1: detected capacity change from 0 to 1024 [ 46.397275][ T4388] EXT4-fs: inline encryption not supported [ 46.447220][ T4388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.487775][ T4396] tipc: Enabling of bearer rejected, failed to enable media [ 46.521002][ T4388] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 46.535855][ T4388] EXT4-fs (loop1): Remounting filesystem read-only [ 46.590267][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.667034][ T4387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.309'. [ 46.694955][ T4387] bond1 (unregistering): Released all slaves [ 46.720305][ T4412] loop2: detected capacity change from 0 to 1024 [ 46.729391][ T4412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.960107][ T4419] netlink: 68 bytes leftover after parsing attributes in process `syz.5.317'. [ 46.960499][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.317'. [ 46.987246][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.317'. [ 48.230997][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.329001][ T4480] loop1: detected capacity change from 0 to 1764 [ 48.389288][ T4482] netlink: 68 bytes leftover after parsing attributes in process `syz.3.343'. [ 48.411133][ T4482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'. [ 48.411174][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 48.412980][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 48.481993][ T4496] loop2: detected capacity change from 0 to 1024 [ 48.514050][ T4496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.644806][ T4513] netlink: 56 bytes leftover after parsing attributes in process `syz.3.352'. [ 48.818869][ T4525] Invalid logical block size (3) [ 48.882066][ T4527] netlink: 68 bytes leftover after parsing attributes in process `syz.5.359'. [ 49.364129][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.439340][ T4559] loop2: detected capacity change from 0 to 1024 [ 49.446050][ T4559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.464319][ T4559] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 49.475697][ T4559] System zones: 0-1, 3-36 [ 49.481733][ T4559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.594074][ T4565] loop3: detected capacity change from 0 to 1024 [ 49.631147][ T4565] EXT4-fs: inline encryption not supported [ 49.678995][ T4565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.756665][ T4565] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 49.797134][ T4565] EXT4-fs (loop3): Remounting filesystem read-only [ 50.698347][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.771087][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.795247][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 50.795261][ T28] audit: type=1400 audit(1770818155.060:1290): avc: denied { mounton } for pid=4578 comm="syz.5.377" path="/" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 50.927662][ T4586] loop3: detected capacity change from 0 to 1024 [ 50.989912][ T28] audit: type=1400 audit(1770818155.250:1291): avc: denied { ioctl } for pid=4587 comm="syz.1.380" path="socket:[8747]" dev="sockfs" ino=8747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.990217][ T28] audit: type=1400 audit(1770818155.260:1292): avc: denied { connect } for pid=4587 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.990405][ T28] audit: type=1400 audit(1770818155.260:1293): avc: denied { write } for pid=4587 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.108474][ T4586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.481750][ T4619] loop0: detected capacity change from 0 to 512 [ 51.708545][ T4619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.735241][ T4619] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.756051][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.808066][ T28] audit: type=1400 audit(1770818156.060:1294): avc: denied { mounton } for pid=4618 comm="syz.0.389" path="/78/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.831069][ T4619] loop0: detected capacity change from 512 to 64 [ 51.838778][ T4619] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 51.846868][ T4619] EXT4-fs error (device loop0): ext4_write_dquot:6971: comm syz.0.389: Failed to commit dquot type 0 [ 51.863537][ T4637] __nla_validate_parse: 9 callbacks suppressed [ 51.863551][ T4637] netlink: 68 bytes leftover after parsing attributes in process `syz.2.396'. [ 51.879387][ T4619] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 51.899509][ T4619] EXT4-fs error (device loop0): ext4_write_dquot:6971: comm syz.0.389: Failed to commit dquot type 1 [ 51.920555][ T28] audit: type=1326 audit(1770818156.180:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f43bbf79 code=0x7ffc0000 [ 51.928868][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 51.949068][ T28] audit: type=1326 audit(1770818156.180:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f43bbf79 code=0x7ffc0000 [ 51.985136][ T4619] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory [ 51.985851][ T28] audit: type=1326 audit(1770818156.180:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f73f43bbf79 code=0x7ffc0000 [ 52.105629][ T4619] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #18: comm syz.0.389: mark_inode_dirty error [ 52.110965][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 52.148202][ T4619] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory [ 52.168775][ T4619] EXT4-fs error (device loop0): ext4_truncate:4635: inode #18: comm syz.0.389: mark_inode_dirty error [ 52.225668][ T3314] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory [ 52.234976][ T3314] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 52.264145][ T4661] loop3: detected capacity change from 0 to 4096 [ 52.278752][ T4661] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 52.298777][ T4661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.349672][ T4669] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.407806][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.480642][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.501271][ T2163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.521736][ T4622] kmmpd-loop0: attempt to access beyond end of device [ 52.521736][ T4622] loop0: rw=8402945, sector=64, nr_sectors = 8 limit=64 [ 52.568850][ T4675] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 52.577983][ T4622] Buffer I/O error on dev loop0, logical block 8, lost sync page write [ 52.651136][ T2163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.691396][ T4673] loop2: detected capacity change from 0 to 32768 [ 52.745403][ T2163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.812829][ T4711] loop3: detected capacity change from 0 to 1024 [ 52.831684][ T4711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.885346][ T4711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 52.896645][ T4711] System zones: 0-1, 3-36 [ 52.902090][ T4711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.921355][ T2163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.132272][ T2163] bridge_slave_1: left allmulticast mode [ 53.148448][ T2163] bridge_slave_1: left promiscuous mode [ 53.154376][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.158085][ T2163] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.182091][ T2163] bridge_slave_0: left allmulticast mode [ 53.187778][ T2163] bridge_slave_0: left promiscuous mode [ 53.207311][ T2163] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.385925][ T4769] loop2: detected capacity change from 0 to 512 [ 53.395864][ T4769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.411833][ T4769] EXT4-fs (loop2): 1 truncate cleaned up [ 53.417856][ T4769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.452273][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.471117][ T2163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.482508][ T2163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.497902][ T2163] bond0 (unregistering): Released all slaves [ 53.521383][ T4772] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 53.578679][ T2163] hsr_slave_0: left promiscuous mode [ 53.596820][ T2163] hsr_slave_1: left promiscuous mode [ 53.602933][ T2163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.610502][ T2163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.617948][ T2163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.625809][ T2163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.637304][ T2163] veth1_macvtap: left promiscuous mode [ 53.642929][ T2163] veth0_macvtap: left promiscuous mode [ 53.674687][ T2163] veth1_vlan: left promiscuous mode [ 53.680212][ T2163] veth0_vlan: left promiscuous mode [ 53.751326][ T2163] team0 (unregistering): Port device team_slave_1 removed [ 53.761144][ T2163] team0 (unregistering): Port device team_slave_0 removed [ 53.796356][ T4697] chnl_net:caif_netlink_parms(): no params data found [ 53.897828][ T4809] netlink: 68 bytes leftover after parsing attributes in process `syz.2.438'. [ 53.918773][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.925759][ T4809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 53.927254][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 53.927823][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.927877][ T4697] bridge_slave_0: entered allmulticast mode [ 53.928494][ T4697] bridge_slave_0: entered promiscuous mode [ 53.929456][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.929487][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.025818][ T4826] netlink: 104 bytes leftover after parsing attributes in process `syz.2.441'. [ 54.078150][ T4816] loop5: detected capacity change from 0 to 1024 [ 54.098601][ T4697] bridge_slave_1: entered allmulticast mode [ 54.099255][ T4697] bridge_slave_1: entered promiscuous mode [ 54.121941][ T4697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.152217][ T4816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.159329][ T4697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.175294][ T4697] team0: Port device team_slave_0 added [ 54.176376][ T4697] team0: Port device team_slave_1 added [ 54.204160][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.204174][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.204201][ T4697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.206392][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.206406][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.206459][ T4697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.283205][ T4697] hsr_slave_0: entered promiscuous mode [ 54.283670][ T4697] hsr_slave_1: entered promiscuous mode [ 54.287126][ T4697] debugfs: 'hsr0' already exists in 'hsr' [ 54.287149][ T4697] Cannot create hsr debugfs directory [ 54.499493][ T4697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.538277][ T4697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.562337][ T4697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.566782][ T4697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.625918][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.625965][ T4697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.626034][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.626067][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.688807][ T4697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.694529][ T4697] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.776317][ T4060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.867159][ T4697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.184587][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 55.268049][ T4697] veth0_vlan: entered promiscuous mode [ 55.286858][ T4697] veth1_vlan: entered promiscuous mode [ 55.348345][ T4697] veth0_macvtap: entered promiscuous mode [ 55.357028][ T4964] Ÿë: port 1(veth0_to_team) entered blocking state [ 55.373409][ T4964] Ÿë: port 1(veth0_to_team) entered disabled state [ 55.419534][ T4964] veth0_to_team: entered allmulticast mode [ 55.448514][ T4964] veth0_to_team: entered promiscuous mode [ 55.469470][ T4697] veth1_macvtap: entered promiscuous mode [ 55.488903][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.517436][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.533790][ T2544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.543318][ T2544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.560647][ T2544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.570132][ T2544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.619645][ T4999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.742236][ T5018] netlink: 'syz.6.413': attribute type 4 has an invalid length. [ 55.772981][ T5016] loop5: detected capacity change from 0 to 164 [ 55.847655][ T5028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.467'. [ 55.910417][ T5026] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 55.921023][ T5026] SELinux: failed to load policy [ 56.073364][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.470'. [ 56.280386][ T5080] loop2: detected capacity change from 0 to 128 [ 56.306695][ T5080] syz.2.478: attempt to access beyond end of device [ 56.306695][ T5080] loop2: rw=2049, sector=145, nr_sectors = 57 limit=128 [ 56.465152][ T5108] loop2: detected capacity change from 0 to 1024 [ 56.548886][ T5108] EXT4-fs: Ignoring removed oldalloc option [ 56.549322][ T5108] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 56.566588][ T5108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.610279][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 56.610303][ T28] audit: type=1400 audit(1770818160.880:1356): avc: denied { ioctl } for pid=5106 comm="syz.2.483" path="/109/file1/file1" dev="loop2" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.617863][ T5108] EXT4-fs (loop2): shut down requested (2) [ 56.703429][ T5133] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 56.712434][ T5133] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 56.721660][ T5133] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 56.730669][ T5133] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 56.739550][ T5133] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 56.748681][ T5133] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 56.757878][ T28] audit: type=1400 audit(1770818161.020:1357): avc: denied { remove_name } for pid=5106 comm="syz.2.483" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.788902][ T28] audit: type=1400 audit(1770818161.020:1358): avc: denied { rename } for pid=5106 comm="syz.2.483" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.819319][ T28] audit: type=1400 audit(1770818161.020:1359): avc: denied { add_name } for pid=5106 comm="syz.2.483" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.107378][ T5194] loop6: detected capacity change from 0 to 256 [ 57.119278][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.148294][ T5194] FAT-fs (loop6): Directory bread(block 64) failed [ 57.162716][ T28] audit: type=1326 audit(1770818161.430:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96f08bf79 code=0x7ffc0000 [ 57.167026][ T5194] FAT-fs (loop6): Directory bread(block 65) failed [ 57.187478][ T28] audit: type=1326 audit(1770818161.460:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fd96f08bf79 code=0x7ffc0000 [ 57.192958][ T5194] FAT-fs (loop6): Directory bread(block 66) failed [ 57.224511][ T5194] FAT-fs (loop6): Directory bread(block 67) failed [ 57.231628][ T5194] FAT-fs (loop6): Directory bread(block 68) failed [ 57.240349][ T5194] FAT-fs (loop6): Directory bread(block 69) failed [ 57.246895][ T5194] FAT-fs (loop6): Directory bread(block 70) failed [ 57.253942][ T5194] FAT-fs (loop6): Directory bread(block 71) failed [ 57.260682][ T5194] FAT-fs (loop6): Directory bread(block 72) failed [ 57.267354][ T5194] FAT-fs (loop6): Directory bread(block 73) failed [ 57.274144][ T28] audit: type=1326 audit(1770818161.460:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96f08bf79 code=0x7ffc0000 [ 57.305675][ T28] audit: type=1326 audit(1770818161.460:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96f08bf79 code=0x7ffc0000 [ 57.361449][ T5205] tls_set_device_offload: netdev not found [ 57.399410][ T5209] __nla_validate_parse: 2 callbacks suppressed [ 57.399488][ T5209] netlink: 27 bytes leftover after parsing attributes in process `syz.6.493'. [ 57.646414][ T5216] netlink: 168 bytes leftover after parsing attributes in process `syz.5.496'. [ 57.656030][ T28] audit: type=1400 audit(1770818161.910:1364): avc: denied { setopt } for pid=5214 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.758151][ T28] audit: type=1400 audit(1770818162.020:1365): avc: denied { rename } for pid=5227 comm="syz.5.501" name="file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.817843][ T5234] loop2: detected capacity change from 0 to 7 [ 57.919829][ T5238] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 57.928434][ T5238] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 57.941108][ T5238] veth0_to_bridge: entered allmulticast mode [ 57.974616][ T5238] veth0_to_bridge: entered promiscuous mode [ 58.076913][ T5259] netlink: 168 bytes leftover after parsing attributes in process `syz.3.512'. [ 58.122021][ T9] Process accounting resumed [ 58.208981][ T5265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.515'. [ 58.218443][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 58.242848][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 58.475882][ T5286] loop5: detected capacity change from 0 to 1024 [ 58.512040][ T5286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.526594][ T5292] netlink: 168 bytes leftover after parsing attributes in process `syz.1.524'. [ 58.563314][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.525'. [ 58.796203][ T5312] loop6: detected capacity change from 0 to 1764 [ 58.803808][ T5315] syz_tun: entered allmulticast mode [ 58.828889][ T5314] syz_tun: left allmulticast mode [ 59.001947][ T5323] loop6: detected capacity change from 0 to 1024 [ 59.020198][ T5323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.179266][ T5328] capability: warning: `syz.2.537' uses 32-bit capabilities (legacy support in use) [ 59.318074][ T4060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.473046][ T5347] loop5: detected capacity change from 0 to 128 [ 59.539295][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539295][ T5348] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 59.539408][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539408][ T5348] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 59.539487][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539487][ T5348] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 59.539567][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539567][ T5348] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 59.539601][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539601][ T5348] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 59.539731][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539731][ T5348] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 59.539785][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539785][ T5348] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 59.539860][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539860][ T5348] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 59.539899][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539899][ T5348] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 59.539938][ T5348] syz.5.541: attempt to access beyond end of device [ 59.539938][ T5348] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 59.809924][ T5360] netlink: 68 bytes leftover after parsing attributes in process `syz.3.547'. [ 59.810224][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 59.815394][ T5365] loop1: detected capacity change from 0 to 1024 [ 59.831626][ T5365] EXT4-fs: Ignoring removed oldalloc option [ 59.835268][ T5365] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 59.839820][ T5365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.914741][ T5365] EXT4-fs (loop1): shut down requested (2) [ 59.915042][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.915068][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.915128][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 59.915179][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.915199][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 59.915218][ T5365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 59.968126][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.014304][ T5379] loop3: detected capacity change from 0 to 1024 [ 60.030479][ T5379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.217609][ T5387] loop5: detected capacity change from 0 to 2048 [ 60.226424][ T4697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.236325][ T5391] program syz.2.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.237907][ T5384] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 60.256560][ T5387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.268971][ T5384] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 60.297122][ T5384] veth0_to_bridge: entered allmulticast mode [ 60.308454][ T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 60.332946][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.334943][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.358811][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.358811][ T12] [ 60.368591][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 60.374636][ T12] EXT4-fs (loop5): Free/Dirty block details [ 60.377760][ T5384] veth0_to_bridge: entered promiscuous mode [ 60.380557][ T12] EXT4-fs (loop5): free_blocks=2415919504 [ 60.380575][ T12] EXT4-fs (loop5): dirty_blocks=16 [ 60.380656][ T12] EXT4-fs (loop5): Block reservation details [ 60.380668][ T12] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 60.410136][ T4060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.543715][ T5411] loop1: detected capacity change from 0 to 512 [ 60.558403][ T5413] loop6: detected capacity change from 0 to 512 [ 60.578029][ T5411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.598482][ T5411] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.639062][ T5413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.677153][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.689616][ T5422] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 60.708061][ T5422] SELinux: failed to load policy [ 60.729237][ T5413] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.810306][ T4697] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 60.810526][ T4697] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 60.868575][ T5429] loop1: detected capacity change from 0 to 1024 [ 60.880076][ T5429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.189202][ T5427] netlink: 'syz.5.560': attribute type 1 has an invalid length. [ 61.291630][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.308240][ T4697] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.409416][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.672162][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.710945][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.773228][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.063204][ T5553] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.137173][ T5553] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.207067][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 62.207096][ T28] audit: type=1400 audit(1770818166.470:1513): avc: denied { read } for pid=3037 comm="dhcpcd" name="n33" dev="tmpfs" ino=3542 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.239487][ T28] audit: type=1400 audit(1770818166.510:1514): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=3542 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.239527][ T28] audit: type=1400 audit(1770818166.510:1515): avc: denied { getattr } for pid=3037 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=3542 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.246590][ T40] bridge_slave_1: left allmulticast mode [ 62.246608][ T40] bridge_slave_1: left promiscuous mode [ 62.246739][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.324067][ T40] bridge_slave_0: left allmulticast mode [ 62.324085][ T40] bridge_slave_0: left promiscuous mode [ 62.324189][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.442386][ T5601] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 62.450754][ T5601] FAT-fs (loop3): Filesystem has been set read-only [ 62.457354][ T5601] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 62.492924][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.569850][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.721900][ T40] bond0 (unregistering): Released all slaves [ 62.793068][ T5615] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 62.799607][ T5615] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 62.817562][ T40] hsr_slave_0: left promiscuous mode [ 62.825551][ T40] hsr_slave_1: left promiscuous mode [ 62.838457][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.868382][ T5615] vhci_hcd vhci_hcd.0: Device attached [ 62.880867][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.886433][ T5617] vhci_hcd: connection closed [ 62.891590][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.907492][ T5520] vhci_hcd vhci_hcd.5: stop threads [ 62.912899][ T5520] vhci_hcd vhci_hcd.5: release socket [ 62.918540][ T5520] vhci_hcd vhci_hcd.5: disconnect device [ 62.924170][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.939981][ T40] veth1_macvtap: left promiscuous mode [ 62.945507][ T40] veth0_macvtap: left promiscuous mode [ 62.953158][ T28] audit: type=1400 audit(1770818167.210:1516): avc: denied { create } for pid=5616 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.954047][ T40] veth1_vlan: left promiscuous mode [ 62.976207][ T28] audit: type=1400 audit(1770818167.230:1517): avc: denied { write } for pid=5616 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=3629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.009688][ T28] audit: type=1400 audit(1770818167.230:1518): avc: denied { append } for pid=5616 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=3629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.009875][ T40] veth0_vlan: left promiscuous mode [ 63.041251][ T28] audit: type=1400 audit(1770818167.280:1519): avc: denied { write } for pid=5631 comm="syz.3.593" path="socket:[11207]" dev="sockfs" ino=11207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.071973][ T28] audit: type=1400 audit(1770818167.340:1520): avc: denied { unlink } for pid=5643 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=3629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.131258][ T40] team0 (unregistering): Port device team_slave_1 removed [ 63.140901][ T40] team0 (unregistering): Port device team_slave_0 removed [ 63.232474][ T5464] chnl_net:caif_netlink_parms(): no params data found [ 63.297232][ T28] audit: type=1326 audit(1770818167.560:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 63.326155][ T28] audit: type=1326 audit(1770818167.560:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 63.340168][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.362011][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.369191][ T5464] bridge_slave_0: entered allmulticast mode [ 63.375874][ T5464] bridge_slave_0: entered promiscuous mode [ 63.391912][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.399378][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.406505][ T5464] bridge_slave_1: entered allmulticast mode [ 63.418702][ T5464] bridge_slave_1: entered promiscuous mode [ 63.452540][ T5666] __nla_validate_parse: 5 callbacks suppressed [ 63.452555][ T5666] netlink: 68 bytes leftover after parsing attributes in process `syz.2.596'. [ 63.481166][ T5672] netlink: 104 bytes leftover after parsing attributes in process `syz.5.597'. [ 63.515324][ T5666] netlink: 80 bytes leftover after parsing attributes in process `syz.2.596'. [ 63.527307][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.543802][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 63.554133][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.608832][ T5464] team0: Port device team_slave_0 added [ 63.609673][ T5464] team0: Port device team_slave_1 added [ 63.635440][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.643056][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.643106][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.643634][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.698644][ T5681] set_capacity_and_notify: 2 callbacks suppressed [ 63.698709][ T5681] loop5: detected capacity change from 0 to 1024 [ 63.704488][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.738276][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.805742][ T5464] hsr_slave_0: entered promiscuous mode [ 63.817134][ T5464] hsr_slave_1: entered promiscuous mode [ 63.817381][ T5464] debugfs: 'hsr0' already exists in 'hsr' [ 63.817392][ T5464] Cannot create hsr debugfs directory [ 63.862869][ T5695] loop3: detected capacity change from 0 to 1024 [ 64.005843][ T5709] netlink: 68 bytes leftover after parsing attributes in process `syz.1.605'. [ 64.006122][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 64.024509][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 64.286884][ T5464] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 64.296335][ T5464] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 64.300085][ T5464] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.306467][ T5464] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.315823][ T5708] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 64.444985][ T5753] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 64.468511][ T5464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.493089][ T5464] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.504900][ T5520] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.511969][ T5520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.536360][ T5520] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.543512][ T5520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.603283][ T5464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.611843][ T5763] netlink: 'syz.5.614': attribute type 1 has an invalid length. [ 64.631565][ T5464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.669029][ T5763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.695065][ T5763] bond2: (slave geneve2): making interface the new active one [ 64.722401][ T5763] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 64.811713][ T5781] netlink: 68 bytes leftover after parsing attributes in process `syz.2.617'. [ 64.831094][ T5464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.841430][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 64.854651][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 64.943310][ T5789] loop5: detected capacity change from 0 to 2048 [ 64.951485][ T5789] EXT4-fs: Ignoring removed bh option [ 65.085737][ T5464] veth0_vlan: entered promiscuous mode [ 65.089965][ T5464] veth1_vlan: entered promiscuous mode [ 65.106973][ T5808] loop2: detected capacity change from 0 to 1024 [ 65.109803][ T5464] veth0_macvtap: entered promiscuous mode [ 65.119043][ T5464] veth1_macvtap: entered promiscuous mode [ 65.125608][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.138851][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.146689][ T2163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.146745][ T2163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.146794][ T2163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.146891][ T2163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.296235][ T9] Process accounting resumed [ 65.461915][ T5824] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 65.931280][ T3315] EXT4-fs unmount: 9 callbacks suppressed [ 65.931296][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.057516][ T5868] loop7: detected capacity change from 0 to 512 [ 66.075363][ T5868] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 66.102678][ T5868] EXT4-fs error (device loop7): ext4_init_orphan_info:620: comm syz.7.641: orphan file block 0: bad magic [ 66.120976][ T5868] loop7: lost filesystem error report for type 5 error -117 [ 66.121141][ T5868] EXT4-fs (loop7): Remounting filesystem read-only [ 66.135591][ T5868] EXT4-fs (loop7): mount failed [ 66.259816][ T5865] netlink: 'syz.5.640': attribute type 1 has an invalid length. [ 66.948169][ T35] IPVS: starting estimator thread 0... [ 67.058041][ T5926] IPVS: using max 2352 ests per chain, 117600 per kthread [ 67.220804][ T5964] loop3: detected capacity change from 0 to 128 [ 67.326816][ T5974] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 67.968109][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 67.968124][ T28] audit: type=1400 audit(1770818172.230:1608): avc: denied { read } for pid=6031 comm="syz.2.682" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.017989][ T6032] vhci_hcd vhci_hcd.0: invalid port number 133 [ 68.024285][ T6032] vhci_hcd vhci_hcd.0: default hub control req: 1f05 v01ff i0085 l0 [ 68.035604][ T6029] netlink: 'syz.5.679': attribute type 1 has an invalid length. [ 68.056822][ T28] audit: type=1400 audit(1770818172.230:1609): avc: denied { open } for pid=6031 comm="syz.2.682" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.148026][ T28] audit: type=1400 audit(1770818172.260:1610): avc: denied { write } for pid=6031 comm="syz.2.682" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.170888][ T28] audit: type=1400 audit(1770818172.320:1611): avc: denied { create } for pid=6031 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 68.191547][ T28] audit: type=1400 audit(1770818172.360:1612): avc: denied { ioctl } for pid=6031 comm="syz.2.682" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.352324][ T6047] loop7: detected capacity change from 0 to 1024 [ 68.417854][ T6047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.420561][ T28] audit: type=1400 audit(1770818172.690:1613): avc: denied { read } for pid=6041 comm="syz.7.684" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.420587][ T28] audit: type=1400 audit(1770818172.690:1614): avc: denied { open } for pid=6041 comm="syz.7.684" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.653246][ T6063] Ÿë: port 2(veth0_to_bridge) entered blocking state [ 68.653301][ T6063] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 68.653535][ T6063] veth0_to_bridge: entered allmulticast mode [ 68.673092][ T28] audit: type=1400 audit(1770818172.850:1615): avc: denied { create } for pid=6054 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.694174][ T6063] veth0_to_bridge: entered promiscuous mode [ 68.728194][ T28] audit: type=1400 audit(1770818172.980:1616): avc: denied { getopt } for pid=6067 comm="syz.2.692" lport=48365 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.852568][ T28] audit: type=1400 audit(1770818173.120:1617): avc: denied { allowed } for pid=6076 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.942461][ T6083] __nla_validate_parse: 17 callbacks suppressed [ 68.942476][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 68.942496][ T6083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 69.089779][ T6088] netlink: 68 bytes leftover after parsing attributes in process `syz.1.699'. [ 69.090066][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 69.113158][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 69.250866][ T5464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.391222][ T6097] loop1: detected capacity change from 0 to 32768 [ 69.463034][ T6109] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 69.490831][ T6109] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 69.515800][ T6109] veth0_to_bridge: entered allmulticast mode [ 69.562308][ T6109] veth0_to_bridge: entered promiscuous mode [ 69.601308][ T6114] Ÿë: port 2(veth0_to_team) entered blocking state [ 69.609583][ T6116] netlink: 68 bytes leftover after parsing attributes in process `syz.1.710'. [ 69.620149][ T6114] Ÿë: port 2(veth0_to_team) entered disabled state [ 69.626913][ T6114] veth0_to_team: entered allmulticast mode [ 69.633210][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 69.643928][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 69.662996][ T6114] veth0_to_team: entered promiscuous mode [ 69.695847][ T6120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.711'. [ 69.725599][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 69.777042][ T6128] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.784899][ T6112] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 69.857454][ T6131] loop5: detected capacity change from 0 to 4096 [ 69.893009][ T6131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.017942][ T4060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.192418][ T6160] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 70.192506][ T6166] loop3: detected capacity change from 0 to 1024 [ 70.199568][ T6160] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 70.243772][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.244626][ T6160] veth0_to_bridge: entered allmulticast mode [ 70.247009][ T6160] veth0_to_bridge: entered promiscuous mode [ 70.274178][ T6173] Ÿë: port 2(veth0_to_team) entered blocking state [ 70.290262][ T6173] Ÿë: port 2(veth0_to_team) entered disabled state [ 70.290336][ T6173] veth0_to_team: entered allmulticast mode [ 70.290896][ T6173] veth0_to_team: entered promiscuous mode [ 70.647263][ T6194] batman_adv: batadv0: Adding interface: dummy0 [ 70.647326][ T6194] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.647413][ T6194] batman_adv: batadv0: Interface activated: dummy0 [ 70.650081][ T6194] batadv0: mtu less than device minimum [ 70.650784][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.705266][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.705971][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.707033][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.707489][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.708167][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.760143][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.760720][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.781784][ T6194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.035969][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.063729][ T6215] process 'syz.3.741' launched './file1' with NULL argv: empty string added [ 71.233030][ T6222] loop1: detected capacity change from 0 to 1024 [ 71.259734][ T6222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 71.282559][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 71.380552][ T6236] loop1: detected capacity change from 0 to 1024 [ 71.390862][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.704203][ T6249] loop7: detected capacity change from 0 to 1024 [ 71.722396][ T6249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.821602][ T6266] loop2: detected capacity change from 0 to 1024 [ 71.829468][ T6266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.868193][ T6266] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.871187][ T6266] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.756: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.872084][ T6266] EXT4-fs (loop2): Remounting filesystem read-only [ 71.894765][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.294485][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.551701][ T5464] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.630072][ T6329] loop3: detected capacity change from 0 to 1024 [ 72.676039][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.813939][ T6338] netlink: 'syz.5.776': attribute type 1 has an invalid length. [ 73.210514][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 73.210529][ T28] audit: type=1400 audit(1770818177.480:1676): avc: denied { map } for pid=6342 comm="syz.5.783" path="socket:[13521]" dev="sockfs" ino=13521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 73.252837][ T40] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.252882][ T40] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.252944][ T40] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.252980][ T40] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.457500][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.509631][ T6353] loop3: detected capacity change from 0 to 1024 [ 73.568579][ T6353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.601262][ T6353] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 73.628241][ T6353] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.649024][ T6353] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.649024][ T6353] [ 73.672635][ T6353] EXT4-fs (loop3): Total free blocks count 0 [ 73.680339][ T6353] EXT4-fs (loop3): Free/Dirty block details [ 73.690311][ T6353] EXT4-fs (loop3): free_blocks=2588934144 [ 73.696332][ T6353] EXT4-fs (loop3): dirty_blocks=80 [ 73.701588][ T6353] EXT4-fs (loop3): Block reservation details [ 73.709834][ T6353] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 73.716018][ T6358] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28 [ 73.934487][ T6388] loop1: detected capacity change from 0 to 1024 [ 73.985882][ T28] audit: type=1326 audit(1770818178.250:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.010255][ T28] audit: type=1326 audit(1770818178.280:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.010284][ T28] audit: type=1326 audit(1770818178.280:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.010354][ T28] audit: type=1326 audit(1770818178.280:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.011961][ T28] audit: type=1326 audit(1770818178.280:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.011986][ T28] audit: type=1326 audit(1770818178.280:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.012010][ T28] audit: type=1326 audit(1770818178.280:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.012111][ T28] audit: type=1326 audit(1770818178.280:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.012135][ T28] audit: type=1326 audit(1770818178.280:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f02d9b7bf79 code=0x7ffc0000 [ 74.017632][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.383805][ T6405] __nla_validate_parse: 31 callbacks suppressed [ 74.383869][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 74.390402][ T6405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.421738][ T6405] bond2: option ad_select: unable to set because the bond device is up [ 74.609056][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.803'. [ 74.609416][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 74.654233][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 74.742688][ T6421] loop2: detected capacity change from 0 to 512 [ 74.784761][ T6421] EXT4-fs (loop2): 1 orphan inode deleted [ 74.790897][ T6428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6428 comm=syz.5.804 [ 74.797673][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.816028][ T5520] EXT4-fs error (device loop2): ext4_release_dquot:7027: comm kworker/u8:14: Failed to release dquot type 1 [ 74.827723][ T5520] loop2: lost filesystem error report for type 5 error -117 [ 74.828211][ T6421] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.853360][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.921288][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.026632][ T6424] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 75.158933][ T6440] loop3: detected capacity change from 0 to 1764 [ 75.187475][ T6442] netlink: 68 bytes leftover after parsing attributes in process `syz.2.812'. [ 75.216926][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 75.321411][ T6449] netlink: 68 bytes leftover after parsing attributes in process `syz.2.816'. [ 75.334466][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 75.347012][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 75.521343][ T5527] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.581236][ T5527] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.640805][ T5527] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.762271][ T5527] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.808997][ T6498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.826'. [ 75.910156][ T6477] chnl_net:caif_netlink_parms(): no params data found [ 76.016616][ T5527] bridge_slave_1: left allmulticast mode [ 76.028615][ T5527] bridge_slave_1: left promiscuous mode [ 76.034348][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.077403][ T5527] bridge_slave_0: left allmulticast mode [ 76.090777][ T5527] bridge_slave_0: left promiscuous mode [ 76.106190][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.131180][ T5527] veth0_to_team: left allmulticast mode [ 76.174923][ T6535] loop5: detected capacity change from 0 to 8192 [ 76.182897][ T5527] veth0_to_team: left promiscuous mode [ 76.194425][ T5527] Ÿë: port 2(veth0_to_team) entered disabled state [ 76.201665][ T5527] veth0_to_bridge: left allmulticast mode [ 76.204609][ T6532] loop1: detected capacity change from 0 to 1764 [ 76.207446][ T5527] veth0_to_bridge: left promiscuous mode [ 76.219597][ T5527] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 76.292821][ T6538] loop2: detected capacity change from 0 to 128 [ 76.312269][ T6538] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.326668][ T6538] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.361217][ T6544] loop5: detected capacity change from 0 to 512 [ 76.367813][ T6544] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.374562][ T6544] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.385597][ T6544] EXT4-fs (loop5): 1 truncate cleaned up [ 76.391763][ T6544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.409929][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.419910][ T4060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.431669][ T5527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.448986][ T5527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.466776][ T5527] bond0 (unregistering): Released all slaves [ 76.493739][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.510297][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.519535][ T6477] bridge_slave_0: entered allmulticast mode [ 76.532503][ T6477] bridge_slave_0: entered promiscuous mode [ 76.548953][ T5527] hsr_slave_0: left promiscuous mode [ 76.557056][ T5527] hsr_slave_1: left promiscuous mode [ 76.566875][ T5527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.578162][ T5527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.589109][ T5527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.598203][ T5527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.609015][ T5527] veth1_macvtap: left promiscuous mode [ 76.614513][ T5527] veth0_macvtap: left promiscuous mode [ 76.620996][ T5527] veth1_vlan: left promiscuous mode [ 76.626378][ T5527] veth0_vlan: left promiscuous mode [ 76.732037][ T5527] team0 (unregistering): Port device team_slave_1 removed [ 76.753811][ T5527] team0 (unregistering): Port device team_slave_0 removed [ 76.774648][ T6559] loop5: detected capacity change from 0 to 1024 [ 76.828751][ T6559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.836226][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.891795][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.940091][ T6563] loop3: detected capacity change from 0 to 2048 [ 76.946934][ T6477] bridge_slave_1: entered allmulticast mode [ 76.991373][ T6477] bridge_slave_1: entered promiscuous mode [ 77.000457][ T4060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.042953][ T6563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.070719][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.155938][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.177216][ T56] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 77.218219][ T6477] team0: Port device team_slave_0 added [ 77.225673][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 77.234189][ T6587] loop1: detected capacity change from 0 to 4096 [ 77.245518][ T6477] team0: Port device team_slave_1 added [ 77.267173][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.267173][ T56] [ 77.291668][ T56] EXT4-fs (loop3): Total free blocks count 0 [ 77.297674][ T56] EXT4-fs (loop3): Free/Dirty block details [ 77.306924][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.321943][ T6593] loop2: detected capacity change from 0 to 1024 [ 77.336619][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.362858][ T56] EXT4-fs (loop3): free_blocks=2415919504 [ 77.378198][ T56] EXT4-fs (loop3): dirty_blocks=16 [ 77.383318][ T56] EXT4-fs (loop3): Block reservation details [ 77.389824][ T6593] EXT4-fs: Ignoring removed nobh option [ 77.395719][ T6587] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 77.406746][ T56] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 77.415833][ T6587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.431679][ T6593] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4842c018, mo2=0102] [ 77.445120][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.458989][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.476557][ T6593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.508670][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.515146][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.554788][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.560153][ T6613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.601354][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.632345][ T6613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.687133][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.689998][ T6477] hsr_slave_0: entered promiscuous mode [ 77.696180][ T6613] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.704325][ T6477] hsr_slave_1: entered promiscuous mode [ 77.718565][ T6477] debugfs: 'hsr0' already exists in 'hsr' [ 77.726685][ T6477] Cannot create hsr debugfs directory [ 77.821341][ T6477] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 77.854400][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.865225][ T6477] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 77.940024][ T6477] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.005415][ T6477] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.111045][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.130582][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.232188][ T5520] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.239323][ T5520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.248146][ T5520] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.255306][ T5520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.341739][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.515448][ T6707] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.598817][ T6477] veth0_vlan: entered promiscuous mode [ 78.607551][ T6648] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 78.629037][ T6477] veth1_vlan: entered promiscuous mode [ 78.863773][ T6477] veth0_macvtap: entered promiscuous mode [ 78.872184][ T6477] veth1_macvtap: entered promiscuous mode [ 78.882669][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.893348][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.946179][ T5527] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.986616][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 78.986630][ T28] audit: type=1400 audit(1770818183.250:1705): avc: denied { mounton } for pid=6749 comm="syz.2.873" path="/209/file0" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 79.030370][ T5527] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.056091][ T5527] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.079642][ T28] audit: type=1400 audit(1770818183.330:1706): avc: denied { mounton } for pid=6477 comm="syz-executor" path="/root/syzkaller.nMJzAd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 79.109823][ T5527] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.232490][ T6765] loop2: p2 < > p3 p4 < > [ 79.248924][ T6765] loop2: partition table partially beyond EOD, truncated [ 79.264922][ T6765] loop2: p2 start 328960 is beyond EOD, truncated [ 79.275953][ T6765] loop2: p3 start 33572980 is beyond EOD, truncated [ 79.294692][ T2998] loop2: p2 < > p3 p4 < > [ 79.306942][ T2998] loop2: partition table partially beyond EOD, truncated [ 79.316697][ T2998] loop2: p2 start 328960 is beyond EOD, truncated [ 79.323465][ T2998] loop2: p3 start 33572980 is beyond EOD, truncated [ 79.384107][ T5595] udevd[5595]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 79.431853][ T5595] udevd[5595]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 79.467577][ T28] audit: type=1400 audit(1770818183.730:1707): avc: denied { watch_reads } for pid=6790 comm="syz.1.879" path="/164" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.510657][ T6791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.553501][ T6791] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.566332][ T6798] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 79.589391][ T6796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.664324][ T28] audit: type=1400 audit(1770818183.930:1708): avc: denied { setopt } for pid=6789 comm="syz.8.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.670115][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.692762][ T6807] wireguard0: entered promiscuous mode [ 79.700824][ T6810] __nla_validate_parse: 9 callbacks suppressed [ 79.700838][ T6810] netlink: 68 bytes leftover after parsing attributes in process `syz.5.884'. [ 79.723754][ T6807] wireguard0: entered allmulticast mode [ 79.773781][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 79.838162][ T6804] netlink: 68 bytes leftover after parsing attributes in process `syz.5.884'. [ 80.091206][ T6832] netlink: 68 bytes leftover after parsing attributes in process `syz.2.892'. [ 80.100530][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 80.110321][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 80.238161][ T28] audit: type=1400 audit(1770818184.500:1709): avc: denied { relabelfrom } for pid=6843 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.302770][ T28] audit: type=1400 audit(1770818184.500:1710): avc: denied { relabelto } for pid=6843 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 80.350773][ T6477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.407429][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.8.899'. [ 80.465186][ T6856] netlink: 68 bytes leftover after parsing attributes in process `syz.8.901'. [ 80.476612][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.8.901'. [ 80.497712][ T6856] netlink: 68 bytes leftover after parsing attributes in process `syz.8.901'. [ 80.760549][ T28] audit: type=1400 audit(1770818185.020:1711): avc: denied { name_connect } for pid=6876 comm="syz.3.910" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 80.838738][ T6885] netlink: 'syz.3.912': attribute type 8 has an invalid length. [ 80.898749][ T6885] bond0: entered promiscuous mode [ 80.931366][ T6885] bond_slave_0: entered promiscuous mode [ 80.946097][ T6885] bond_slave_1: entered promiscuous mode [ 80.954210][ T6885] gretap0: entered promiscuous mode [ 80.961312][ T6885] bond0: left promiscuous mode [ 80.966365][ T6885] bond_slave_0: left promiscuous mode [ 80.972361][ T6885] bond_slave_1: left promiscuous mode [ 80.981113][ T6885] gretap0: left promiscuous mode [ 81.009014][ T6892] syzkaller0: refused to change device tx_queue_len [ 81.216628][ T6908] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 81.236157][ T6908] 8021q: adding VLAN 0 to HW filter on device bond6 [ 81.289371][ T6908] bond6: (slave geneve2): making interface the new active one [ 81.306288][ T6908] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 81.321820][ T28] audit: type=1400 audit(1770818185.590:1712): avc: denied { create } for pid=6921 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.359845][ T6926] set_capacity_and_notify: 4 callbacks suppressed [ 81.359883][ T6926] loop2: detected capacity change from 0 to 512 [ 81.373830][ T28] audit: type=1400 audit(1770818185.620:1713): avc: denied { write } for pid=6921 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.394257][ T6926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.419468][ T6926] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.434848][ T6926] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.926: inode #15: comm syz.2.926: iget: illegal inode # [ 81.447710][ T6926] loop2: lost filesystem error report for type 5 error -117 [ 81.449729][ T6926] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.926: couldn't read orphan inode 15 (err -117) [ 81.458190][ T6931] loop3: detected capacity change from 0 to 512 [ 81.469072][ T6926] loop2: lost filesystem error report for type 5 error -117 [ 81.478386][ T6926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.536077][ T28] audit: type=1400 audit(1770818185.800:1714): avc: denied { connect } for pid=6934 comm="syz.5.931" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.575084][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.170539][ T6967] loop1: detected capacity change from 0 to 512 [ 82.185471][ T6967] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.205686][ T6967] EXT4-fs error (device loop1): ext4_init_orphan_info:620: comm syz.1.944: orphan file block 0: bad magic [ 82.220693][ T6967] loop1: lost filesystem error report for type 5 error -117 [ 82.221096][ T6967] EXT4-fs (loop1): Remounting filesystem read-only [ 82.236629][ T6967] EXT4-fs (loop1): mount failed [ 82.588880][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.598914][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.768509][ T6993] loop5: detected capacity change from 0 to 512 [ 82.799460][ T6993] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.807458][ T6993] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.816563][ T6993] EXT4-fs error (device loop5): ext4_acquire_dquot:6991: comm syz.5.954: Failed to acquire dquot type 1 [ 82.828787][ T6993] loop5: lost filesystem error report for type 5 error -117 [ 82.837952][ T6993] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.954: corrupted inode contents [ 82.881358][ T6993] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.881588][ T6993] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.954: mark_inode_dirty error [ 82.908240][ T6993] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.911486][ T6993] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.954: corrupted inode contents [ 82.932692][ T6993] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.940020][ T6993] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.954: mark_inode_dirty error [ 82.960375][ T6993] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.964226][ T6993] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.954: corrupted inode contents [ 82.985485][ T6993] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.985709][ T6993] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 83.013049][ T6993] loop5: lost filesystem error report for type 5 error -117 [ 83.014290][ T6993] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.954: corrupted inode contents [ 83.033656][ T6993] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.033922][ T6993] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.954: mark_inode_dirty error [ 83.054429][ T6993] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.056804][ T6993] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 83.075234][ T6993] loop5: lost filesystem error report for type 5 error -117 [ 83.076453][ T6993] EXT4-fs (loop5): 1 truncate cleaned up [ 83.095269][ T6993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 83.165887][ T4060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 83.295376][ T7025] vhci_hcd vhci_hcd.3: invalid port number 224 [ 83.335101][ T7033] loop3: detected capacity change from 0 to 512 [ 83.390184][ T7033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.411073][ T7033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.433763][ T7033] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.495907][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.534078][ T7051] loop3: detected capacity change from 0 to 512 [ 83.564312][ T7051] xt_hashlimit: size too large, truncated to 1048576 [ 84.117423][ T6849] IPVS: starting estimator thread 0... [ 84.200817][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 84.200833][ T28] audit: type=1400 audit(1770818188.470:1805): avc: denied { map } for pid=7089 comm="syz.5.992" path="socket:[16830]" dev="sockfs" ino=16830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 84.230614][ T7080] IPVS: using max 2784 ests per chain, 139200 per kthread [ 84.268508][ T28] audit: type=1400 audit(1770818188.530:1806): avc: denied { mount } for pid=7095 comm="syz.5.994" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.332648][ T7102] loop1: detected capacity change from 0 to 512 [ 84.356268][ T7102] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 84.371987][ T7102] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.996: iget: bad i_size value: 12154757448730 [ 84.384636][ T7102] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 84.384845][ T7102] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.996: couldn't read orphan inode 13 (err -117) [ 84.405795][ T7102] loop1: lost filesystem error report for type 5 error -117 [ 84.406537][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.437160][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.188609][ T7155] __nla_validate_parse: 47 callbacks suppressed [ 85.188703][ T7155] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1013'. [ 85.205413][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1013'. [ 85.250114][ T7159] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 85.262248][ T7159] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 85.391176][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.398434][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.413300][ T7159] batman_adv: batadv0: Interface deactivated: dummy0 [ 85.491344][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.519638][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.614244][ T2163] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.623171][ T2163] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.638593][ T2163] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.641984][ T7171] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1018'. [ 85.657761][ T2163] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.687096][ T28] audit: type=1400 audit(1770818189.940:1807): avc: denied { ioctl } for pid=7170 comm="syz.5.1019" path="socket:[15986]" dev="sockfs" ino=15986 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.700173][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 85.739533][ T7178] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1020'. [ 85.749139][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 85.760622][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 85.769589][ T7178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1020'. [ 85.820937][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 85.904966][ T28] audit: type=1400 audit(1770818190.170:1808): avc: denied { ioctl } for pid=7184 comm="syz.1.1023" path="socket:[16028]" dev="sockfs" ino=16028 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.993025][ T7194] loop8: detected capacity change from 0 to 4096 [ 86.030440][ T7194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.052333][ T7195] loop2: detected capacity change from 0 to 1764 [ 86.239926][ T6477] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.458562][ T7213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1031'. [ 86.532010][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.559424][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.645970][ T7231] xt_hashlimit: size too large, truncated to 1048576 [ 87.039676][ T7244] loop3: detected capacity change from 0 to 512 [ 87.069983][ T7244] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1040: inode has both inline data and extents flags [ 87.091783][ T28] audit: type=1400 audit(1770818191.360:1809): avc: denied { bind } for pid=7249 comm="syz.8.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.112509][ T7244] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.118074][ T7244] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1040: couldn't read orphan inode 15 (err -117) [ 87.139101][ T7244] loop3: lost filesystem error report for type 5 error -117 [ 87.141197][ T7244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.230317][ T28] audit: type=1400 audit(1770818191.500:1810): avc: denied { write } for pid=7243 comm="syz.3.1040" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.259153][ T28] audit: type=1400 audit(1770818191.520:1811): avc: denied { sqpoll } for pid=7243 comm="syz.3.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.321945][ T7261] loop2: detected capacity change from 0 to 512 [ 87.340200][ T7261] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1055: inode has both inline data and extents flags [ 87.354060][ T7261] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.354221][ T7261] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1055: couldn't read orphan inode 15 (err -117) [ 87.366600][ T7265] vhci_hcd vhci_hcd.0: invalid port number 133 [ 87.377444][ T7261] loop2: lost filesystem error report for type 5 error -117 [ 87.382352][ T7261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.438138][ T7265] vhci_hcd vhci_hcd.0: default hub control req: 1f05 v01ff i0085 l0 [ 87.470100][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.510273][ T28] audit: type=1400 audit(1770818191.780:1812): avc: denied { bind } for pid=7269 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.541730][ T28] audit: type=1400 audit(1770818191.800:1813): avc: denied { read } for pid=7269 comm="syz.3.1046" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.565740][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.886704][ T7304] netlink: 'syz.8.1061': attribute type 2 has an invalid length. [ 88.036061][ T7320] loop1: detected capacity change from 0 to 1024 [ 88.079152][ T7320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.100830][ T28] audit: type=1326 audit(1770818192.370:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.5.1070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96f08bf79 code=0x7ffc0000 [ 88.130048][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.373163][ T7364] vhci_hcd vhci_hcd.4: invalid port number 254 [ 88.390608][ T7366] net_ratelimit: 10 callbacks suppressed [ 88.390620][ T7366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.505957][ T7370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.072139][ T7408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.079525][ T7408] IPv6: NLM_F_CREATE should be set when creating new route [ 89.526980][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 89.526993][ T28] audit: type=1400 audit(1770818193.790:1830): avc: denied { read } for pid=7445 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.569348][ T28] audit: type=1400 audit(1770818193.840:1831): avc: denied { mount } for pid=7451 comm="syz.8.1117" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.591410][ T28] audit: type=1400 audit(1770818193.840:1832): avc: denied { watch } for pid=7451 comm="syz.8.1117" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 89.670122][ T7460] loop8: detected capacity change from 0 to 128 [ 90.444003][ T5511] ================================================================== [ 90.452087][ T5511] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 90.461535][ T5511] [ 90.463842][ T5511] write to 0xffff88813d85b1c4 of 6 bytes by task 7460 on cpu 0: [ 90.471444][ T5511] copy_folio_from_iter_atomic+0x75f/0x1170 [ 90.477320][ T5511] generic_perform_write+0x2c1/0x490 [ 90.482591][ T5511] __generic_file_write_iter+0x9e/0x120 [ 90.488112][ T5511] generic_file_write_iter+0x8d/0x310 [ 90.493462][ T5511] iter_file_splice_write+0x6bc/0xa80 [ 90.498817][ T5511] direct_splice_actor+0x156/0x2a0 [ 90.503924][ T5511] splice_direct_to_actor+0x311/0x670 [ 90.509298][ T5511] do_splice_direct+0x119/0x1a0 [ 90.514129][ T5511] do_sendfile+0x382/0x650 [ 90.518531][ T5511] __x64_sys_sendfile64+0x105/0x150 [ 90.523711][ T5511] x64_sys_call+0x2dc4/0x3020 [ 90.528369][ T5511] do_syscall_64+0x12c/0x370 [ 90.532962][ T5511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.538835][ T5511] [ 90.541134][ T5511] read to 0xffff88813d85b000 of 512 bytes by task 5511 on cpu 1: [ 90.548821][ T5511] copy_folio_from_iter_atomic+0x75f/0x1170 [ 90.554697][ T5511] generic_perform_write+0x2c1/0x490 [ 90.559956][ T5511] shmem_file_write_iter+0xc5/0xf0 [ 90.565047][ T5511] lo_rw_aio+0x67d/0x730 [ 90.569269][ T5511] loop_process_work+0x56c/0xac0 [ 90.574197][ T5511] loop_workfn+0x31/0x40 [ 90.578423][ T5511] process_scheduled_works+0x4cd/0x9d0 [ 90.583859][ T5511] worker_thread+0x6bc/0x8b0 [ 90.588436][ T5511] kthread+0x22a/0x280 [ 90.592487][ T5511] ret_from_fork+0x150/0x360 [ 90.597075][ T5511] ret_from_fork_asm+0x1a/0x30 [ 90.601829][ T5511] [ 90.604133][ T5511] Reported by Kernel Concurrency Sanitizer on: [ 90.610256][ T5511] CPU: 1 UID: 0 PID: 5511 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 90.619783][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.629813][ T5511] Workqueue: loop8 loop_workfn [ 90.634573][ T5511] ==================================================================